Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-20564

Mariabackup docs for privileges incomplete / outdated for rocksdb backups

Details

    Description

      OS: Linux Debian-93-stretch-64-minimal 4.9.0-8-amd64 #1 SMP Debian 4.9.144-3.1 (2019-02-19) x86_64

      MariaDB: 10.2.21-MariaDB-10.2.21+maria~stretch-log (binary distribution with plugin-rocksdb)

      mariabackup version: mariabackup based on MariaDB server 10.2.21-MariaDB debian-linux-gnu (x86_64)

      User created according to the info found at https://mariadb.com/kb/en/library/mariabackup-overview/#authentication-and-privileges

      When running mariabackup the following error message appears:
      [..] Obtaining rocksdb checkpoint lock.
      Error: failed to execute query SET GLOBAL rocksdb_create_checkpoint='/data/rocksdb/mariabackup-checkpoint': Access denied; you need (at least one of) the SUPER privilege(s) for this operation

      I will try to grant the SUPER privilege to the user and re-run the backup. Would be great to include that in the docs.

      Attachments

        Issue Links

          relates to

          Task - A task that needs to be done. MDEV-13122 Backup myrocks with mariabackup

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. MDEV-20577 Require lower privilege than SUPER to set rocksdb_create_checkpoint

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Activity

            Ascending order - Click to sort in descending order
            jkrauss Jonas Krauss created issue -
            jkrauss Jonas Krauss made changes -
            Field Original Value New Value
            Description *OS*: Linux Debian-93-stretch-64-minimal 4.9.0-8-amd64 #1 SMP Debian 4.9.144-3.1 (2019-02-19) x86_64

            *MariaDB*: 10.2.21-MariaDB-10.2.21+maria~stretch-log (binary distribution with plugin-rocksdb)

            *mariabackup version*: mariabackup based on MariaDB server 10.2.21-MariaDB debian-linux-gnu (x86_64)

            User created according to the info found at https://mariadb.com/kb/en/library/mariabackup-overview/#authentication-and-privileges

            When running mariabackup the following error message appears:
            {{
            [..] Obtaining rocksdb checkpoint lock.
            Error: failed to execute query SET GLOBAL rocksdb_create_checkpoint='/data/rocksdb/mariabackup-checkpoint': Access denied; you need (at least one of) the SUPER privilege(s) for this operation
            }}

            I will try to grant the SUPER privilege to the user and re-run the backup. Would be great to include that in the docs.             		*OS*: Linux Debian-93-stretch-64-minimal 4.9.0-8-amd64 #1 SMP Debian 4.9.144-3.1 (2019-02-19) x86_64

            *MariaDB*: 10.2.21-MariaDB-10.2.21+maria~stretch-log (binary distribution with plugin-rocksdb)

            *mariabackup version*: mariabackup based on MariaDB server 10.2.21-MariaDB debian-linux-gnu (x86_64)

            User created according to the info found at https://mariadb.com/kb/en/library/mariabackup-overview/#authentication-and-privileges

            When running mariabackup the following error message appears:
            [..] Obtaining rocksdb checkpoint lock.
            Error: failed to execute query SET GLOBAL rocksdb_create_checkpoint='/data/rocksdb/mariabackup-checkpoint': Access denied; you need (at least one of) the SUPER privilege(s) for this operation

            I will try to grant the SUPER privilege to the user and re-run the backup. Would be great to include that in the docs.
            greenman Ian Gilfillan made changes -
            Assignee Ian Gilfillan [ greenman ] Geoff Montee [ geoffmontee ]
            jkrauss Jonas Krauss added a comment -

            With the SUPER privilege the backup ran through just fine.

            jkrauss Jonas Krauss added a comment - With the SUPER privilege the backup ran through just fine.
            GeoffMontee Geoff Montee (Inactive) made changes -
            GeoffMontee Geoff Montee (Inactive) added a comment -

            The documentation has been updated. If we want to change the implementation to require lower privileges than SUPER, then that is now tracked as MDEV-20577.

            GeoffMontee Geoff Montee (Inactive) added a comment - The documentation has been updated. If we want to change the implementation to require lower privileges than SUPER , then that is now tracked as MDEV-20577 .
            GeoffMontee Geoff Montee (Inactive) made changes -
            GeoffMontee Geoff Montee (Inactive) made changes -
            Fix Version/s N/A [ 14700 ]
            Resolution Fixed [ 1 ]
            Status Open [ 1 ] Closed [ 6 ]
            serg Sergei Golubchik made changes -
            Workflow MariaDB v3 [ 99593 ] MariaDB v4 [ 134088 ]

            People

              GeoffMontee Geoff Montee (Inactive)
              jkrauss Jonas Krauss
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.