[MXS-1281] Unable to make client connections to mariadb server through Maxscale Created: 2017-06-07  Updated: 2021-01-11  Resolved: 2017-06-13

Status: Closed
Project: MariaDB MaxScale
Component/s: Documentation
Affects Version/s: 2.0.5
Fix Version/s: 2.0.6

Type: Bug Priority: Major
Reporter: Aravind Dhakshanamoorthy Assignee: markus makela
Resolution: Fixed Votes: 0
Labels: None
Environment:

2 node Galera cluster/replication setup with mariadb server 10.1.19 version on Linux.



 Description   

We setup Maxscale on one of our servers, but are getting some authentication errors when trying to connect even though the user is setup with necessary privileges.

2017-06-07 09:59:08   error  : Invalid authentication message from backend. Error : 28000, Msg : Access denied for user '<REDACTED>' (using password: YES)
2017-06-07 09:59:08   error  : Backend server didn't accept authentication for user ad24859.
 

Please help to resolve the issue.



 Comments   
Comment by markus makela [ 2017-06-09 ]

Does the user have grants for the IP address of the MaxScale host? Seems like the problem is that the server rejects the authentication.

Here's a simple script that can be run from the MaxScale host to duplicate the grants: https://github.com/mariadb-corporation/MaxScale/blob/2.1/script/create_grants

Comment by markus makela [ 2017-06-12 ]

It seems the MaxScale host user was defined without a password. The user must have the same password for the MaxScale host as it does for the client host.

Can you confirm if creating the user with the same password fixes the problem?

Comment by Aravind Dhakshanamoorthy [ 2017-06-12 ]

Markus,

Yes, creating the user with password actually worked. But in the mariadb docs, we have been asked to create that proxy user without password.

Please refer to the the “Creating additional grants for users” section from https://mariadb.com/kb/en/mariadb-enterprise/setting-up-mariadb-maxscale/

Comment by markus makela [ 2017-06-12 ]

The example uses a user without a password which is why the proxy grant also has no password. I think we should update the documentation to also include a password for the user.

Comment by Aravind Dhakshanamoorthy [ 2017-06-12 ]

Markus,

Thanks for your assistance and quick turn around. Appreciate it.

Please advise to close this case.

Rgds,
Aravind

Comment by markus makela [ 2017-06-13 ]

Updated the tutorial with a user that uses a password.

Generated at Thu Feb 08 04:05:33 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.