BioStar 2 - Maria DB Access and Account Configuration

BioStar 2 - Maria DB Access and Account Configuration

Default Security Measures Introduced in BioStar 2.4.1 (2017 Q2) 

  • External access to Maria DB is blocked by default

    [root account only has localhost / 127.0.0.1 connection privilege]

    This means you can only configure the Host as 127.0.0.1 or localhost on BioStar Setting if you use the default root account configuration


  • Only Administrator account for Maria DB is the 'root' account

    However this setting is not applied automatically if you are upgrading BioStar 2 from another lower version and if you are using any BioStar 2 version lower than 2.4.1



Changing the Default Password


If you install BioStar 2 with the express install, a default administrator account will be created for the AC and TA database. Account information is as shown below: 


Note:

You must know your root password to change the default administrator password of both databases.
The AC DB is Maria DB starting BioStar 2.3. In previous versions it was a SQLite DB. 


Default Password before BioStar 2.4.1: 

DB: Biostar2_ac 
ID: biostar2_ac_user
PW: biostar2_ac_pw 

DB: BioStar_tna 
ID: biostartnauser
PW: suprematna123

In new Maria DB express installation of BioStar 2.4.1 and above you will have to configure your root account password in the installation phase.

Follow the instructions below to change the password of the default accounts.
1.Download HeidiSQL.
2.Install and run HeidiSQL.
3.Enter the information below on Settings

  • Hostname/IP: 127.0.0.1

  • User: root

  • Password: [your root password]

  • Port: 3312


 


4.Click Open.
5.Click Tools > User Manager.

 


6.Click on each default users (biostar2_ac_user & biostartnauser) and change the password.

 


7.Click Save.


Note

There are 2 accounts for each users to have different passwords based on connection type. Below are what the Hosttype stands for: 

  • Localhost : connection via 127.0.0.1 or localhost

  • % : connection via host PC IP



Blocking Remote Access (BioStar 2.4.1 and below) - Optional 


Maria DB can be accessed via the IP of the hosting PC by default. You may want to limit the access of the database to be only on the hosting PC for security reasons. In that case you can follow the instructions below:

1.Go to the path below in Windows explorer:
C:\Program Files\BioStar 2(x64)\ta\mariadb-10.1.10-winx64 

2.Right click and edit my.cnf with a text editor such as Notepad.



 

3.Copy and paste the text below into the file:
bind-address=127.0.0.1 

 

4.Save the file. 

Now you can only access the Maria database at the hosted PC.

    • Related Articles

    • BioStar 2 - How to backup and Restore the Maria Database in BioStar 2

      BioStar 2's database has gone through a few changes since it's release.  The AC database started out with the SQLite Database and in version 2.2.1, the MariaDB T&A database was released.  Starting version 2.3, both databases became Maria DB by ...
    • BioStar 2 - How to backup and Restore the Database in BioStar 2

      BioStar 2's database has gone through a few changes since it's release.  The AC database started out with the SQLite Database and in version 2.2.1, the MariaDB T&A database was released.  Starting version 2.3, both databases became Maria DB by ...
    • BioStar 2 - How to use the DB Migration Tool

      This document will guide you through the process of how to use the DB migration tool. This DB migration Tool will be helpful to convert user information of BioStar 1.x to user information of Biostar 2.x. Please read the manual carefully and follow ...
    • BioStar 2 - How to migrate DB logs from BioStar 1.x to 2

      This document will guide you through the process of how to migrate logs from BioStar 1.x to BioStar 2 using the DB migration tool. Please carefully read and follow the instructions. Limitations This migration tool currently does not support migration ...
    • BioStar 2 - How to create access group

      Before starting to create access group, make sure to set the devices not to use 'Full Access'. 'Full Access' indicates that the device ignores access group configuration and makes an auth decision solely dependent on the user data and auth mode it ...