Hi,

I need remote MySQL access setup for a client on a dedicated server. I am aware of the security issues but this client owns the server and wishes this. The question is how do I make this happen. I have plesk 5.0.5 rpm version running. I now you have to connect to MySQL but what do you do after that!

Paul Hughes
www.ukhost4u.com

Well he needs a program to view the database (unless it's a script that's utilizing the mysql database remotely)

The customer is using dreamweaver MX to make the connection to the server.

Isn't mysql restricted to localhost access only under plesk?

(I've never tried to connect remotely so I might be wrong)

well..you would have to open port 3306 in your iptables (you are running iptables arn't you?)...I would suggest only opening it to just the ip# that needs to access mysql.....and then you have to set his myql user to be allowed to access from that ip#...easiest way is to use phpmyadmin to do that....

The easy way is to set up an ssh tunnel to your box. I tunnel port 3306 to my server, then run MySQL Control Center, telling it my db is on "localhost". Works great, and avoids weakening security by opening ports or allowing remote MySQL access.

That's a thought....I don't do off server mysql access, so had not thought of that...good idea

FWIW, I use webmin the same way... I don't open a port, I just tunnel to it when I need to use it. http://localhost:10000.

bobk,
Question for ya....since you do mysql tunnelling....do you use dreamweaver for your mysql access..(that's what I know some are trying to do)...and if so...any hints on how to set it up for tunnelling (sorry..I don't use dreamweaver...but I have a few others asking that do).

I managed to make it work once, same way. It wasn't something I found useful (at least not currently), so I forget the details. There were a couple of hitches, as I recall. One was the directory _mmscripts or whatever it's called, wasn't automatically copied to the server. I think once I copied that it was okay. I told Dreamweaver that the server was on localhost:3306, and kept a tunnel open while I used it. I only tried PHP connections.

BTW, I think I used the same server for "testing" server and "remote server." I think I also tried an actual separate testing server, but then I had to be careful about which machine the tunnel was going to at any given time.

Thanks, I will pass that on...hopefully it will help someone out...(I agree with you ..I tried Dreamweaver and it just didn't do what I needed...but then again..I am not a webdesigner...I am a security admin..lol)