Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-31809

Automatic SST user account management

Details

    Description

      Most advanced SST methods happen to require a dedicated database user
      account with certain privileges to access the server during the SST
      process on the donor node. Previously that user account had to be
      created manually before any SST could take place and its authentication
      credentials had to be manually entered into the configuration file and
      stored there in clear text indefinitely - to be accessed by the SST
      script when needed.

      A much less error prone and more secure approach is to automatically
      create such user account just for the SST and delete it afterwards. The
      account credentials can be passed directly to SST script. Besides better
      security and simpler node configuration this also solves the problem of
      SST user privilege evolution: the required privileges may change with
      the new server release, and automatic account generation will always
      create the user with the right privileges.

      Attachments

        Issue Links

          duplicates

          New Feature - A new feature of the product, which has yet to be developed. MDEV-16009 mariabackup SST requires clear text password in xtrabackup.cnf

          • Major - Major loss of function.
          • Open
          relates to

          New Feature - A new feature of the product, which has yet to be developed. MDEV-16009 mariabackup SST requires clear text password in xtrabackup.cnf

          • Major - Major loss of function.
          • Open

          New Feature - A new feature of the product, which has yet to be developed. MDEV-19949 mariabackup option of '--password' or '-p' without specifying password in commandline

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MDEV-20757 wsrep_ss_auth password encryption

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. MDEV-25321 mariabackup failed if password is passed via environment variable

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            Transition Time In Source Status Execution Times
            Julien Fritsch made transition -
            Open In Progress
            		36d 18h 44m 1
            Julien Fritsch made transition -
            In Progress In Review
            		22s 1
            Sergei Golubchik made transition -
            In Review Stalled
            		174d 5m 1
            Julius Goryavsky made transition -
            Stalled In Progress
            		62d 8h 50m 1
            Julius Goryavsky made transition -
            In Progress Closed
            		42d 9h 20m 1

            People

              sysprg Julius Goryavsky
              Yurchenko Alexey
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.