If you’ve set up your Software Vulnerability Manager On-Premises servers in dual-mode configuration (with one server housing Apache, PHP, and the Software Vulnerability Manager configuration, and the other server hosting the Software Vulnerability Manager database), then you must assign your database user appropriate privileges to allow it remote access to the database from the Software Vulnerability Manager server.
By default, accounts on the Software Vulnerability Manager database are not remote login enabled. You can grant remote access to the database from the Software Vulnerability Manager server by assigning hosts appropriate privileges. This article describes how to give remote access to a database user via the creation of the user-host record in the MySQL.user table, which governs logins to a MySQL or MariaDB instance.
Set up remote access
- Enter the MySQL database on the database server using the existing configured account. In this example, "Root" is the configured account.
- Once logged in, run the below query to grant permissions to your user:
grant all privileges on *.* to 'root'@'remotehost' identified by password 'password' with grant option;
- Replace remotehost with the hostname or IP address of the SVM application server.
- Replace password with the password for your MariaDB root account.
NOTE: When you specify the remote host as the application server, you may need to have a record of the qualified hostname and the unqualified (shortened) version to reference.
Example
Example hostname: csi7server.network.local
grant all privileges on *.* to 'csi'@'csi7server.network.local' identified by password 'Password123' with grant option;
Example IP address: 10.0.0.127
grant all privileges on *.* to 'csi'@'10.0.0.127' identified by password 'Password123' with grant option;
TIP: Execute the grant query twice, once for the hostname and once for IP, to allow the application server to connect if it's being recognized by either the hostname or IP.
Allow login for all remote locations
It's also possible to set up this query to allow logins from all remote locations. To do this, use the database command shown below:
grant all privileges on *.* to 'root'@'%' identified by password 'password' with grant option;
The key difference here is that the remote host value is replaced with a % character. The % character represents a wildcard character in MariaDB and MySQL. In this scenario, the % is used as an expression to match all possible hostnames and IPs.
Unable to remote access after setup
If remote access isn’t working after setup, run the following statement as a first step before troubleshooting further.
