Page 2 of 2 FirstFirst 12
Results 11 to 16 of 16

Thread: [SOLVED] nessage store not showing recent messages

  1. #11
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,566
    Rep Power
    57

    Default

    Quote Originally Posted by bluebriarrose View Post
    Hi.. thanks for the reply i have changed the mysql password using the command "zmmypasswd --root newpass" but the thing is im still able to login via guest user of mysql using the command "mysql"... i want to disable guest login and want to allow only root login for the mysql....
    also can i change the user of mysql from root to some other?????
    What are you actually trying to achieve by making these changes?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  2. #12
    bluebriarrose is offline Active Member
    Join Date
    Aug 2009
    Posts
    48
    Rep Power
    6

    Default

    Quote Originally Posted by phoenix View Post
    What are you actually trying to achieve by making these changes?
    hi phoenix, thanks for ur reply....

    Im trying to prevent unauthorized login and add extra level of security for mysql... so that hackers dont login into zimbra mysql db and get access to the entire data...
    Also if default zimbra and root user login is there for mysql than a hacker can easily predict and login into the DB.

    Hope your gettin my point...


    Thanks

  3. #13
    uxbod's Avatar
    uxbod is offline Moderator
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    24

    Default

    By default I believe MySQL is bound to the loopback address. So unless they gained access to the CLI then how would they cause any damage ?

  4. #14
    bluebriarrose is offline Active Member
    Join Date
    Aug 2009
    Posts
    48
    Rep Power
    6

    Default

    thats the point if he gets through the CLI he can easily access zimbra DB by just hitting "mysql" thats it... but if guest login is disabled at that point of time he is forceful to login via a user ie using the command: "mysql -u user -p"

    try this....
    su -zimbra
    mysql
    mysql> show databases;
    now this will work... which shouldnt happen...

    i need it to be like this:
    su - zimbra
    mysql
    Access Denied for guest login
    (so now he can access via) mysql -u user -p
    pass:

  5. #15
    uxbod's Avatar
    uxbod is offline Moderator
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    24

    Default

    I do appreciate what you are saying; but if somebody has managed to get to the CLI that would be the least of my worries ... especially if they get in as root. Well and truly p0wned

  6. #16
    bluebriarrose is offline Active Member
    Join Date
    Aug 2009
    Posts
    48
    Rep Power
    6

    Default

    yes.. thanks

Page 2 of 2 FirstFirst 12

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Re-creating the spam training e-mail account
    By richard-hdd in forum Administrators
    Replies: 21
    Last Post: 03-20-2012, 07:34 AM
  2. Replies: 2
    Last Post: 08-03-2009, 05:55 AM
  3. New messages not showing up in outlook
    By bersrker in forum Zimbra Connector for Outlook
    Replies: 4
    Last Post: 01-16-2007, 08:17 AM
  4. Delete messages from store
    By claros in forum Administrators
    Replies: 2
    Last Post: 10-21-2006, 06:45 PM
  5. Spam assassain not traiing properly!
    By Mike T in forum Administrators
    Replies: 1
    Last Post: 10-09-2006, 01:34 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •