[MDEV-23262] Galera: Documentation: There is no info that `wsrep_sst_auth` option should be set for Galera cluster Created: 2020-07-22  Updated: 2023-12-15

Status: Open
Project: MariaDB Server
Component/s: Documentation, Galera
Fix Version/s: N/A

Type: Task Priority: Minor
Reporter: Stepan Patryshev (Inactive) Assignee: Joe Cotellese
Resolution: Unresolved Votes: 1
Labels: None

Issue Links:
Blocks
blocks MDEV-23261 Galera: Documentation: There is no in... Open
PartOf
Relates
relates to MDEV-23261 Galera: Documentation: There is no in... Open

 Description   

In order to have a working Galera cluster `wsrep_sst_auth` option should be set (wsrep_sst_auth=username:userpassword) specifying a user with appropriate rights. I used these commands:

create user username@localhost identified by 'userpassword';
"grant process, reload, lock tables, replication client on *.* to username@localhost;"

I have not found any information about it on the following appropriate resources:

1. https://mariadb.com/resources/blog/getting-started-with-mariadb-galera-and-mariadb-maxscale-on-centos/
2. https://mariadb.com/kb/en/getting-started-with-mariadb-galera-cluster/
3. https://mariadb.com/kb/en/configuring-mariadb-galera-cluster/

Only on https://mariadb.com/kb/en/getting-started-with-mariadb-galera-cluster/ there is 7 years old comment complaining about it.

I suppose, it should be documented.



 Comments   
Comment by Geoff Montee (Inactive) [ 2020-07-22 ]

wsrep_sst_auth is not needed by default for Galera Cluster, because the default SST method is rsync, which does not perform authentication. It is only needed if you use other non-default SST methods by setting wsrep_sst_method to some other value. This is already documented on the following pages:

https://mariadb.com/kb/en/introduction-to-state-snapshot-transfers-ssts/#authentication

https://mariadb.com/kb/en/mariabackup-sst-method/#authentication-and-privileges

However, I will not close this issue yet, because we should also add documentation to the Enterprise Documentation about the various SST methods, and we should include this detail in that new documentation.

Comment by Julien Fritsch [ 2021-09-22 ]

jacob.moorman from our discussion, I decided to reassign Kenneth's ticket to you?

Generated at Thu Feb 08 09:21:05 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.