blocks|key|2016773|text|编辑:考虑一下这个页面上Malvineous的答案，网络掩码是一个更优雅的解决方案。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2016774|2016775|只需在IP地址中使用百分号作为通配符。|2016776|来自http://dev.mysql.com/doc/refman/5.1/en/grant.html|2016777|2016778|您可以在主机名中指定通配符。例如，user_name@'%25.example.com'适用于example.com域中任何主机的user_name，user_name@'192.168.1.%25'适用于192.168.1+C类子网中任何主机的user_name。|blockquote|style|CODE|2016779|2016780|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/11742963/how-to-grant-remote-access-to-mysql-for-a-whole-subnet/38389851#38389851|1|http://dev.mysql.com/doc/refman/5.1/en/grant.html^0|C|A|0|0|0|0|2|1D|1|0|0|H|P|19|B|1R|9|21|N|2R|9|3B|9|0|0^^$0|@$1|2|3|4|5|6|7|Z|8|@]|9|@$A|10|B|11|1|12]]|C|$]]|$1|D|3|-4|5|6|7|13|8|@]|9|@]|C|$]]|$1|E|3|F|5|6|7|14|8|@]|9|@]|C|$]]|$1|G|3|H|5|6|7|15|8|@]|9|@$A|16|B|17|1|18]]|C|$]]|$1|I|3|-4|5|6|7|19|8|@]|9|@]|C|$]]|$1|J|3|K|5|L|7|1A|8|@$A|1B|B|1C|M|N]|$A|1D|B|1E|M|N]|$A|1F|B|1G|M|N]|$A|1H|B|1I|M|N]|$A|1J|B|1K|M|N]|$A|1L|B|1M|M|N]]|9|@]|C|$]]|$1|O|3|-4|5|6|7|1N|8|@]|9|@]|C|$]]|$1|P|3|-4|5|6|7|1O|8|@]|9|@]|C|$]]]|Q|$R|$5|S|T|U|C|$V|W]]|X|$5|S|T|U|C|$V|Y]]]]

EDIT: Consider looking at and upvoting <a href="https://stackoverflow.com/questions/11742963/how-to-grant-remote-access-to-mysql-for-a-whole-subnet/38389851#38389851">Malvineous</a>'s answer on this page. Netmasks are a much more elegant solution.

<hr>

Simply use a percent sign as a wildcard in the IP address.

From <a href="http://dev.mysql.com/doc/refman/5.1/en/grant.html" rel="noreferrer">http://dev.mysql.com/doc/refman/5.1/en/grant.html</a>

<blockquote>
 You can specify wildcards in the host name. For example, <code>user_name@'%.example.com'</code> applies to <code>user_name</code> for any host in the <code>example.com</code> domain, and <code>user_name@'192.168.1.%'</code> applies to <code>user_name</code> for any host in the <code>192.168.1</code> class C subnet.
</blockquote>

blocks|key|3742549|text|您只需使用'%25‘作为通配符，如下所示：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3742550|GRANT+ALL+ON+*.*+to+root@'192.168.1.%25'+IDENTIFIED+BY+'your-root-password';|code-block|syntax|javascript|3742551|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

You would just use '%' as your wildcard like this:

<pre><code>GRANT ALL ON *.* to root@'192.168.1.%' IDENTIFIED BY 'your-root-password';
</code></pre>

blocks|key|2016936|text|mysql>+GRANT+ALL+ON+*.*+to+root@'192.168.1.%25'+IDENTIFIED+BY+'your-root-password';++|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|2016937|通配符是"%25“而不是"*”|unstyled|2016938|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|J|8|@]|9|@]|A|$]]|$1|G|3|-4|5|F|7|K|8|@]|9|@]|A|$]]]|H|$]]

<pre><code>mysql&gt; GRANT ALL ON *.* to root@'192.168.1.%' IDENTIFIED BY 'your-root-password'; 
</code></pre>

