diff --git a/ChangeLog b/ChangeLog index 70f5db0611..d5edb61068 100755 --- a/ChangeLog +++ b/ChangeLog @@ -5,6 +5,9 @@ phpMyAdmin - Changelog $Id$ $Source$ +2001-10-23 Robin Johnson + * Documentation.html: Redid documentation of advanced authentication mode. + 2001-10-23 Loïc Chapeaux * config.inc.php3, Documentation.html: extended the use of stduser/stdpass to the basic authentication mode. diff --git a/Documentation.html b/Documentation.html index aa20617ed7..13e1a7fd4b 100755 --- a/Documentation.html +++ b/Documentation.html @@ -214,8 +214,8 @@ tar xzvf phpMyAdmin_x.x.x.tar.gz
  • Open the file config.inc.php3 in your favourite editor and change the values for host, user and password to fit your environment. - Have a look at Documentation.html for an explanation of all - values.
    • + Have a look at Configuration section + for an explanation of all values.
  • It is recommended that you protect the directory in which you installed phpMyAdmin (unless it's on a closed intranet), for example with HTTP-AUTH (in a .htaccess file). See the @@ -311,20 +311,13 @@
    - $cfgServers[n]['stduser'] string
    - $cfgServers[n]['stdpass'] string + $cfgServers[n]['user'] string
    + $cfgServers[n]['password'] string
    - A user/password pair used to get the privileges of the real user.
    - Since phpMyAdmin 2.2.1-rc3 this setting is available with both standard - and advanced authentication. This "fake" user must be able to connect - to MySQL and read the mysql.User and mysql.Db - tables.
    - Please note that if you try a phpMyAdmin login with this stduser, you - could get some errors, depending on the exact privileges you gave to - this stduser. phpMyAdmin does not support a direct login with the - stduser. -

    + The user/password-pair which phpMyAdmin will use to connect to this + MySQL-server. These are not needed when advanced authentication is used, + and should be empty.

    $cfgServers[n]['adv_auth'] boolean
    @@ -356,24 +349,25 @@ Advanced authentication is secure as the MySQL passwords does not need - to be set in the phpMyAdmin configuration file (except for the standard - user -see before-). + to be set in the phpMyAdmin configuration file. (except for the standard + user -see below-). +

    - See also the FAQ section for more information about security. + Please see the security section in the FAQ for more information.

    - $cfgServers[n]['user'] string
    - $cfgServers[n]['password'] string + $cfgServers[n]['stduser'] string
    + $cfgServers[n]['stdpass'] string
    - The user/password-pair which phpMyAdmin will use to connect to this - MySQL-server.
    - While $cfgServers[n]['user'] is always required, - $cfgServers[n]['password'] is not needed when using advanced - authentication (let it empty in this case). + When using advanced authentication mode, you need to supply the details + of a MySQL account that has SELECT access on the mysql.db & + mysql.user tables. This account is used to check the privileges + user logins. Please see the security section in the FAQ for more + information.

    @@ -384,10 +378,7 @@ Warning: this setting does not replace the privileges rules of the MySQL database server. If set, it just means only these databases will be displayed but not at - all other databases can't be used.
    - This setting is an efficient way to lower the server charge since the - later does not need a to send requests to MySQL to build the databases - list. + all other databases can't be used.

    @@ -431,9 +422,9 @@

    • - Note that stduser must have Select_Priv, Insert_Priv - and Delete_Priv set to "Y" in mysql.db table for the - bookmark database. + If you are using advanced authentication, users must have + Select_Priv, Insert_Priv and Delete_Priv set to "Y" + in mysql.db table for the bookmark database.

    @@ -773,19 +764,15 @@

    phpMyAdmin always gives "Access denied" when using advanced - authentication. -
    - This could happen for some reasons: + authentication.
    + This could happen for several reasons: