Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Not a Bug
-
2.5.11
-
None
-
Oracle Linux Server 7.9
Server version: 5.7.32-35-log Percona Server
-
MXS-SPRINT-133
Description
Invalid authentication message from backend 'db-master1'. Error code: 1045, Msg : #28000: Access denied for user 'user'@'...' (using password: NO)
mysql> show global variables like '%default_authentication_plugin%';
|
+-------------------------------+-----------------------+
|
| Variable_name | Value |
|
+-------------------------------+-----------------------+
|
| default_authentication_plugin | mysql_native_password |
|
+-------------------------------+-----------------------+
|
# Global parameters
|
[maxscale]
|
threads=auto
|
admin_host = 0.0.0.0
|
admin_gui=true
|
admin_auth=1
|
admin_secure_gui=false
|
log_debug=1
|
|
|
# Server definitions
|
[db-master1]
|
type=server
|
address=1.1.1.1
|
port=3306
|
protocol=MariaDBBackend
|
rank=primary
|
|
|
[db-slave1]
|
type=server
|
address=1.1.1.2
|
port=3306
|
protocol=MariaDBBackend
|
rank=secondary
|
|
|
[Service-for-cluster_service]
|
user = maxscale
|
password = ********
|
filters = Hint
|
max_slave_replication_lag=300
|
disable_sescmd_history=false
|
prune_sescmd_history=true
|
lazy_connect= true
|
type = service
|
router = readwritesplit
|
servers = db-master1, db-slave1
|
master_accept_reads = true
|
|
|
[MariaDB-Monitor-for-cluster_service]
|
type = monitor
|
module = mariadbmon
|
user = maxscale
|
password = ********
|
monitor_interval = 5000
|
failover_timeout = 10
|
auto_failover = false
|
detect_replication_lag = true
|
handle_events = false
|
servers = db-master1, db-slave1
|
|
|
[Listener-for-cluster_service]
|
address = 0.0.0.0
|
type = listener
|
service = Service-for-cluster_service
|
protocol = MariaDBClient
|
port = 3307
|
authenticator_options=skip_authentication=true
|
Attachments
Activity
Hi Markus!
Yes, after removing authenticator_options=skip_authentication=true parameter, authentication works correctly!
but I don’t understand why this option doesn’t work in version 2.5 
.
Do you mean it works correctly in 2.4 or it also works correctly in 2.5 without that parameter?
Authorization is working now, I need to test it. I can not say it is working correctly or not.
I tested this with a MySQL 5.7 docker image and it seems to work. The documentation mentions that skip_authentication does not work with the default authentication mechanism: https://mariadb.com/kb/en/mariadb-maxscale-25-authentication-modules/#skip_authentication
OK, that suggests the password for the user is either not correct or MaxScale somehow does't manage to read it correctly from the database.