Connection limitations

By default, the embedded MariaDB database is configured to disallow remote client connections. You can only connect to the embedded database from the local host.

If you want to allow remote connections from other machines to the embedded database, you need to:

1. Change the binding address to allow MariaDB to communicate with the network.
2. Create a user account that is allowed to connect from a remote client.

To change the binding address of the MariaDB server

1. Launch a text editor.

2. Open the MariaDB configuration file (my.cnf), usually located in:

   • %PROGRAMFILES%\VASCO\MariaDB10.11\data\my.ini (Windows)
   • /etc/my.cnf.d/server.cnf (Red Hat Enterprise Linux)
   • /etc/mysql/mariadb.conf.d/server.cnf (Ubuntu Server)

3. Locate the following lines under the [mysqld] section:

   [mysqld]
   ...
   bind-address = 127.0.0.1

   and change the binding address:

   bind-address = ip_address

   where ip_address is the IP address of your physical network interface card.

4. Save the configuration file.
5. Restart the MariaDB service or daemon, respectively.

To create a user account to connect from a remote client

1. Launch DBeaver.
2. Connect to the OneSpan Authentication Server database using the root account.
3. Open a SQL Editor tab.

4. Execute the following SQL script:

   CREATE USER 'db_username'@'hostmask' IDENTIFIED BY 'db_password';
   
   GRANT ALL ON `Identikey Server`.* TO 'db_username'@'hostmask' REQUIRE SSL;

   where:

   • db_username is the database account name, e.g. root. Note that you can have the same database account name for different hostmasks.
   • hostmask specifies the host where the respective user connects from. The percent sign (%) can be used as a wildcard character, e.g. % means any host and 192.0.2.% means any host within the 192.0.2.0/24 subnet.
   • db_password is the password to set for the database account.

For more information, refer to the MariaDB product documentation.