[MXS-71] dbfwfilter at_times clause seems to erroneously block user Created: 2015-03-27  Updated: 2015-04-29  Resolved: 2015-03-28

Status: Closed
Project: MariaDB MaxScale
Component/s: dbfwfilter
Affects Version/s: None
Fix Version/s: 1.1.0

Type: Bug Priority: Blocker
Reporter: Kolbe Kegel (Inactive) Assignee: markus makela
Resolution: Fixed Votes: 0
Labels: None


 Description   

I'm not too sure what's going on here, but it seems like my user is being blocked completely when I include an at_times clause for my rule.

[Database Firewall]
 
type=filter
 
module=dbfwfilter
 
rules=/home/skysql/dbfwfilter_rules.txt
 

rule testrule deny no_where_clause at_times 17:00:00-19:00:00 on_queries delete
 
users kolbe@% testuser@% match strict_all rules testrule
 

[root@max1 ~]# date
 
Fri Mar 27 12:35:03 PDT 2015
 

[root@max1 ~]# mysql -h 192.168.30.38 -P4006 -u kolbe -ppass  -e 'select * from test.t1 where 1'
 
ERROR 1141 (HY000) at line 1: Access denied for user 'kolbe'@'192.168.30.38'
 

2015-03-27 12:36:33   139941065504512 [poll_waitevents] epoll_wait found 1 fds
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] event 1 dcb 0x210ef00 role DCB_ROLE_SERVICE_LISTENER
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] Accept in fd 13
 
2015-03-27 12:36:33   139941065504512 [dcb_write] Wrote 106 Bytes to dcb 0x7f467c0009c0 in state DCB_STATE_ALLOC fd 19
 
2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c0009c0 fd 19 DCB_STATE_ALLOC -> DCB_STATE_POLLING
 
2015-03-27 12:36:33   139941065504512 [poll_add_dcb] Added dcb 0x7f467c0009c0 in state DCB_STATE_POLLING to poll set.
 
2015-03-27 12:36:33   139941065504512 [gw_MySQLAccept] Added dcb 0x7f467c0009c0 for fd 19 to epoll set.
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] epoll_wait found 1 fds
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] event 4 dcb 0x7f467c0009c0 role DCB_ROLE_REQUEST_HANDLER
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] epoll_wait found 1 fds
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] event 5 dcb 0x7f467c0009c0 role DCB_ROLE_REQUEST_HANDLER
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] Read in dcb 0x7f467c0009c0 fd 19
 
2015-03-27 12:36:33   139941065504512 [dcb_read] Read 85 bytes from dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19.
 
2015-03-27 12:36:33   Receiving connection from 'kolbe' to database '(null)'.
 
2015-03-27 12:36:33   139941065504512 [MySQL Client Auth], checking user [kolbe@192.168.30.38] db:
 
2015-03-27 12:36:33   139941065504512 [MySQL Client Auth], checking user [kolbe@192.168.30.38] with wildcard host [%]
 
2015-03-27 12:36:33   139941065504512 [gw_do_connect_to_backend] Connected to backend server 192.168.30.33:3306, fd 20.
 
2015-03-27 12:36:33   139941065504512 [gw_create_backend_connection] Connection pending to 192.168.30.33:3306, protocol fd 20 client fd 19.
 
2015-03-27 12:36:33   139941065504512 [dcb_connect] Connected to server 192.168.30.33:3306, from backend dcb 0x7f467c005cf0, client dcp 0x7f467c0009c0 fd 19.
 
2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c005cf0 fd 20 DCB_STATE_ALLOC -> DCB_STATE_POLLING
 
2015-03-27 12:36:33   139941065504512 [poll_add_dcb] Added dcb 0x7f467c005cf0 in state DCB_STATE_POLLING to poll set.
 
2015-03-27 12:36:33   139941065504512 [gw_do_connect_to_backend] Connected to backend server 192.168.30.31:3306, fd 21.
 
2015-03-27 12:36:33   139941065504512 [gw_create_backend_connection] Connection pending to 192.168.30.31:3306, protocol fd 21 client fd 19.
 
2015-03-27 12:36:33   139941065504512 [dcb_connect] Connected to server 192.168.30.31:3306, from backend dcb 0x7f467c005200, client dcp 0x7f467c0009c0 fd 19.
 
2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c005200 fd 21 DCB_STATE_ALLOC -> DCB_STATE_POLLING
 
2015-03-27 12:36:33   139941065504512 [poll_add_dcb] Added dcb 0x7f467c005200 in state DCB_STATE_POLLING to poll set.
 
2015-03-27 12:36:33   139941065504512 [dcb_write] Wrote 11 Bytes to dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] epoll_wait found 1 fds
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] event 4 dcb 0x7f467c005cf0 role DCB_ROLE_REQUEST_HANDLER
 
2015-03-27 12:36:33   139941065504512 [gw_write_backend_event] wrote to dcb 0x7f467c005cf0 fd 20, return 1
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] epoll_wait found 1 fds
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] event 5 dcb 0x7f467c0009c0 role DCB_ROLE_REQUEST_HANDLER
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] Read in dcb 0x7f467c0009c0 fd 19
 
2015-03-27 12:36:33   139941065504512 [dcb_read] Read 37 bytes from dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19.
 
