Uploaded image for project: 'MariaDB MaxScale'
  1. MariaDB MaxScale
  2. MXS-71

dbfwfilter at_times clause seems to erroneously block user

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Blocker
    • Resolution: Fixed
    • None
    • 1.1.0
    • dbfwfilter
    • None

    Description

      I'm not too sure what's going on here, but it seems like my user is being blocked completely when I include an at_times clause for my rule.

      [Database Firewall]
      type=filter
      module=dbfwfilter
      rules=/home/skysql/dbfwfilter_rules.txt

      rule testrule deny no_where_clause at_times 17:00:00-19:00:00 on_queries delete
      users kolbe@% testuser@% match strict_all rules testrule

      [root@max1 ~]# date
      Fri Mar 27 12:35:03 PDT 2015

      [root@max1 ~]# mysql -h 192.168.30.38 -P4006 -u kolbe -ppass  -e 'select * from test.t1 where 1'
      ERROR 1141 (HY000) at line 1: Access denied for user 'kolbe'@'192.168.30.38'

      2015-03-27 12:36:33   139941065504512 [poll_waitevents] epoll_wait found 1 fds
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] event 1 dcb 0x210ef00 role DCB_ROLE_SERVICE_LISTENER
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] Accept in fd 13
      2015-03-27 12:36:33   139941065504512 [dcb_write] Wrote 106 Bytes to dcb 0x7f467c0009c0 in state DCB_STATE_ALLOC fd 19
      2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c0009c0 fd 19 DCB_STATE_ALLOC -> DCB_STATE_POLLING
      2015-03-27 12:36:33   139941065504512 [poll_add_dcb] Added dcb 0x7f467c0009c0 in state DCB_STATE_POLLING to poll set.
      2015-03-27 12:36:33   139941065504512 [gw_MySQLAccept] Added dcb 0x7f467c0009c0 for fd 19 to epoll set.
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] epoll_wait found 1 fds
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] event 4 dcb 0x7f467c0009c0 role DCB_ROLE_REQUEST_HANDLER
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] epoll_wait found 1 fds
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] event 5 dcb 0x7f467c0009c0 role DCB_ROLE_REQUEST_HANDLER
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] Read in dcb 0x7f467c0009c0 fd 19
      2015-03-27 12:36:33   139941065504512 [dcb_read] Read 85 bytes from dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19.
      2015-03-27 12:36:33   Receiving connection from 'kolbe' to database '(null)'.
      2015-03-27 12:36:33   139941065504512 [MySQL Client Auth], checking user [kolbe@192.168.30.38] db:
      2015-03-27 12:36:33   139941065504512 [MySQL Client Auth], checking user [kolbe@192.168.30.38] with wildcard host [%]
      2015-03-27 12:36:33   139941065504512 [gw_do_connect_to_backend] Connected to backend server 192.168.30.33:3306, fd 20.
      2015-03-27 12:36:33   139941065504512 [gw_create_backend_connection] Connection pending to 192.168.30.33:3306, protocol fd 20 client fd 19.
      2015-03-27 12:36:33   139941065504512 [dcb_connect] Connected to server 192.168.30.33:3306, from backend dcb 0x7f467c005cf0, client dcp 0x7f467c0009c0 fd 19.
      2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c005cf0 fd 20 DCB_STATE_ALLOC -> DCB_STATE_POLLING
      2015-03-27 12:36:33   139941065504512 [poll_add_dcb] Added dcb 0x7f467c005cf0 in state DCB_STATE_POLLING to poll set.
      2015-03-27 12:36:33   139941065504512 [gw_do_connect_to_backend] Connected to backend server 192.168.30.31:3306, fd 21.
      2015-03-27 12:36:33   139941065504512 [gw_create_backend_connection] Connection pending to 192.168.30.31:3306, protocol fd 21 client fd 19.
      2015-03-27 12:36:33   139941065504512 [dcb_connect] Connected to server 192.168.30.31:3306, from backend dcb 0x7f467c005200, client dcp 0x7f467c0009c0 fd 19.
      2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c005200 fd 21 DCB_STATE_ALLOC -> DCB_STATE_POLLING
      2015-03-27 12:36:33   139941065504512 [poll_add_dcb] Added dcb 0x7f467c005200 in state DCB_STATE_POLLING to poll set.
      2015-03-27 12:36:33   139941065504512 [dcb_write] Wrote 11 Bytes to dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] epoll_wait found 1 fds
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] event 4 dcb 0x7f467c005cf0 role DCB_ROLE_REQUEST_HANDLER
      2015-03-27 12:36:33   139941065504512 [gw_write_backend_event] wrote to dcb 0x7f467c005cf0 fd 20, return 1
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] epoll_wait found 1 fds
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] event 5 dcb 0x7f467c0009c0 role DCB_ROLE_REQUEST_HANDLER
