[MCOL-1064] Multi server upgrade ERROR in replication setup when idbrep user exists Created: 2017-11-30  Updated: 2022-11-05  Resolved: 2022-11-05

Status: Closed
Project: MariaDB ColumnStore
Component/s: installation
Affects Version/s: 1.1.2
Fix Version/s: Icebox

Type: Bug Priority: Minor
Reporter: Sasha V Assignee: Unassigned
Resolution: Won't Do Votes: 0
Labels: None
Environment:

docker Ubuntu 16


Issue Links:
Relates
relates to MCOL-1063 Multi server upgrade ERROR in replica... Closed

 Description   

During multi-server system upgrade from InfiniDB 4.x to MariaDB ColumnStore 1.1.2 the postConfigure step

Run MariaDB ColumnStore Replication Setup..

fails with

ERROR: Error return in running the MariaDB ColumnStore Master replication, check /tmp/master-rep*.logs on pm1
 
 MariaDB ColumnStore Replication Setup Failed, check logs
 
 IMPORTANT: Once issue has been resolved, rerun postConfigure

The /tmp/master-rep-status-172.18.0.2.log has:

Create Replication User idbrep for node 172.18.0.2
CREATE USER IF NOT EXISTS 'idbrep'@'172.18.0.2' IDENTIFIED BY 'Calpont1';
GRANT REPLICATION SLAVE ON *.* TO 'idbrep'@'172.18.0.2';
Grant table access for idbrep for node 172.18.0.2
use mysql
grant all on *.* to 'idbrep'@'172.18.0.2' identified by 'Calpont1';
grant REPLICATION SLAVE on *.* to 'idbrep'@'172.18.0.2' identified by 'Calpont1';
ERROR 1045 (28000) at line 2: Access denied for user 'root'@'localhost' (using password: NO)

After replacing two lines:

grant all on *.* to '$repUser'@'$hostipaddr' identified by 'Calpont1';
grant REPLICATION SLAVE on *.* to '$repUser'@'$hostipaddr' identified by 'Calpont1';

in the script:
https://github.com/mariadb-corporation/mariadb-columnstore-engine/blob/master/oam/install_scripts/master-rep-infinidb.sh#L68
with line:

grant all on infinidb_vtable to '$repUser'@'$hostipaddr' identified by 'Calpont1';

from
https://github.com/infinidb/infinidb/blob/master/oam/install_scripts/master-rep-infinidb.sh#L68
the postConfigure completed successfully, with master-slave replication up and running.

In a clean install (not upgrade), the script creates the replication user successfully:

 show grants for `idbrep`@`172.18.0.5`;
+----------------------------------------------------------------------------------+
| Grants for idbrep@172.18.0.5                                                     |
+----------------------------------------------------------------------------------+
| GRANT ALL PRIVILEGES ON *.* TO 'idbrep'@'172.18.0.5' IDENTIFIED BY PASSWORD '*x' |
+----------------------------------------------------------------------------------+

Does the MariaDB ColumnsStore replication user needs such broad privileges?



 Comments   
Comment by David Hill (Inactive) [ 2017-11-30 ]

Does the MariaDB ColumnStore replication user needs such broad privileges?

That was the default settings when this was all setup on InfiniDB and merged forwarded onto ColumnStore.

But its worth looking at and compare how the MariaDB server is setups.

Thanks for the input

Comment by David Thompson (Inactive) [ 2017-12-06 ]

This would be a good improvement security wise.

Comment by Todd Stoffel (Inactive) [ 2022-11-05 ]

This item is being closed because it was well passed the expiration date with no activity. If you suspect this was done in error please create a new ticket.

Generated at Thu Feb 08 02:25:55 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.