Discussion :

[zekabyle]

Bonjour,

Je ne savais pas où poster mon message alors je l'ai posté ici.

J'ai mysql qui est installé sur un serveur red hat tikanga.
J'arrive à me connecter à mysql quand je suis dans le serveur en local.

Je souhaite me connecter à distance depuis un client sur une machine windows et pour ce faire, j'ai modifié le fichier de config de mysql pour commenter le bind-address et le skip networking puis j'ai fait un iptables pour accepter le port 3306.

J'ai bien sûr redémarré mysql après avoir fait tout ça.

Pour vérifier que mysql est bien en train de tourner, je fais bien un ps:

[root@origine mysql]# ps
PID TTY TIME CMD
3709 pts/0 00:00:01 bash
3881 pts/0 00:00:00 top
4224 pts/0 00:00:00 mysqld_safe
4412 pts/0 00:00:00 ps

puis quand je me connecte avec un client à l'adresse 172.16.46.220 du serveur à partir de ma machine, j'obtiens l'erreur MySQL Error Number 2003
can't connect to Mysql server on 172.16.46.220.

Pareil quand je mets origine (nom du serveur) à la place de l'IP.

Je fais sur le serveur un netstat -plunt et voici le résultat:

[root@origine mysql]# netstat -plunt
Connexions Internet actives (seulement serveurs)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:2208 0.0.0.0:* LISTEN 1762/hpiod
tcp 0 0 0.0.0.0:904 0.0.0.0:* LISTEN 1570/rpc.statd
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 4332/mysqld
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 1536/portmap
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 1779/cupsd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1969/sendmail: acce
tcp 0 0 127.0.0.1:2207 0.0.0.0:* LISTEN 1767/python
tcp 0 0 :::22 :::* LISTEN 1793/sshd
udp 0 0 0.0.0.0:32768 0.0.0.0:* 2092/avahi-daemon:
udp 0 0 0.0.0.0:898 0.0.0.0:* 1570/rpc.statd
udp 0 0 0.0.0.0:901 0.0.0.0:* 1570/rpc.statd
udp 0 0 0.0.0.0:5353 0.0.0.0:* 2092/avahi-daemon:
udp 0 0 0.0.0.0:111 0.0.0.0:* 1536/portmap
udp 0 0 0.0.0.0:631 0.0.0.0:* 1779/cupsd
udp 0 0 :::32769 :::* 2092/avahi-daemon:
udp 0 0 :::5353 :::* 2092/avahi-daemon:

A partir de ma machine, je fais un telnet et la connexion ne peut s'établir:

telnet 172.46.16.220 3306
Connexion à 172.46.16.220...Impossible d'ouvrir une connexion à l'hôte, sur le p
ort 3306: Échec lors de la connexion

Quand je fais un ping, des paquets sont bien reçus par le server.

Dans mysql, j'ai fait un grant pour les privilèges afin que l'on puisse accéder à la base depuis n'importe quel hôte en utilisant le '%' soit

Code :

Sélectionner tout - Visualiser dans une fenêtre à part

1
2
3
4
5
6
 
CREATE USER 'example'@'%' IDENTIFIED BY '****';
GRANT USAGE ON * . * TO 'example'@'%' IDENTIFIED BY '****' WITH MAX_QUERIES_PER_HOUR 0
MAX_CONNECTIONS_PER_HOUR 0 MAX_UPDATES_PER_HOUR 0 MAX_USER_CONNECTIONS 0 ;
CREATE DATABASE IF NOT EXISTS `example` ;
GRANT ALL PRIVILEGES ON `example` . * TO 'example'@'%';

Voilà mon fichier de config

Code :

Sélectionner tout - Visualiser dans une fenêtre à part

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
 
# Example MySQL config file for large systems.
#
# This is for a large system with memory = 512M where the system runs mainly
# MySQL.
#
# You can copy this file to
# /etc/my.cnf to set global options,
# mysql-data-dir/my.cnf to set server-specific options (in this
# installation this directory is /var/lib/mysql) or
# ~/.my.cnf to set user-specific options.
#
# In this file, you can use all long options that a program supports.
# If you want to know which options a program supports, run the program
# with the "--help" option.
 
