[danomac]

Why is it that Kodi needs 'user'@'%' permissions on mariadb? I tried changing this to 'user'@'192.168.1.%' and Kodi falls flat on its face. From the logs, it is logging in and mariadb can see it is running these queries successfully but Kodi itself barfs with an unknown error 1045.

I have multiple VLANs here with a database serving them all. It is in great interest to me security wise to be able to restrict access to the vlan/subnet that Kodi instances actually reside in. This is working with other apps, just not Kodi itself.

https://paste.kodi.tv/yawowonese.kodi

It's strange that mariadb is logging them as successful queries but Kodi says otherwise.

[Klojum]

Why is it that Kodi needs 'user'@'%' permissions on mariadb?

It doesn't. But it's the default setting that works best for all those Kodi users that are doing their first steps with MySQL (or MariaDB). More advanced database users can implement whatever restriction(s) they feel is necessary on their database server. I assume that when you have multiple VLANs active, you also know how to properly set up the database server.

but Kodi says otherwise.

Kodi also says more than 3 lines in its complete log file, which we prefer to see.

#1045 Access Denied for user 'root'@localhost (using password: YES). This may happen if your root@localhost MySQL database user was not granted the necessary rights to access the database. Or if you provided a wrong password.
Hmm... Strange.