Proxy Users CREATE USER ’’@’’ IDENTIFIED WITH some_plugin AS ’ some_auth_string ’; -- create anonymous account CREATE USER ’’@’%’ IDENTIFIED BY ’ anon_user_password ’; The first account ( ’’@’’ ) is intended as the default proxy user, used to authenticate connections for users who do not otherwise match a more-specific account. The second account ( ’’@’%’ ) is an anonymous- user account, which might have been created, for example, to enable users without their own account to connect anonymously. Both accounts have the same user part ( ’’ ), which matches any user. And each account has a host part that matches any host. Nevertheless, there is a priority in account matching for connection attempts because the matching rules sort a host of  ’%’  ahead of  ’’ . For accounts that do not match any more- specific account, the server attempts to authenticate them against  ’’@’%’  (the anonymous user) rather than  ’’@’’  (the default proxy user). As a result, the default proxy account is never used. To avoid this problem, use one of the following strategies: In addition, modify any  GRANT PROXY  statements to name  ’’@’localhost’  rather than  ’’@’’  as the proxy user. Be aware that this strategy prevents anonymous-user connections from  localhost . Create the proxy users: Create the proxied users: •Remove the anonymous account so that it does not conflict with the default proxy user. •Use a more-specific default proxy user that matches ahead of the anonymous user. For example, to permit only  localhost  proxy connections, use  ’’@’localhost’ : •Use a named default account rather than an anonymous default account. For an example of this technique, consult the instructions for using the  authentication_windows  plugin. See Section 6.4.1.6, “Windows Pluggable Authentication” . •Create multiple proxy users, one for local connections and one for “everything else”  (remote connections). This can be useful particularly when local users should have different privileges from remote users. 1269 -- create proxy user for local connections CREATE USER ’’@’localhost’ IDENTIFIED WITH some_plugin AS ’ some_auth_string ’; -- create proxy user for remote connections CREATE USER ’’@’%’ IDENTIFIED WITH some_plugin AS ’ some_auth_string ’; -- create proxied user for local connections CREATE USER ’developer’@’localhost’ IDENTIFIED WITH mysql_no_login; -- create proxied user for remote connections CREATE USER ’developer’@’%’ IDENTIFIED WITH mysql_no_login; CREATE USER ’’@’localhost’ IDENTIFIED WITH some_plugin AS ’ some_auth_string ’;