# The following options will be passed to all MySQL clients
[client]
#password	= your_password
port		= 3306
socket		= /var/lib/mysql/mysql.sock
 
# Here follows entries for some specific programs
 
# The MySQL server
[mysqld]
port		= 3306
#bind-address = 127.0.0.1
socket		= /var/lib/mysql/mysql.sock
#skip-locking
key_buffer_size = 256M
max_allowed_packet = 1M
table_open_cache = 256
sort_buffer_size = 1M
read_buffer_size = 1M
read_rnd_buffer_size = 4M
myisam_sort_buffer_size = 64M
thread_cache_size = 8
query_cache_size= 16M
# Try number of CPU's*2 for thread_concurrency
thread_concurrency = 8
 
 
 
 
# Don't listen on a TCP/IP port at all. This can be a security enhancement,
# if all processes that need to connect to mysqld run on the same host.
# All interaction with mysqld must be made via Unix sockets or named pipes.
# Note that using this option without enabling named pipes on Windows
# (via the "enable-named-pipe" option) will render mysqld useless!
# 
#skip-networking
 
# Replication Master Server (default)
# binary logging is required for replication
log-bin=mysql-bin
 
# binary logging format - mixed recommended
binlog_format=mixed
 
# required unique id between 1 and 2^32 - 1
# defaults to 1 if master-host is not set
# but will not function as a master if omitted
server-id	= 1
 
# Replication Slave (comment out master section to use this)
#
# To configure this host as a replication slave, you can choose between
# two methods :
#
# 1) Use the CHANGE MASTER TO command (fully described in our manual) -
#    the syntax is:
#
#    CHANGE MASTER TO MASTER_HOST=<host>, MASTER_PORT=<port>,
#    MASTER_USER=<user>, MASTER_PASSWORD=<password> ;
#
#    where you replace <host>, <user>, <password> by quoted strings and
#    <port> by the master's port number (3306 by default).
#
#    Example:
#
#    CHANGE MASTER TO MASTER_HOST='125.564.12.1', MASTER_PORT=3306,
#    MASTER_USER='joe', MASTER_PASSWORD='secret';
#
# OR
#
# 2) Set the variables below. However, in case you choose this method, then
#    start replication for the first time (even unsuccessfully, for example
#    if you mistyped the password in master-password and the slave fails to
#    connect), the slave will create a master.info file, and any later
#    change in this file to the variables' values below will be ignored and
#    overridden by the content of the master.info file, unless you shutdown
#    the slave server, delete master.info and restart the slaver server.
#    For that reason, you may want to leave the lines below untouched
#    (commented) and instead use CHANGE MASTER TO (see above)
#
# required unique id between 2 and 2^32 - 1
# (and different from the master)
# defaults to 2 if master-host is set
# but will not function as a slave if omitted
#server-id       = 2
#
# The replication master for this slave - required
#master-host     =   <hostname>
#
# The username the slave will use for authentication when connecting
# to the master - required
#master-user     =   <username>
#
# The password the slave will authenticate with when connecting to
# the master - required
#master-password =   <password>
#
# The port the master is listening on.
# optional - defaults to 3306
#master-port     =  <port>
#
# binary logging - not required for slaves, but recommended
#log-bin=mysql-bin
 
# Point the following paths to different dedicated disks
#tmpdir		= /tmp/		
#log-update 	= /path-to-dedicated-directory/hostname
 
# Uncomment the following if you are using InnoDB tables
#innodb_data_home_dir = /var/lib/mysql/
#innodb_data_file_path = ibdata1:10M:autoextend
#innodb_log_group_home_dir = /var/lib/mysql/
# You can set .._buffer_pool_size up to 50 - 80 %
# of RAM but beware of setting memory usage too high
#innodb_buffer_pool_size = 256M
#innodb_additional_mem_pool_size = 20M
# Set .._log_file_size to 25 % of buffer pool size
#innodb_log_file_size = 64M
#innodb_log_buffer_size = 8M
#innodb_flush_log_at_trx_commit = 1
#innodb_lock_wait_timeout = 50
 
[mysqldump]
quick
max_allowed_packet = 16M
 
[mysql]
no-auto-rehash
# Remove the next comment character if you are not familiar with SQL
#safe-updates
 
[myisamchk]
key_buffer_size = 128M
sort_buffer_size = 128M
read_buffer = 2M
write_buffer = 2M
 
[mysqlhotcopy]
interactive-timeout

Je sollicite votre aide pour m'aider à résoudre ce problème que je ne comprends pas.

Pourtant sur le net j'ai cherché et je n'ai pas trouvé ce qui ressemblait à mon problème.

Merci d'avance pour votre aide

[zekabyle]

J'ai trouvé le problème :
faut éditer /etc/sysconfig/iptables pour ajouter la ligne:

Code :

Sélectionner tout - Visualiser dans une fenêtre à part

-A RH-Firewall-1-INPUT -p tcp --dport 3306 -j ACCEPT