The wildcard character is a "%" instead of an "*"

blocks|key|3742694|text|这只是我面对的一个奇特的问题：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3742695|考虑一下：|3742696|db+server:++192.168.0.101
web+server:+192.168.0.102|code-block|syntax|javascript|3742697|如果您在mysql.user中将一个用户定义为带有password1的'user'@'192.168.0.102'，另一个带有password2的'user'@'192.168.0.%25'，|offset|length|style|CODE|3742698|然后,|3742699|如果您尝试以password2用户身份从web服务器连接到数据库服务器，|3742700|由于在通配符'user'@'192.168.0.%25'身份验证上使用单一IP+'user'@'192.168.0.102'身份验证，因此这将导致“拒绝访问”错误。|3742701|entityMap^0|0|0|0|Z|M|21|K|0|0|0|6|K|12|M|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|X|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|Y|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|Z|8|@$K|10|L|11|M|N]|$K|12|L|13|M|N]]|9|@]|A|$]]|$1|O|3|P|5|6|7|14|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|15|8|@]|9|@]|A|$]]|$1|S|3|T|5|6|7|16|8|@$K|17|L|18|M|N]|$K|19|L|1A|M|N]]|9|@]|A|$]]|$1|U|3|-4|5|6|7|1B|8|@]|9|@]|A|$]]]|V|$]]

Just a note of a peculiarity I faced: 
Consider:

<pre><code>db server: 192.168.0.101
web server: 192.168.0.102
</code></pre>

If you have a user defined in mysql.user as <code>'user'@'192.168.0.102'</code> with password1 and another <code>'user'@'192.168.0.%'</code> with password2,

then, 

if you try to connect to the db server from the web server as 'user' with password2,

it will result in an 'Access denied' error because the single IP <code>'user'@'192.168.0.102'</code> authentication is used over the wildcard <code>'user'@'192.168.0.%'</code> authentication.

blocks|key|3742714|text|It+looks+like+you+can+also+use+a+netmask，例如|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|3742715|GRANT+...+TO+'user'@'192.168.0.0/255.255.255.0'+IDENTIFIED+BY+...|code-block|syntax|javascript|3742716|entityMap|0|LINK|mutability|MUTABLE|url|http://dev.mysql.com/doc/refman/5.7/en/account-names.html^0|3|11|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@$A|R|B|S|1|T]]|C|$]]|$1|D|3|E|5|F|7|U|8|@]|9|@]|C|$G|H]]|$1|I|3|-4|5|6|7|V|8|@]|9|@]|C|$]]]|J|$K|$5|L|M|N|C|$O|P]]]]

It <a href="http://dev.mysql.com/doc/refman/5.7/en/account-names.html">looks like you can also use a netmask</a>, e.g.

<pre><code>GRANT ... TO 'user'@'192.168.0.0/255.255.255.0' IDENTIFIED BY ...
</code></pre>

blocks|key|2062926|text|当您连接到服务器并想要连接到您的主机后，您应该执行以下步骤：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2062927|2062928|write+mysql+to+open+mysql|ordered-list-item|offset|length|style|BOLD|2062929|write+GRANT+ALL+ON+.+to+root@'write_your_ip_addres'+IDENTIFIED+BY+'write_password_to_connect'；|CODE|2062930|按could和X退出mysql|2062931|write+nano+/etc/mysql/my.cnf+folder|2062932|#bind-address+=127.0.0.1bind-|2062933|=+127.0.0.1|2062934|使用control+%2BX|2062935|保存my.cnf文件夹with+control+%2BX|2062936|write+save可以在主机上通过navicat进行连接|2062937|2062938|entityMap^0|0|0|6|5|0|6|C|J|1|L|20|6|C|J|1|L|20|0|0|6|M|6|M|0|0|T|0|0|B|0|0|C|0|0|Q|0|0|T|0|0^^$0|@$1|2|3|4|5|6|7|13|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|14|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|15|8|@$F|16|G|17|H|I]]|9|@]|A|$]]|$1|J|3|K|5|E|7|18|8|@$F|19|G|1A|H|I]|$F|1B|G|1C|H|I]|$F|1D|G|1E|H|I]|$F|1F|G|1G|H|L]|$F|1H|G|1I|H|L]|$F|1J|G|1K|H|L]]|9|@]|A|$]]|$1|M|3|N|5|E|7|1L|8|@]|9|@]|A|$]]|$1|O|3|P|5|E|7|1M|8|@$F|1N|G|1O|H|I]|$F|1P|G|1Q|H|L]]|9|@]|A|$]]|$1|Q|3|R|5|E|7|1R|8|@$F|1S|G|1T|H|I]]|9|@]|A|$]]|$1|S|3|T|5|6|7|1U|8|@$F|1V|G|1W|H|I]]|9|@]|A|$]]|$1|U|3|V|5|E|7|1X|8|@$F|1Y|G|1Z|H|I]]|9|@]|A|$]]|$1|W|3|X|5|6|7|20|8|@$F|21|G|22|H|I]]|9|@]|A|$]]|$1|Y|3|Z|5|E|7|23|8|@$F|24|G|25|H|I]]|9|@]|A|$]]|$1|10|3|-4|5|6|7|26|8|@]|9|@]|A|$]]|$1|11|3|-4|5|6|7|27|8|@]|9|@]|A|$]]]|12|$]]

after you connect server and you want to connect on your host, you should do the steps below:

