Install error on hosted debian server

[paulkenna]

I have generally followed the wiki page http://wiki.otrs.org/index.php?title=In ... 5.04_lenny to install on a Debian 6 VPS I have - I have modified the apache2 configuration file to fit in with my virtual server program (Virtualmin)

I have managed to get to the install script up to stage 2 of 4 when I get the following error message that prevents me going further.

Create Database (2/4)
Creating database 'otrs':Done.
Creating tables 'otrs-schema.mysql.sql':Done.
Inserting initial inserts 'otrs-initial_insert.mysql.sql':Done.
Foreign Keys 'otrs-schema-post.mysql.sql':Done.
Creating database user 'otrs@localhost':False!

---==> You are not allowed to create a user with GRANT

Does anyone have any suggestion on how I can get around this

Paul
Melbourne

[jojo]

---==> You are not allowed to create a user with GRANT

Your Database User has no GRANT permission (so can not create new users!)

[paulkenna]

Many thanks

I fixed this via adding additional permissions to the virtual servers user (which was not root due to the control system implemented)

I now have an OTRS system up and running and Im very impressed

Paul
Melbourne

[SLESSARD]

Can access be restricted after install ??
if yes, to what extent??
What minimal set of privileges is required for the db account??

[crythias]

What minimal set of privileges is required for the db account??

You need to have all privileges but the account can be restricted to the one database only.

[SLESSARD]

Even grant ??

Our system staff are having concerns with having that much privileges so I'm wondering how other OTRS users are dealing with security?!

[crythias]

If you don't like GRANT, don't give grant, but what's the problem?
GRANT will only work if:
someone has your database login and password (already bad)
this person is able to log in directly to the database with these credentials (grant ... @localhost means no outside access)
this person wants to grant another user access to this database. Eh... but he can only grant privileges he already has.

If I understand it correctly, the database user can't GRANT for other databases of which the user is not able to GRANT privileges.