This is a discussion on RE: [Snort-users] MySql + Snort config errors (yet again) within the Snort forums, part of the System Security and Security Related category; Might try this on the db server: $ mysql -u root p mysql>GRANT INSERT, SELECT on snort.* to snort@...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Might try this on the db server:
$ mysql -u root p mysql>GRANT INSERT, SELECT on snort.* to snort@192.168.1.16 IDENTIFIED BY 'sentinix'; Forget off the top of my head if the password requires '' or not though... But you get the idea. Don't use special characters in this password if you want it to work. Every sensor needs a grant rule for it's snort@hostname btw. > -----Original Message----- > From: snort-users-admin@lists.sourceforge.net > [mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of > M. Morgan > Sent: Thursday, January 08, 2004 12:46 PM > To: Snort List > Subject: [Snort-users] MySql + Snort config errors (yet again) > > > Hello all, > As many others have done I'm trying to setup a remote Snort > sensor that will report to a central mysql database. > > I'm using: > snort + snortcenter + mysql + acid > > on two boxes: > 192.168.1.199 <sql server> > 192.168.1.16 <remote snort> > > both boxes have the following installed. > snort > snortcenter > mysql > webmin > acid > nagios > > Both snort installs work fine if I direct them to log to > thier local mysql databases (localhost) > > The error appears when I try and redirect the output of > sensor (x.16) to the mysql server (x.199), it is as follows: > > Btw: im using the following output plugin: > output database: alert, mysql, user=snort password=sentinix > dbname=snort host=192.168.1.199 port=3306 sensor_name=[AUTO] > > > ERROR: database: mysql_error: Access denied for user: > 'snort@192.168.1.16' (Using password: YES) Fatal Error, Quitting.. > database: compiled support for ( mysql ) > database: configured to use mysql > database: user = snort > database: password is set > database: database name = snort > database: host = 192.168.1.199 > database: port = 3306 > database: sensor name = Ren > > I know this is a mysql access error, Ive used the webmin > mysql server plugin to try and configure the mqsql "user" and > "database" permissions every way I can think of and I still > get the error. > > Ive googled it, Ive RTFM'ed it, Ive been working on it for > days and Im on a time schedule...Im getting frantic here ;) > > I know this has been done successfully but I also realize > this is my first attempt with mysql and it isnt working for me. > > I would greatly appreciate any and all help resolving this! > > Thanks, > Michael > > > ------------------------------------------------------- > This SF.net email is sponsored by: Perforce Software. > Perforce is the Fast Software Configuration Management System > offering advanced branching capabilities and atomic changes > on 50+ platforms. Free Eval! > http://www.perforce.com/perforce/loadprog.> html > > _______________________________________________ > > Snort-users mailing list > Snort-users@lists.sourceforge.net > Go to this URL to change user options or unsubscribe: > https://lists.sourceforge.net/lists/listin> fo/snort-users > > Snort-users list archive: > http://www.geocrawler.com/redir-sf.p...st=snort-users > ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users |