Can't connect to MySQL server on 'DOMAIN' (111)

[Maheriano]

I have a default installation of MySQL on my default Ubuntu server, I haven't really changed any settings after install. The default configuration is to disallow external connections to MySQL and I'm trying to allow external connections so I can connect to it from anywhere, mainly so I can use MySQL Workbench instead of PHPMyAdmin. I've made the necessary changes but it still doesn't seem to work.

Here is part of my my.cnf file:

[mysqld]
#
# * Basic Settings
#
user            = mysql
pid-file        = /var/run/mysqld/mysqld.pid
socket          = /var/run/mysqld/mysqld.sock
port            = 3306
basedir         = /usr
datadir         = /var/lib/mysql
tmpdir          = /tmp
lc-messages-dir = /usr/share/mysql
# skip-external-locking
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
# bind-address          = 127.0.0.1
#
# * Fine Tuning
#
key_buffer              = 16M
max_allowed_packet      = 16M
thread_stack            = 192K
thread_cache_size       = 8

And I logged into my mysql (from localhost) as root to run this:

grant all privileges on *.* to 'development'@'%' identified by '**********';

Of course I put the correct password in there. Then I ran:

flush privileges;

I even restarted the MySQL server:

sudo service mysql restart

However I still cannot connect from my other machine with any user. I can't connect as this user, I can't connect as root, it keeps giving me this 111 error in the title:

deemar@Chugger:/etc/mysql$ mysql -u development -p -h domain
Enter password: 
ERROR 2003 (HY000): Can't connect to MySQL server on 'domain' (111)

What am I missing to allow external access to MySQL?

[sandyd]

MySQL by default listens only on the localhost (127.0.0.1) interface.

From configuration file above:

#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
# bind-address          = 127.0.0.1

Uncomment the bind-address line, and bind to 0.0.0.0 to bind to all addresses on the system.

[Maheriano]

MySQL by default listens only on the localhost (127.0.0.1) interface.

From configuration file above:

#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
# bind-address          = 127.0.0.1

Uncomment the bind-address line, and bind to 0.0.0.0 to bind to all addresses on the system.

[mysqld]
#
# * Basic Settings
#
user            = mysql
pid-file        = /var/run/mysqld/mysqld.pid
socket          = /var/run/mysqld/mysqld.sock
port            = 3306
basedir         = /usr
datadir         = /var/lib/mysql
tmpdir          = /tmp
lc-messages-dir = /usr/share/mysql
# skip-external-locking
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
bind-address            = 0.0.0.0
#
# * Fine Tuning
#
key_buffer              = 16M
max_allowed_packet      = 16M
thread_stack            = 192K
thread_cache_size       = 8
# This replaces the startup script and checks MyISAM tables if needed
# the first time they are touched
myisam-recover         = BACKUP
#max_connections        = 100
#table_cache            = 64
#thread_concurrency     = 10
#
# * Query Cache Configuration
#
query_cache_limit       = 1M
query_cache_size        = 16M

name@computer:/sbin$ sudo service mysql restart
mysql stop/waiting
mysql start/running, process 6078

deemar@Chugger:/etc/mysql$ mysql -u development -p -h domain
Enter password: 
ERROR 2003 (HY000): Can't connect to MySQL server on 'domain' (111)

Didn't work.

[sandyd]

Whats the output of

lsof -Pni :3306

[Maheriano]

Whats the output of

lsof -Pni :3306

name@computer:~$ lsof -Pni :3306
name@computer:~$

[sandyd]

Odd, mysql is refusing to bind to the addresses.

Does /var/log/mysql/error.log have anything that might indicate why it is not binding?

[Maheriano]

Would those things be blocked by default in Ubuntu Server 14.04? I don't even know where to start checking for those things.

[richard51]

On a fresh install of Ubuntu Server 14.04, Iptables will be set to Allow for Input, Output and Forward. UFW will be disabled, so no, it shouldn't be blocked!

On a side note, I know that you have granted all privileges, but if you have still got phpMyAdmin installed, log-in as root on the MySQL machine with phpMyAdmin, then check user & database privileges from there.

You can check Iptables and check the status of UFW using the following command:

$ iptables -L -v --line-numbers
$ ip6tables -L -v --line-numbers
$ ufw status verbose

[Maheriano]

On a fresh install of Ubuntu Server 14.04, Iptables will be set to Allow for Input, Output and Forward. UFW will be disabled, so no, it shouldn't be blocked!

On a side note, I know that you have granted all privileges, but if you have still got phpMyAdmin installed, log-in as root on the MySQL machine with phpMyAdmin, then check user & database privileges from there.

You can check Iptables and check the status of UFW using the following command:

$ iptables -L -v --line-numbers
$ ip6tables -L -v --line-numbers
$ ufw status verbose

name@computer:~$ iptables -L -V --line-numbers
iptables v1.4.21

name@server:~$ ip6tables -L -V --line-numbers
ip6tables v1.4.21

name@computer:~$ sudo ufw status verbose
[sudo] password for name: 
WARN: Duplicate profile 'Apache', using last found
WARN: Duplicate profile 'Apache Secure', using last found
WARN: Duplicate profile 'Apache Full', using last found
Status: inactive

[richard51]

Just a thought: If 'development' already had privileges set before-hand, I believe you have to revoke those privileges before setting new ones, otherwise you will have duplicates.

Also: iptables should give more information than that, just try: sudo iptables -L