Hi! Thanks for the insight! Caleb James DeLisle wrote:
Check your ifconfig for different addresses attached to the the loopback device. Also you will get a lot more info by running tcpdump on the loopback and then on ethernet and filtering by destination port = mysql port. A wild guess is that the ethernet device is being used as a loopback.
As far as I can see here (http://xen.net/fromPeat/ifconfig20100822.html), there is no other IP assigned to the loop-back device than the "standard" one, 127.0.0.1. In fact, tcpdump filtered by MySQL port and lo interface captures packets only when XWiki receive, and reply to, any request (http://xen.net/fromPeat/tcpdumplo20100822.html) but no when a MySQL client located on a remote workstation executes a query. Filtering for MySQL port and eth0 interface captures packets originated by these remote MySQL queries. Thus, I don't find any anomalous behaviour in lo and eth0, and I am not able to figure out why privileges granted to 'xwiki'@'localhost' and/or 'xwiki'@'127.0.0.1' doesn't allow xwiki MySQL user to create new schemas on demand. The only explanation I am able to figure out is that mysql-connector-java-5.1.13-bin.jar is generating remote calls (I guess this is the expected behaviour) and these calls are identified as not coming from localhost or 127.0.0.1, so xwiki@% is required to have all privileges. But this is not what I see by using show processlist; as proposed by Sergiu (see this same thread). So. I am out of ideas! Well, I am not a MySQL, Linux, XWiki or whatever wizard so, any new idea will be really welcome!!! Thanks for your help, Ricardo -- Ricardo RodrÃguez CTO eBioTIC. Life Sciences, Data Modeling and Information Management Systems