Create mysql users to sub-servers

I understand that this is virtualmin's default behavior, but for reasons of security and convenience for customers, I think it would be an important improvement for you to consider. When a user is created directly in the database, for example, even through webmin, this additional user is not migrated, and I believe that it should, or at least could, be managed by Virtualmin. Another reason for more users is that if an application's database password is exposed, all of a client's applications need to be password reset, and the potential attacker has access to all data from all databases. of the customer. I understand that this type of control and responsibility is to the customer client, but if Virtualmin can help with the control/management for the customer clients it would be a good thing.

Only root can do that Ilia, clients need to create other accounts to do that. Then, to manage that when the client have ten domains...

Hi Jamie,

The option to create another user for the domain creates a user@subdomino.dominiocliente.tld and with access to email and maybe FTP, accesses that are not necessary and can create more security problems than just another user in mysql / mariadb without access to anything but a database can guarantee. And setting up a user with name@subdomain.domain.tld can be problematic in some applications too.

I opened this ticket to propose a suggestion that I believe is valid and useful from a security point of view. Creating a user for each customer's database can prevent an application from accessing data from another, an attacker who discovers the password of an application from hacking into another, and in the case of customers with more than one development team (with multiple projects for example ) avoids the risk of problems between teams that can be caused if an ill-intentioned collaborator manipulates someone else's work (this is an extreme case it's true, but unfortunately we're not free of it in this world)

Hello Jamie,

Now when we create one user in mysql (using the webmin) that user is not migrated when I move the virtual server to another virtualmin installation, requiring to create manually again the user.

Recently I migrated the virtualmin server to another installation, there were some clients that I created the user for the database in the old installation and the client configured the application to use the respective user, when they were migrated, the applications did not start automatically due to the absence of this type of user that was not migrated.

And, as I said before, create an extra user, in the way you suggested, create a user, with email, and in the format usuario@dominio.tld and not a user in the format clienteadmin_usuario which makes it difficult to use in applications, there is a size limit of usernames in mysql, etc., anyway, this is not what I'm suggesting as a new feature, and the current forms do not suit me or clients who have several collaborators working. If you're not going to do it, OK, I create manually like I did before, and when I'm migrating servers, I'll include this in my script of things to do, copy the handmade user, something that would be much better if virtualmin did it by me.