2015-03-27 12:36:33   139941065504512 [dcb_write] Wrote 59 Bytes to dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] epoll_wait found 1 fds
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] event 5 dcb 0x7f467c0009c0 role DCB_ROLE_REQUEST_HANDLER
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] Read in dcb 0x7f467c0009c0 fd 19
 
2015-03-27 12:36:33   139941065504512 [dcb_read] Read 34 bytes from dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19.
 
2015-03-27 12:36:33   139941065504512 [dcb_write] Wrote 59 Bytes to dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] epoll_wait found 1 fds
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] event 5 dcb 0x7f467c0009c0 role DCB_ROLE_REQUEST_HANDLER
 
2015-03-27 12:36:33   139941065504512 [poll_waitevents] Read in dcb 0x7f467c0009c0 fd 19
 
2015-03-27 12:36:33   139941065504512 [dcb_read] Read 5 bytes from dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19.
 
2015-03-27 12:36:33   139941065504512 [dcb_write] Wrote 59 Bytes to dcb 0x7f467c0009c0 in state DCB_STATE_POLLING fd 19
 
2015-03-27 12:36:33   139941065504512 [dcb_close]
 
2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c0009c0 fd 19 DCB_STATE_POLLING -> DCB_STATE_NOPOLLING
 
2015-03-27 12:36:33   139941065504512 [dcb_close] Removed dcb 0x7f467c0009c0 in state DCB_STATE_NOPOLLING from poll set.
 
2015-03-27 12:36:33   139941065504512 [gw_client_close]
 
2015-03-27 12:36:33   139941065504512 [RWSplit:closeSession]
 
2015-03-27 12:36:33   139941065504512 [dcb_close]
 
2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c005cf0 fd 20 DCB_STATE_POLLING -> DCB_STATE_NOPOLLING
 
2015-03-27 12:36:33   139941065504512 [dcb_close] Removed dcb 0x7f467c005cf0 in state DCB_STATE_NOPOLLING from poll set.
 
2015-03-27 12:36:33   139941065504512 [gw_backend_close]
 
2015-03-27 12:36:33   139941065504512 [gw_MySQLWrite_backend] delayed write to dcb 0x7f467c005cf0 fd 20 protocol state MYSQL_CONNECTED.
 
2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c005cf0 fd 20 DCB_STATE_NOPOLLING -> DCB_STATE_ZOMBIE
 
2015-03-27 12:36:33   139941065504512 [dcb_close]
 
2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c005200 fd 21 DCB_STATE_POLLING -> DCB_STATE_NOPOLLING
 
2015-03-27 12:36:33   139941065504512 [dcb_close] Removed dcb 0x7f467c005200 in state DCB_STATE_NOPOLLING from poll set.
 
2015-03-27 12:36:33   139941065504512 [gw_backend_close]
 
2015-03-27 12:36:33   139941065504512 [gw_MySQLWrite_backend] delayed write to dcb 0x7f467c005200 fd 21 protocol state MYSQL_PENDING_CONNECT.
 
2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c005200 fd 21 DCB_STATE_NOPOLLING -> DCB_STATE_ZOMBIE
 
2015-03-27 12:36:33   139941065504512 [dcb_set_state_nomutex] dcb 0x7f467c0009c0 fd 19 DCB_STATE_NOPOLLING -> DCB_STATE_ZOMBIE
 
2015-03-27 12:36:33   139941075994368 [dcb_process_zombies] Remove dcb 0x7f467c0009c0 fd 19 in state DCB_STATE_ZOMBIE from the list of zombies.
 
2015-03-27 12:36:33   139941075994368 [dcb_process_zombies] Remove dcb 0x7f467c005200 fd 21 in state DCB_STATE_ZOMBIE from the list of zombies.
 
2015-03-27 12:36:33   139941075994368 [dcb_process_zombies] Remove dcb 0x7f467c005cf0 fd 20 in state DCB_STATE_ZOMBIE from the list of zombies.
 
2015-03-27 12:36:33   139941075994368 [dcb_process_zombies] Closed socket -1 on dcb 0x7f467c0009c0.
 
2015-03-27 12:36:33   139941075994368 [dcb_set_state_nomutex] dcb 0x7f467c0009c0 fd -1 DCB_STATE_ZOMBIE -> DCB_STATE_DISCONNECTED
 
2015-03-27 12:36:33   139941075994368 [dcb_process_zombies] Closed socket -1 on dcb 0x7f467c005200.
 
2015-03-27 12:36:33   139941075994368 [dcb_set_state_nomutex] dcb 0x7f467c005200 fd -1 DCB_STATE_ZOMBIE -> DCB_STATE_DISCONNECTED
 
2015-03-27 12:36:33   139941075994368 [dcb_process_zombies] Closed socket -1 on dcb 0x7f467c005cf0.
 
2015-03-27 12:36:33   139941075994368 [dcb_set_state_nomutex] dcb 0x7f467c005cf0 fd -1 DCB_STATE_ZOMBIE -> DCB_STATE_DISCONNECTED



 Comments   
Comment by Timofey Turenko [ 2015-04-29 ]

test added

Generated at Thu Feb 08 03:56:34 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.