Extend MDEV-13453 workaround explanations

The example SQL now shows the extra grant required for 10.2 versions. Also
removed duplicate user creation examples from the tutorials.
This commit is contained in:
Markus Mäkelä 2018-09-21 11:18:34 +03:00
parent e5739c4e00
commit e54a44d56a
No known key found for this signature in database
GPG Key ID: 72D48FCE664F7B19
4 changed files with 14 additions and 24 deletions

View File

@ -907,15 +907,18 @@ GRANT SELECT ON mysql.db TO 'maxscale'@'maxscalehost';
GRANT SELECT ON mysql.tables_priv TO 'maxscale'@'maxscalehost';
GRANT SELECT ON mysql.roles_mapping TO 'maxscale'@'maxscalehost';
GRANT SHOW DATABASES ON *.* TO 'maxscale'@'maxscalehost';
-- MariaDB from 10.2.2 to 10.2.10 requires extra grants
GRANT SELECT ON mysql.* TO 'maxscale'@'maxscalehost';
```
**Note:** MariaDB versions 10.2.10 and older require a `SELECT` grant on
`mysql.*` in addition to the normal grants. This is to work around MDEV-13453
which was fixed in MariaDB 10.2.11.
See [MaxScale Troubleshooting](https://mariadb.com/kb/en/mariadb-enterprise/maxscale-troubleshooting/)
for more information on how to troubleshoot authentication related problems.
**Note:** Due to a bug in MariaDB 10.2.9, if you see a
`SELECT command denied to user ... for table 'users'`
error, grant `SELECT ON mysql.*` to this user.
<a id="passwd"></a>
#### `password`

View File

@ -90,16 +90,8 @@ for the read service we use the _slave_ type.
The final part of the service configuration is the `user` and `password`
parameters that define the credentials that the service will use to populate the
user authentication data. To create this user, execute the following SQL commands.
```
CREATE USER 'maxscale'@'%' IDENTIFIED BY 'maxscale_pw';
GRANT SELECT ON mysql.user TO 'maxscale'@'%';
GRANT SELECT ON mysql.db TO 'maxscale'@'%';
GRANT SELECT ON mysql.tables_priv TO 'maxscale'@'%';
GRANT SELECT ON mysql.roles_mapping TO 'maxscale'@'%';
GRANT SHOW DATABASES ON *.* TO 'maxscale'@'%';
```
user authentication data. These users were created at the start of the
[MaxScale Tutorial](MaxScale-Tutorial.md).
**Note:** For increased security [encrypt your passwords in the configuration file](Encrypting-Passwords.md).

View File

@ -35,6 +35,9 @@ GRANT SELECT ON mysql.db TO 'maxscale'@'%';
GRANT SELECT ON mysql.tables_priv TO 'maxscale'@'%';
GRANT SELECT ON mysql.roles_mapping TO 'maxscale'@'%';
GRANT SHOW DATABASES ON *.* TO 'maxscale'@'%';
-- MariaDB from 10.2.2 to 10.2.10 requires extra grants
GRANT SELECT ON mysql.* TO 'maxscale'@'%';
```
These credentials will be used by the services in MaxScale to populate the user

View File

@ -72,16 +72,8 @@ or addresses of the servers.
The final part of the service configuration is the `user` and `password`
parameters that define the credentials that the service will use to populate the
user authentication data. To create this user, execute the following SQL commands.
```
CREATE USER 'maxscale'@'%' IDENTIFIED BY 'maxscale_pw';
GRANT SELECT ON mysql.user TO 'maxscale'@'%';
GRANT SELECT ON mysql.db TO 'maxscale'@'%';
GRANT SELECT ON mysql.tables_priv TO 'maxscale'@'%';
GRANT SELECT ON mysql.roles_mapping TO 'maxscale'@'%';
GRANT SHOW DATABASES ON *.* TO 'maxscale'@'%';
```
user authentication data. These users were created at the start of the
[MaxScale Tutorial](MaxScale-Tutorial.md).
**Note:** For increased security [encrypt your passwords in the configuration file](Encrypting-Passwords.md).