<ol>
<li>write mysql to open mysql</li>
<li>write <code>GRANT ALL ON . to root@'write_your_ip_addres' IDENTIFIED BY 'write_password_to_connect'</code>;</li>
<li>press control and X to quit from mysql</li>
<li>write <code>nano /etc/mysql/my.cnf</code> </li>
<li>write # before bind-address = 127.0.0.1 in my.cnf folder</li>
<li>#bind-address = 127.0.0.1 </li>
<li>save my.cnf folder with control + X</li>
<li>write <code>service mysql restart</code></li>
<li>you could connect via navicat on your host</li>
</ol>

blocks|key|3742873|text|在@Malvineaus答案的激励下，我自己尝试了一下，发现它对我不起作用。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3742874|您可以使用'192.168.1.%25‘或'192.168.1.0/255.255.255.0’指定子网掩码，但子网必须始终为完整的八位字节。参见https://mariadb.com/kb/en/create-user/#host-name-component。因此，一种规范和另一种规范之间的功能是相同的。|offset|length|3742875|例如，“192.168.1.0/255.255.255.128”将不起作用，因为它不在完整的二进制八位数边界上。|3742876|entityMap|0|LINK|mutability|MUTABLE|url|https://mariadb.com/kb/en/create-user/#host-name-component^0|0|1Z|1M|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@]|9|@$D|R|E|S|1|T]]|A|$]]|$1|F|3|G|5|6|7|U|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|V|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|O]]]]

Motivated by @Malvineaus answer I tried it myself and noticed that it didn't work for me.
You can specify subnet masks with '192.168.1.%' or '192.168.1.0/255.255.255.0' but the subnet must always be on complete octets. see <a href="https://mariadb.com/kb/en/create-user/#host-name-component" rel="nofollow noreferrer">https://mariadb.com/kb/en/create-user/#host-name-component</a>. As result the functionality between one way of specification and the other is the same.
For example '192.168.1.0/255.255.255.128' will not work as it is not on a complete octet boundary.

blocks|key|3742887|text|MySQL+8.0.23+onwards现在还支持CIDR表示法。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|3742888|所以，基本上：|3742889|--+CIDR+Notation
GRANT+...+TO+'user'@'192.168.1.0/24'+IDENTIFIED+BY+...

--+Netmask+Notation
GRANT+...+TO+'user'@'192.168.1.0/255.255.255.0'+IDENTIFIED+BY+...|code-block|syntax|javascript|3742890|entityMap|0|LINK|mutability|MUTABLE|url|https://dev.mysql.com/doc/refman/8.0/en/account-names.html^0|0|K|0|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@$A|T|B|U|1|V]]|C|$]]|$1|D|3|E|5|6|7|W|8|@]|9|@]|C|$]]|$1|F|3|G|5|H|7|X|8|@]|9|@]|C|$I|J]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|C|$]]]|L|$M|$5|N|O|P|C|$Q|R]]]]

<a href="https://dev.mysql.com/doc/refman/8.0/en/account-names.html" rel="nofollow noreferrer">MySQL 8.0.23 onwards</a> now support CIDR notation also.
So, basically:
<pre class="lang-sql prettyprint-override"><code>-- CIDR Notation
GRANT ... TO 'user'@'192.168.1.0/24' IDENTIFIED BY ...

-- Netmask Notation
GRANT ... TO 'user'@'192.168.1.0/255.255.255.0' IDENTIFIED BY ...
</code></pre>

I can easily grant access to one IP using this code:

<pre><code>$ mysql -u root -p
Enter password: 
mysql&gt; use mysql 
mysql&gt; GRANT ALL ON *.* to root@'192.168.1.4' IDENTIFIED BY 'your-root-password'; 
mysql&gt; FLUSH PRIVILEGES;
</code></pre>

But i need to allow the whole subnet 192.168.1.* to access the database remotely.

How can i do that?

How to grant remote access to MySQL for a whole subnet?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

教程

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

我可以使用以下代码轻松地授予对一个IP的访问权限：$ mysql -u root -pEnter password:    mysql> use mysql    mysql> GRANT ALL ON *.* to root@'192.168.1.4' IDENTIFIED BY 'your-root-passwor...

问如何授予整个子网远程访问MySQL的权限？
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何授予整个子网远程访问MySQL的权限？EN