Extend MDEV-13453 workaround explanations
The example SQL now shows the extra grant required for 10.2 versions. Also removed duplicate user creation examples from the tutorials.
This commit is contained in:
parent
e5739c4e00
commit
e54a44d56a
@ -907,15 +907,18 @@ GRANT SELECT ON mysql.db TO 'maxscale'@'maxscalehost';
|
||||
GRANT SELECT ON mysql.tables_priv TO 'maxscale'@'maxscalehost';
|
||||
GRANT SELECT ON mysql.roles_mapping TO 'maxscale'@'maxscalehost';
|
||||
GRANT SHOW DATABASES ON *.* TO 'maxscale'@'maxscalehost';
|
||||
|
||||
-- MariaDB from 10.2.2 to 10.2.10 requires extra grants
|
||||
GRANT SELECT ON mysql.* TO 'maxscale'@'maxscalehost';
|
||||
```
|
||||
|
||||
**Note:** MariaDB versions 10.2.10 and older require a `SELECT` grant on
|
||||
`mysql.*` in addition to the normal grants. This is to work around MDEV-13453
|
||||
which was fixed in MariaDB 10.2.11.
|
||||
|
||||
See [MaxScale Troubleshooting](https://mariadb.com/kb/en/mariadb-enterprise/maxscale-troubleshooting/)
|
||||
for more information on how to troubleshoot authentication related problems.
|
||||
|
||||
**Note:** Due to a bug in MariaDB 10.2.9, if you see a
|
||||
`SELECT command denied to user ... for table 'users'`
|
||||
error, grant `SELECT ON mysql.*` to this user.
|
||||
|
||||
<a id="passwd"></a>
|
||||
#### `password`
|
||||
|
||||
|
@ -90,16 +90,8 @@ for the read service we use the _slave_ type.
|
||||
|
||||
The final part of the service configuration is the `user` and `password`
|
||||
parameters that define the credentials that the service will use to populate the
|
||||
user authentication data. To create this user, execute the following SQL commands.
|
||||
|
||||
```
|
||||
CREATE USER 'maxscale'@'%' IDENTIFIED BY 'maxscale_pw';
|
||||
GRANT SELECT ON mysql.user TO 'maxscale'@'%';
|
||||
GRANT SELECT ON mysql.db TO 'maxscale'@'%';
|
||||
GRANT SELECT ON mysql.tables_priv TO 'maxscale'@'%';
|
||||
GRANT SELECT ON mysql.roles_mapping TO 'maxscale'@'%';
|
||||
GRANT SHOW DATABASES ON *.* TO 'maxscale'@'%';
|
||||
```
|
||||
user authentication data. These users were created at the start of the
|
||||
[MaxScale Tutorial](MaxScale-Tutorial.md).
|
||||
|
||||
**Note:** For increased security [encrypt your passwords in the configuration file](Encrypting-Passwords.md).
|
||||
|
||||
|
@ -35,6 +35,9 @@ GRANT SELECT ON mysql.db TO 'maxscale'@'%';
|
||||
GRANT SELECT ON mysql.tables_priv TO 'maxscale'@'%';
|
||||
GRANT SELECT ON mysql.roles_mapping TO 'maxscale'@'%';
|
||||
GRANT SHOW DATABASES ON *.* TO 'maxscale'@'%';
|
||||
|
||||
-- MariaDB from 10.2.2 to 10.2.10 requires extra grants
|
||||
GRANT SELECT ON mysql.* TO 'maxscale'@'%';
|
||||
```
|
||||
|
||||
These credentials will be used by the services in MaxScale to populate the user
|
||||
|
@ -72,16 +72,8 @@ or addresses of the servers.
|
||||
|
||||
The final part of the service configuration is the `user` and `password`
|
||||
parameters that define the credentials that the service will use to populate the
|
||||
user authentication data. To create this user, execute the following SQL commands.
|
||||
|
||||
```
|
||||
CREATE USER 'maxscale'@'%' IDENTIFIED BY 'maxscale_pw';
|
||||
GRANT SELECT ON mysql.user TO 'maxscale'@'%';
|
||||
GRANT SELECT ON mysql.db TO 'maxscale'@'%';
|
||||
GRANT SELECT ON mysql.tables_priv TO 'maxscale'@'%';
|
||||
GRANT SELECT ON mysql.roles_mapping TO 'maxscale'@'%';
|
||||
GRANT SHOW DATABASES ON *.* TO 'maxscale'@'%';
|
||||
```
|
||||
user authentication data. These users were created at the start of the
|
||||
[MaxScale Tutorial](MaxScale-Tutorial.md).
|
||||
|
||||
**Note:** For increased security [encrypt your passwords in the configuration file](Encrypting-Passwords.md).
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user