RE: MySql + Snort config errors (yet again)

["robert schwartz" <robert () mrsquirrel com>]

Might try this on the db server:

$ mysql -u root p
mysql>GRANT INSERT, SELECT on snort.* to snort@192.168.1.16 IDENTIFIED
BY 'sentinix';

Forget off the top of my head if the password requires '' or not
though...   But you get the idea.

Don't use special characters in this password if you want it to work.
Every sensor needs a grant rule for it's snort@hostname btw.

> -----Original Message-----
> From: snort-users-admin () lists sourceforge net 
> [mailto:snort-users-admin () lists sourceforge net] On Behalf Of 
> M. Morgan
> Sent: Thursday, January 08, 2004 12:46 PM
> To: Snort List
> Subject: [Snort-users] MySql + Snort config errors (yet again)
>
>
> Hello all, 
>  As many others have done I'm trying to setup a remote Snort 
> sensor that will report to a central mysql database.
>
> I'm using:
> snort + snortcenter + mysql + acid
>
> on two boxes:
> 192.168.1.199 <sql server>
> 192.168.1.16  <remote snort>
>
> both boxes have the following installed.
> snort
> snortcenter
> mysql
> webmin
> acid
> nagios
>
> Both snort installs work fine if I direct them to log to 
> thier local mysql databases (localhost)
>
> The error appears when I try and redirect the output of 
> sensor (x.16) to the mysql server (x.199), it is as follows:
>
> Btw: im using the following output plugin:
> output database: alert, mysql, user=snort password=sentinix 
> dbname=snort host=192.168.1.199 port=3306 sensor_name=[AUTO]
>
>
> ERROR: database: mysql_error: Access denied for user: 
> 'snort@192.168.1.16' (Using password: YES) Fatal Error, Quitting..
> database: compiled support for ( mysql )
> database: configured to use mysql
> database: user = snort
> database: password is set
> database: database name = snort
> database: host = 192.168.1.199
> database: port = 3306
> database: sensor name = Ren
>
>  I know this is a mysql access error, Ive used the webmin 
> mysql server plugin to try and configure the mqsql "user" and 
> "database" permissions every way I can think of and I still 
> get the error.
>
>  Ive googled it, Ive RTFM'ed it, Ive been working on it for 
> days and Im on a time schedule...Im getting frantic here ;)
>
>  I know this has been done successfully but I also realize 
> this is my first attempt with mysql and it isnt working for me.
>
>  I would greatly appreciate any and all help resolving this!
>
> Thanks,
> Michael
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Perforce Software.
> Perforce is the Fast Software Configuration Management System 
> offering advanced branching capabilities and atomic changes 
> on 50+ platforms. Free Eval! 
> http://www.perforce.com/perforce/loadprog.> html
>
> _______________________________________________
>
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe: 
> https://lists.sourceforge.net/lists/listin> fo/snort-users
>
> Snort-users list archive: 
> http://www.geocrawler.com/redir-sf.php3?list=snort-users




-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users