I was looking at installation code. In case of multiserver, the client doesn't need full root privileges but only GRANT privilege, right? As far as I can see, the only queries that are executed by the client to the master server, are GRANTS and INSERS to 'server' table. A mysql user with INSERT+GRANT only privileges should be enough, right?
The client has no full root priveliges as the priveliges are set for required tables and table fields, see function grant_master_database_rights in the installer_base.lib.php. If you remove priveliges, then parts of your setup will stop workinga and if you add them will become less secure. Dont mix the priveliges up that ispconfig uses with the priveliges the of root password that you enter during installation is not stored anywere.
Actually, none of our mysql server are accessible by root user. We have created a ispconfigroot user that has grant, create user, and full capability on ispconfig database. We will use this user instead root for installation and updates.
