I was asked to create a mysql user that can connect to the server from any host but localhost.
I tend to believe that "%" also means localhost but according to my teacher, localhost is not part of "%" and that CREATE USER user@"%"; should do the job but my tests proof otherwise.
The only solution that I've found to solve the problem is with CREATE USER user@localhost ACCOUNT LOCK;
Can anybody educate me about this?
It is "standard practice" to provide a bogus connection with minimal or no permissions, then let a wildcard let others in from other places.
This might suffice:
CREATE USER user@localhost IDENTIFIED BY "I'm not going to tell you the pwd";
Or maybe
CREATE USER user@localhost;
GRANT usage TO user@localhost;
but no other grant.
Here's the logic: user@localhost is more specific than user@"%", so, when user logs in through localhost, the bogus connection will rule. Coming from some IP address or hostname, will go through the wildcard.
