Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-12182

audit plugin should log HOST:PORT of incoming connection

Details

    Description

      Having a MariaDB galera cluster behind haproxy LB, at the moment in not possible to know where connection are coming from.

      From a "mysqladmin processlist" is possible to reconstruct the full chain of TCP connection, but in the audit log the tcp port is missing.

      In particular, for the connection where the client is giving wrong credentials to mariadb, is impossibile to know the client IP from which this connection is tried.

      Attachments

        Issue Links

          relates to

          New Feature - A new feature of the product, which has yet to be developed. MDEV-33834 Add tls_version field for connection audit plugins

          • Major - Major loss of function.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            serg Sergei Golubchik added a comment -

            Audit plugin cannot print the port, because the server doesn't tell plugin what port it was. We need to extend the Audit Plugin API to fix that.

            serg Sergei Golubchik added a comment - Audit plugin cannot print the port, because the server doesn't tell plugin what port it was. We need to extend the Audit Plugin API to fix that.
            svoj Sergey Vojtovich added a comment -

            Pull request: https://github.com/MariaDB/server/pull/3324

            svoj Sergey Vojtovich added a comment - Pull request: https://github.com/MariaDB/server/pull/3324
            serg Sergei Golubchik added a comment - - edited

            Please, use bb-12.0-MDEV-33834-audit branch (it also includes MDEV-33834)

            serg Sergei Golubchik added a comment - - edited Please, use bb-12.0- MDEV-33834 -audit branch (it also includes MDEV-33834 )
            serg Sergei Golubchik added a comment -

            Yes, at the moment.

            serg Sergei Golubchik added a comment - Yes, at the moment.
            alice Alice Sherepa added a comment -

            bb-12.0-MDEV-33834-audit b867b864e7d01ab69a6271078f3a1b056483bdae is ok to push

            alice Alice Sherepa added a comment - bb-12.0- MDEV-33834 -audit b867b864e7d01ab69a6271078f3a1b056483bdae is ok to push

            People

              serg Sergei Golubchik
              roberto.torresani@unitn.it Roberto Torresani
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.