Question

我在远程RHEL机器上安装了XAMPP。我们说这台机器的IP地址是10.120.42.70。我已将文件/opt/lampp/etc/my.cnf配置为远程访问，并已将此文件移至/etc/my.cnf，以便此文件中的设置现在是mysql服务器的全局选项。

这是我的/etc/my.cnf文件

# Example MySQL config file for medium systems.
#
# This is for a system with little memory (32M - 64M) where MySQL plays
# an important part, or systems up to 128M where MySQL is used together with
# other programs (such as a web server)
#
# You can copy this file to
# /etc/my.cnf to set global options,
# mysql-data-dir/my.cnf to set server-specific options (in this
# installation this directory is /opt/lampp/var/mysql) or
# ~/.my.cnf to set user-specific options.
#
# In this file, you can use all long options that a program supports.
# If you want to know which options a program supports, run the program
# with the "--help" option.

# The following options will be passed to all MySQL clients
[client]
#password   = your_password
port        = 3306
socket      = /opt/lampp/var/mysql/mysql.sock

# Here follows entries for some specific programs

# The MySQL server
[mysqld]
user = mysql
port=3306
socket      = /opt/lampp/var/mysql/mysql.sock
#skip-external-locking
key_buffer = 16M
max_allowed_packet = 1M
table_open_cache = 64
sort_buffer_size = 512K
net_buffer_length = 8K
read_buffer_size = 256K
read_rnd_buffer_size = 512K
myisam_sort_buffer_size = 8M
bind-address = 0.0.0.0


# Where do all the plugins live
plugin_dir = /opt/lampp/lib/mysql/plugin/

# Don't listen on a TCP/IP port at all. This can be a security enhancement,
# if all processes that need to connect to mysqld run on the same host.
# All interaction with mysqld must be made via Unix sockets or named pipes.
# Note that using this option without enabling named pipes on Windows
# (via the "enable-named-pipe" option) will render mysqld useless!
# 
# commented in by xampp security


# Replication Master Server (default)
# binary logging is required for replication
# log-bin deactivated by default since XAMPP 1.4.11
#log-bin=mysql-bin

# required unique id between 1 and 2^32 - 1
# defaults to 1 if master-host is not set
# but will not function as a master if omitted
server-id   = 1

# Replication Slave (comment out master section to use this)
#
# To configure this host as a replication slave, you can choose between
# two methods :
#
# 1) Use the CHANGE MASTER TO command (fully described in our manual) -
#    the syntax is:
#
#    CHANGE MASTER TO MASTER_HOST=<host>, MASTER_PORT=<port>,
#    MASTER_USER=<user>, MASTER_PASSWORD=<password> ;
#
#    where you replace <host>, <user>, <password> by quoted strings and
#    <port> by the master's port number (3306 by default).
#
#    Example:
#
#    CHANGE MASTER TO MASTER_HOST='125.564.12.1', MASTER_PORT=3306,
#    MASTER_USER='joe', MASTER_PASSWORD='secret';
#
# OR
#
# 2) Set the variables below. However, in case you choose this method, then
#    start replication for the first time (even unsuccessfully, for example
#    if you mistyped the password in master-password and the slave fails to
#    connect), the slave will create a master.info file, and any later
#    change in this file to the variables' values below will be ignored and
#    overridden by the content of the master.info file, unless you shutdown
#    the slave server, delete master.info and restart the slaver server.
#    For that reason, you may want to leave the lines below untouched
#    (commented) and instead use CHANGE MASTER TO (see above)
#
# required unique id between 2 and 2^32 - 1
# (and different from the master)
# defaults to 2 if master-host is set
# but will not function as a slave if omitted
#server-id       = 2
#
# The replication master for this slave - required
#master-host     =   <hostname>
#
# The username the slave will use for authentication when connecting
# to the master - required
#master-user     =   <username>
#
# The password the slave will authenticate with when connecting to
# the master - required
#master-password =   <password>
#
# The port the master is listening on.
# optional - defaults to 3306
#master-port     =  <port>
#
# binary logging - not required for slaves, but recommended
#log-bin=mysql-bin


