Hi! Thanks for the insight!
Caleb James DeLisle wrote:
Check your ifconfig for different addresses attached to the the loopback device.
Also you will get a lot more info by running tcpdump on the loopback and then on
ethernet
and filtering by destination port = mysql port.
A wild guess is that the ethernet device is being used as a loopback.
As far as I can see here
(
http://xen.net/fromPeat/ifconfig20100822.html), there is no other IP
assigned to the loop-back device than the "standard" one, 127.0.0.1. In
fact, tcpdump filtered by MySQL port and lo interface captures packets
only when XWiki receive, and reply to, any request
(
http://xen.net/fromPeat/tcpdumplo20100822.html) but no when a MySQL
client located on a remote workstation executes a query.
Filtering for MySQL port and eth0 interface captures packets originated
by these remote MySQL queries.
Thus, I don't find any anomalous behaviour in lo and eth0, and I am not
able to figure out why privileges granted to 'xwiki'@'localhost' and/or
'xwiki'(a)'127.0.0.1' doesn't allow xwiki MySQL user to create new
schemas
on demand.
The only explanation I am able to figure out is that
mysql-connector-java-5.1.13-bin.jar is generating remote calls (I guess
this is the expected behaviour) and these calls are identified as not
coming from localhost or 127.0.0.1, so xwiki@% is required to have all
privileges. But this is not what I see by using show processlist; as
proposed by Sergiu (see this same thread).
So. I am out of ideas! Well, I am not a MySQL, Linux, XWiki or whatever
wizard so, any new idea will be really welcome!!!
Thanks for your help,
Ricardo
--
Ricardo Rodríguez
CTO
eBioTIC.
Life Sciences, Data Modeling and Information Management Systems