mySQL server installation disallow root login remotely, should I do it?

[mrchow19910319]

I was following this guide : 

https://www.digitalocean.com/community/tutorials/how-to-install-linux-apache-mysql-php-lamp-stack-on-ubuntu-16-04

 

 And during the set up process I need to choose: do I allow remote log in using root,
should I choose no?

If I do choose no, how do I log in to SQL server remotely?> 

Using SSL?

[jj9987]

In most cases, you do not need to log in from remote with root account. Root account should only be used for initial setup and and rare cases where standard account will not be enough. Most changes within a single database can be easily done with a newly created database account that has limited permissions.

 

You can still log in with root account from the machine itself.

You can still log in with another account remotely.

 

SSL/TLS is a whole different story and should be used as much as possible, unless you are in very secure environment and you don't mind/care about traffic sniffing there.

[mrchow19910319]

51 minutes ago, jj9987 said:

In most cases, you do not need to log in from remote with root account. Root account should only be used for initial setup and and rare cases where standard account will not be enough. Most changes within a single database can be easily done with a newly created database account that has limited permissions.

 

You can still log in with root account from the machine itself.

You can still log in with another account remotely.

 

SSL/TLS is a whole different story and should be used as much as possible, unless you are in very secure environment and you don't mind/care about traffic sniffing there.

I see. Thanks for the clarification! 

[Limecat86]

12 hours ago, mrchow19910319 said:

I was following this guide : 

https://www.digitalocean.com/community/tutorials/how-to-install-linux-apache-mysql-php-lamp-stack-on-ubuntu-16-04

 

 And during the set up process I need to choose: do I allow remote log in using root,
should I choose no?

If I do choose no, how do I log in to SQL server remotely?> 

Using SSL?

Choose no. You can always log in remotely through an SSH tunnel. When I setup a LAMP stack I usually configure MySQL to only accept connections from localhost. (given that all services run on the same machine).

[mrchow19910319]

37 minutes ago, Limecat86 said:

Choose no. You can always log in remotely through an SSH tunnel. When I setup a LAMP stack I usually configure MySQL to only accept connections from localhost. (given that all services run on the same machine).

I see thanks!