# Point the following paths to different dedicated disks
#tmpdir     = /tmp/     
#log-update     = /path-to-dedicated-directory/hostname

# Uncomment the following if you are using BDB tables
#bdb_cache_size = 4M
#bdb_max_lock = 10000

# Comment the following if you are using InnoDB tables
#skip-innodb
innodb_data_home_dir = /opt/lampp/var/mysql/
innodb_data_file_path = ibdata1:10M:autoextend
innodb_log_group_home_dir = /opt/lampp/var/mysql/
# You can set .._buffer_pool_size up to 50 - 80 %
# of RAM but beware of setting memory usage too high
innodb_buffer_pool_size = 16M
# Deprecated in 5.6
#innodb_additional_mem_pool_size = 2M
# Set .._log_file_size to 25 % of buffer pool size
innodb_log_file_size = 5M
innodb_log_buffer_size = 8M
innodb_flush_log_at_trx_commit = 1
innodb_lock_wait_timeout = 50

[mysqldump]
quick
max_allowed_packet = 16M

[mysql]
no-auto-rehash
# Remove the next comment character if you are not familiar with SQL
#safe-updates

[isamchk]
key_buffer = 20M
sort_buffer_size = 20M
read_buffer = 2M
write_buffer = 2M

[myisamchk]
key_buffer = 20M
sort_buffer_size = 20M
read_buffer = 2M
write_buffer = 2M

[mysqlhotcopy]
interactive-timeout

!include /opt/lampp/mysql/my.cnf

您可以看到skip-external-locking已注释掉且没有skip-networking行。 bind-address设置为0.0.0.0，以便服务器接受来自任何IP地址的连接。

我可以在RHEL机器

中使用它登录MySQL服务器

mysql -h localhost -u root -p
mysql -h 10.120.42.70 -u root -p

以上两个命令都可以正常工作，并且可以登录服务器

当我尝试从本地Windows机器连接到服务器时，如下所示：

 mysql -h 10.120.42.70 -u root -p

它要求输入密码，我提供了密码，但收到错误：

ERROR 2003（HY000）：无法通过＆＃39; 10.120.42.70＆＃39;连接到MySQL服务器（10060＆＃34;未知错误＆＃34;）

我已授予用户`root＆＃39;的权限。我仍然得到同样的错误。

在我的RHEL远程计算机中，我运行netstat，我得到了这个：

  sudo netstat -lntp | grep 3306
  tcp        0      0 0.0.0.0:3306           0.0.0.0:*                   LISTEN      16323/mysqld

所以mysql服务器肯定会在3306上监听所有IP地址。我想知道为什么我仍然无法远程访问它。

Answer 1

如果您可以从Windows客户端ping RHEL服务器，那么我几乎可以肯定它是防火墙问题。

来自MSDN：

10060连接超时。

连接尝试失败，因为连接方在一段时间或建立的连接后没有正确响应   失败，因为连接的主机无法响应。

尝试临时禁用防火墙。

对于RHEL 6：

service iptables stop

对于RHEL 7：

systemctl stop iptables

或

systemctl stop firewalld

如果有帮助，请提供有关哪些防火墙命令有帮助的详细信息，并且我可以指出如何向防火墙添加规则，以便您可以再次启用。

更新

可能的解决方法是通过SSH使用TCP隧道（如果远程SSH服务器允许）。

ssh username@10.120.42.70 -L 5000:127.0.0.1:3306

这将转发从本地客户端计算机到端口5000的连接到远程的本地主机端口3306。

然后像这样连接到mysql服务器：mysql -uroot -h localhost:5000 -p

您可以选择类似的本地端口，而不是5000。

Answer 2

您是否为用户授予了权限＆root;＆＃39; @＆＃39; localhost＆＃39;？如果是这样，请尝试将其授予＆＃39; root＆＃39;％＆＃39;％＆＃39;。 MySQL使用它的用户名和主机名识别用户。如果从其他计算机连接，则root用户将被标识为root @ somehost而不是root @ localhost。

无法从本地Windows

2 个答案: