Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-31809

Automatic SST user account management

Details

    Description

      Most advanced SST methods happen to require a dedicated database user
      account with certain privileges to access the server during the SST
      process on the donor node. Previously that user account had to be
      created manually before any SST could take place and its authentication
      credentials had to be manually entered into the configuration file and
      stored there in clear text indefinitely - to be accessed by the SST
      script when needed.

      A much less error prone and more secure approach is to automatically
      create such user account just for the SST and delete it afterwards. The
      account credentials can be passed directly to SST script. Besides better
      security and simpler node configuration this also solves the problem of
      SST user privilege evolution: the required privileges may change with
      the new server release, and automatic account generation will always
      create the user with the right privileges.

      Attachments

        Issue Links

          duplicates

          New Feature - A new feature of the product, which has yet to be developed. MDEV-16009 mariabackup SST requires clear text password in xtrabackup.cnf

          • Major - Major loss of function.
          • Open
          relates to

          New Feature - A new feature of the product, which has yet to be developed. MDEV-16009 mariabackup SST requires clear text password in xtrabackup.cnf

          • Major - Major loss of function.
          • Open

          New Feature - A new feature of the product, which has yet to be developed. MDEV-19949 mariabackup option of '--password' or '-p' without specifying password in commandline

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MDEV-20757 wsrep_ss_auth password encryption

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. MDEV-25321 mariabackup failed if password is passed via environment variable

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            Yurchenko Alexey created issue -
            Yurchenko Alexey made changes -
            Field Original Value New Value
            Yurchenko Alexey made changes -
            Yurchenko Alexey made changes -
            Yurchenko Alexey made changes -
            Yurchenko Alexey made changes -
            ralf.gebhardt Ralf Gebhardt made changes -
            Fix Version/s 11.3 [ 28565 ]
            julien.fritsch Julien Fritsch made changes -
            Assignee Alexey [ yurchenko ] Julius Goryavsky [ sysprg ]
            julien.fritsch Julien Fritsch made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            julien.fritsch Julien Fritsch made changes -
            Assignee Julius Goryavsky [ sysprg ] Julien Fritsch [ julien.fritsch ]
            julien.fritsch Julien Fritsch made changes -
            Assignee Julien Fritsch [ julien.fritsch ] Julius Goryavsky [ sysprg ]
            Status In Progress [ 3 ] In Review [ 10002 ]
            julien.fritsch Julien Fritsch made changes -
            Priority Trivial [ 5 ] Critical [ 2 ]
            serg Sergei Golubchik made changes -
            Summary [Enhancement] Automatic SST user account management Automatic SST user account management
            serg Sergei Golubchik made changes -
            Fix Version/s 11.4 [ 29301 ]
            Fix Version/s 11.3 [ 28565 ]
            ralf.gebhardt Ralf Gebhardt made changes -
            Fix Version/s 11.5 [ 29506 ]
            Fix Version/s 11.4 [ 29301 ]
            serg Sergei Golubchik made changes -
            Fix Version/s 11.4 [ 29301 ]
            Fix Version/s 11.5 [ 29506 ]
            ralf.gebhardt Ralf Gebhardt made changes -
            Issue Type Task [ 3 ] New Feature [ 2 ]
            ralf.gebhardt Ralf Gebhardt made changes -
            Fix Version/s 11.5 [ 29506 ]
            Fix Version/s 11.4 [ 29301 ]
            seppo Seppo Jaakola made changes -
            serg Sergei Golubchik made changes -
            Status In Review [ 10002 ] Stalled [ 10000 ]
            serg Sergei Golubchik made changes -
            Fix Version/s 11.6 [ 29515 ]
            Fix Version/s 11.5 [ 29506 ]
            sysprg Julius Goryavsky made changes -
            Status Stalled [ 10000 ] In Progress [ 3 ]
            sysprg Julius Goryavsky made changes -
            Fix Version/s 11.6.0 [ 29839 ]
            Fix Version/s 11.6 [ 29515 ]
            Resolution Fixed [ 1 ]
            Status In Progress [ 3 ] Closed [ 6 ]
            serg Sergei Golubchik made changes -
            ralf.gebhardt Ralf Gebhardt made changes -
            Labels galera Preview_11.6 galera
            ralf.gebhardt Ralf Gebhardt made changes -

            People

              sysprg Julius Goryavsky
              Yurchenko Alexey
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.