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] Read in dcb 0x7f467c0009c0 fd 19
      2015-03-27 12:36:33   139941065504512 [dcb_read] Read 37 bytes from dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19.
      2015-03-27 12:36:33   139941065504512 [dcb_write] Wrote 59 Bytes to dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] epoll_wait found 1 fds
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] event 5 dcb 0x7f467c0009c0 role DCB_ROLE_REQUEST_HANDLER
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] Read in dcb 0x7f467c0009c0 fd 19
      2015-03-27 12:36:33   139941065504512 [dcb_read] Read 34 bytes from dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19.
      2015-03-27 12:36:33   139941065504512 [dcb_write] Wrote 59 Bytes to dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] epoll_wait found 1 fds
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] event 5 dcb 0x7f467c0009c0 role DCB_ROLE_REQUEST_HANDLER
      2015-03-27 12:36:33   139941065504512 [poll_waitevents] Read in dcb 0x7f467c0009c0 fd 19
      2015-03-27 12:36:33   139941065504512 [dcb_read] Read 5 bytes from dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19.
      2015-03-27 12:36:33   139941065504512 [dcb_write] Wrote 59 Bytes to dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19
      2015-03-27 12:36:33   139941065504512 [dcb_close]
      2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c0009c0 fd 19 DCB_STATE_POLLING -> DCB_STATE_NOPOLLING
      2015-03-27 12:36:33   139941065504512 [dcb_close] Removed dcb 0x7f467c0009c0 in state DCB_STATE_NOPOLLING from poll set.
      2015-03-27 12:36:33   139941065504512 [gw_client_close]
      2015-03-27 12:36:33   139941065504512 [RWSplit:closeSession]
      2015-03-27 12:36:33   139941065504512 [dcb_close]
      2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c005cf0 fd 20 DCB_STATE_POLLING -> DCB_STATE_NOPOLLING
      2015-03-27 12:36:33   139941065504512 [dcb_close] Removed dcb 0x7f467c005cf0 in state DCB_STATE_NOPOLLING from poll set.
      2015-03-27 12:36:33   139941065504512 [gw_backend_close]
      2015-03-27 12:36:33   139941065504512 [gw_MySQLWrite_backend] delayed write to dcb 0x7f467c005cf0 fd 20 protocol state MYSQL_CONNECTED.
      2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c005cf0 fd 20 DCB_STATE_NOPOLLING -> DCB_STATE_ZOMBIE
      2015-03-27 12:36:33   139941065504512 [dcb_close]
      2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c005200 fd 21 DCB_STATE_POLLING -> DCB_STATE_NOPOLLING
      2015-03-27 12:36:33   139941065504512 [dcb_close] Removed dcb 0x7f467c005200 in state DCB_STATE_NOPOLLING from poll set.
      2015-03-27 12:36:33   139941065504512 [gw_backend_close]
      2015-03-27 12:36:33   139941065504512 [gw_MySQLWrite_backend] delayed write to dcb 0x7f467c005200 fd 21 protocol state MYSQL_PENDING_CONNECT.
      2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c005200 fd 21 DCB_STATE_NOPOLLING -> DCB_STATE_ZOMBIE
      2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c0009c0 fd 19 DCB_STATE_NOPOLLING -> DCB_STATE_ZOMBIE
      2015-03-27 12:36:33   139941075994368 [dcb_process_zombies] Remove dcb 0x7f467c0009c0 fd 19 in state DCB_STATE_ZOMBIE from the list of zombies.
      2015-03-27 12:36:33   139941075994368 [dcb_process_zombies] Remove dcb 0x7f467c005200 fd 21 in state DCB_STATE_ZOMBIE from the list of zombies.
      2015-03-27 12:36:33   139941075994368 [dcb_process_zombies] Remove dcb 0x7f467c005cf0 fd 20 in state DCB_STATE_ZOMBIE from the list of zombies.
      2015-03-27 12:36:33   139941075994368 [dcb_process_zombies] Closed socket -1 on dcb 0x7f467c0009c0.
      2015-03-27 12:36:33   139941075994368 [dcb_set_state_nomutex] dcb 0x7f467c0009c0 fd -1 DCB_STATE_ZOMBIE -> DCB_STATE_DISCONNECTED
      2015-03-27 12:36:33   139941075994368 [dcb_process_zombies] Closed socket -1 on dcb 0x7f467c005200.
      2015-03-27 12:36:33   139941075994368 [dcb_set_state_nomutex] dcb 0x7f467c005200 fd -1 DCB_STATE_ZOMBIE -> DCB_STATE_DISCONNECTED
      2015-03-27 12:36:33   139941075994368 [dcb_process_zombies] Closed socket -1 on dcb 0x7f467c005cf0.
      2015-03-27 12:36:33   139941075994368 [dcb_set_state_nomutex] dcb 0x7f467c005cf0 fd -1 DCB_STATE_ZOMBIE -> DCB_STATE_DISCONNECTED

      Attachments

        Activity

          People

            markus makela markus makela
            kolbe Kolbe Kegel (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.