Extend MDEV-13453 workaround explanations
The example SQL now shows the extra grant required for 10.2 versions. Also removed duplicate user creation examples from the tutorials.
This commit is contained in:
@ -907,15 +907,18 @@ GRANT SELECT ON mysql.db TO 'maxscale'@'maxscalehost';
|
|||||||
GRANT SELECT ON mysql.tables_priv TO 'maxscale'@'maxscalehost';
|
GRANT SELECT ON mysql.tables_priv TO 'maxscale'@'maxscalehost';
|
||||||
GRANT SELECT ON mysql.roles_mapping TO 'maxscale'@'maxscalehost';
|
GRANT SELECT ON mysql.roles_mapping TO 'maxscale'@'maxscalehost';
|
||||||
GRANT SHOW DATABASES ON *.* TO 'maxscale'@'maxscalehost';
|
GRANT SHOW DATABASES ON *.* TO 'maxscale'@'maxscalehost';
|
||||||
|
|
||||||
|
-- MariaDB from 10.2.2 to 10.2.10 requires extra grants
|
||||||
|
GRANT SELECT ON mysql.* TO 'maxscale'@'maxscalehost';
|
||||||
```
|
```
|
||||||
|
|
||||||
|
**Note:** MariaDB versions 10.2.10 and older require a `SELECT` grant on
|
||||||
|
`mysql.*` in addition to the normal grants. This is to work around MDEV-13453
|
||||||
|
which was fixed in MariaDB 10.2.11.
|
||||||
|
|
||||||
See [MaxScale Troubleshooting](https://mariadb.com/kb/en/mariadb-enterprise/maxscale-troubleshooting/)
|
See [MaxScale Troubleshooting](https://mariadb.com/kb/en/mariadb-enterprise/maxscale-troubleshooting/)
|
||||||
for more information on how to troubleshoot authentication related problems.
|
for more information on how to troubleshoot authentication related problems.
|
||||||
|
|
||||||
**Note:** Due to a bug in MariaDB 10.2.9, if you see a
|
|
||||||
`SELECT command denied to user ... for table 'users'`
|
|
||||||
error, grant `SELECT ON mysql.*` to this user.
|
|
||||||
|
|
||||||
<a id="passwd"></a>
|
<a id="passwd"></a>
|
||||||
#### `password`
|
#### `password`
|
||||||
|
|
||||||
|
@ -90,16 +90,8 @@ for the read service we use the _slave_ type.
|
|||||||
|
|
||||||
The final part of the service configuration is the `user` and `password`
|
The final part of the service configuration is the `user` and `password`
|
||||||
parameters that define the credentials that the service will use to populate the
|
parameters that define the credentials that the service will use to populate the
|
||||||
user authentication data. To create this user, execute the following SQL commands.
|
user authentication data. These users were created at the start of the
|
||||||
|
[MaxScale Tutorial](MaxScale-Tutorial.md).
|
||||||
```
|
|
||||||
CREATE USER 'maxscale'@'%' IDENTIFIED BY 'maxscale_pw';
|
|
||||||
GRANT SELECT ON mysql.user TO 'maxscale'@'%';
|
|
||||||
GRANT SELECT ON mysql.db TO 'maxscale'@'%';
|
|
||||||
GRANT SELECT ON mysql.tables_priv TO 'maxscale'@'%';
|
|
||||||
GRANT SELECT ON mysql.roles_mapping TO 'maxscale'@'%';
|
|
||||||
GRANT SHOW DATABASES ON *.* TO 'maxscale'@'%';
|
|
||||||
```
|
|
||||||
|
|
||||||
**Note:** For increased security [encrypt your passwords in the configuration file](Encrypting-Passwords.md).
|
**Note:** For increased security [encrypt your passwords in the configuration file](Encrypting-Passwords.md).
|
||||||
|
|
||||||
|
@ -35,6 +35,9 @@ GRANT SELECT ON mysql.db TO 'maxscale'@'%';
|
|||||||
GRANT SELECT ON mysql.tables_priv TO 'maxscale'@'%';
|
GRANT SELECT ON mysql.tables_priv TO 'maxscale'@'%';
|
||||||
GRANT SELECT ON mysql.roles_mapping TO 'maxscale'@'%';
|
GRANT SELECT ON mysql.roles_mapping TO 'maxscale'@'%';
|
||||||
GRANT SHOW DATABASES ON *.* TO 'maxscale'@'%';
|
GRANT SHOW DATABASES ON *.* TO 'maxscale'@'%';
|
||||||
|
|
||||||
|
-- MariaDB from 10.2.2 to 10.2.10 requires extra grants
|
||||||
|
GRANT SELECT ON mysql.* TO 'maxscale'@'%';
|
||||||
```
|
```
|
||||||
|
|
||||||
These credentials will be used by the services in MaxScale to populate the user
|
These credentials will be used by the services in MaxScale to populate the user
|
||||||
|
@ -72,16 +72,8 @@ or addresses of the servers.
|
|||||||
|
|
||||||
The final part of the service configuration is the `user` and `password`
|
The final part of the service configuration is the `user` and `password`
|
||||||
parameters that define the credentials that the service will use to populate the
|
parameters that define the credentials that the service will use to populate the
|
||||||
user authentication data. To create this user, execute the following SQL commands.
|
user authentication data. These users were created at the start of the
|
||||||
|
[MaxScale Tutorial](MaxScale-Tutorial.md).
|
||||||
```
|
|
||||||
CREATE USER 'maxscale'@'%' IDENTIFIED BY 'maxscale_pw';
|
|
||||||
GRANT SELECT ON mysql.user TO 'maxscale'@'%';
|
|
||||||
GRANT SELECT ON mysql.db TO 'maxscale'@'%';
|
|
||||||
GRANT SELECT ON mysql.tables_priv TO 'maxscale'@'%';
|
|
||||||
GRANT SELECT ON mysql.roles_mapping TO 'maxscale'@'%';
|
|
||||||
GRANT SHOW DATABASES ON *.* TO 'maxscale'@'%';
|
|
||||||
```
|
|
||||||
|
|
||||||
**Note:** For increased security [encrypt your passwords in the configuration file](Encrypting-Passwords.md).
|
**Note:** For increased security [encrypt your passwords in the configuration file](Encrypting-Passwords.md).
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user