13050 Commits

Author SHA1 Message Date
Johan Wikman
c7bedbe622 Add missing script
Copied from 2.4
2020-01-15 11:22:00 +02:00
Johan Wikman
b61ebfe82e Merge branch '2.3.16' into 2.3 2020-01-15 11:20:28 +02:00
Johan Wikman
6680a7dcdd Update 2.3 maintenance version 2020-01-15 11:15:54 +02:00
Johan Wikman
790d90f229 Update 2.3.16 Change Date 2020-01-15 11:08:51 +02:00
Johan Wikman
1168ca5045 Add 2.3.16 release notes and update change log 2020-01-15 10:51:34 +02:00
Esa Korhonen
8b29760285 MXS-2812 Document "Auth Error" state
It was left out of the main configuration guide.
2020-01-15 10:40:11 +02:00
Johan Wikman
bb2f0a98cb Remove Cache filter storage_rocksdb documentation
The code is no longer present in MaxScale.
2020-01-15 10:38:41 +02:00
Markus Mäkelä
a65220165a
Fix use of gw_get_shared_session_auth_info
If the client DCB of the session was passed into the function, it was
possible that the session pointer for it was already set to null. The
session pointer of an open DCB is never null but a client DCB's session
pointer can be null if accessed via the MXS_SESSION object.
2020-01-13 19:28:45 +02:00
Markus Mäkelä
aeab1bdc7d
Cherry-pick: Fall back to pkill in run_ctrl_c.sh
The pkill executable is provided by the same package that provides ps
which is why it is more likely to be installed. Seems that the test VMs
don't always have killall installed.

Run the MaxScale process with the maxscale user instead of the root user
to prevent any new files from being owned by a different user.

Cherry-picked the commit a06c122a5e050071589f724758d6bbd3d8d3f419 from
develop.
2020-01-13 17:12:05 +02:00
Markus Mäkelä
1d8139587b
MXS-2710: Move client_count handling into client DCB
Due to the fact that both client connections and listeners use sessions in
2.3, the client_count tracking must be done inside the client DCB. In
addition to this, the max_connections check didn't take the current
pending connection into account which caused an off-by-one error.

This commit fixes the connection_limit test failure that was introduced by
commit 6306519e5e75575ba083ee2f0edfe7e624da5d26.
2020-01-13 17:12:04 +02:00
Markus Mäkelä
4918914042
MXS-2810: Stop MaxScale on uninstall 2020-01-10 09:47:19 +02:00
Markus Mäkelä
c18cbb7a6d
MXS-2758: Enable MaxScale after installation 2020-01-10 09:45:19 +02:00
Markus Mäkelä
6e8318f72f
MXS-2829: Remove config file when deleting a filter 2020-01-08 15:30:15 +02:00
Markus Mäkelä
36b0196c3e
MXS-2825: Fix basic user privileges
All POST, PUT, DELETE and PATCH commands should be prevented regardless of
whether they define a request body.
2020-01-07 10:40:41 +02:00
Markus Mäkelä
edb49d6f35
MXS-2824: Document basic user privileges
The documentation was not clear on what the difference between admin and
basic accounts is.
2020-01-07 10:40:41 +02:00
Markus Mäkelä
6306519e5e
MXS-2710: Move client_count handling inside Session
By incrementing the counters when the session is created, we know that the
counter will always be decremented correctly. This does cause the listener
session to be counted as an actual session but this is already present in
the statistics calculations and is something we have to live with in 2.3
This change also makes it possible to overshoot the connection count
limitation as the session creation is delayed until authentication
fails. Both of these problems are fixed in 2.4.
2020-01-07 10:40:40 +02:00
Markus Mäkelä
aa83bc24ae
MXS-2820: Log default database on auth failure
The default database was not exposed in the warning that was logged when
authentication failed. The authentication uses the username, host and the
default database to find the user entry and the lack of the default
database made it hard to know for sure which user entry a client should've
matched against.
2020-01-02 12:00:10 +02:00
Markus Mäkelä
964207cbea
MXS-2820: Return correct value on wrong password 2020-01-02 11:34:47 +02:00
yunyong
ff78a8bca5 Fix api reseponse 2019-12-30 10:06:59 +02:00
Markus Mäkelä
8de3339bc0
MXS-619: Restore old test
The test now performs the original test of not doing any queries between
the opening and closing of sessions.
2019-12-19 14:43:27 +02:00
Markus Mäkelä
484ff06795
MXS-619: Send fake response for unconnected DCBs
This causes the connection failure to be counted as an authentication
failure instead of a connection error. The former never causes the host to
be blocked which effectively solves the problem for most cases. The only
case where this would not work is where the network buffer for a backend
DCB is full right after the connection is created.
2019-12-19 14:21:27 +02:00
Markus Mäkelä
e725ebb7d0
Add missing set of fake event flag
The FakeEventTask called the actual DCB handler with a fake task but it
didn't set the fake event flag. This caused KILL queries to be treated as
if they were network errors.
2019-12-19 11:31:51 +02:00
Markus Mäkelä
a73b183555
MXS-2813: Mask password values in output
The password values are now masked with asterisks. This tells whether a
password is set or not but it does not expose any information about the
password itself.
2019-12-19 09:56:00 +02:00
Timofey Turenko
f35664f903 Remove exception for RHEL 8 - now packages are also built with CentOS
We do not build RHEL packageas, but create RHEL repos as symlinks
to CentOS repos. For RHEL8 was an expection intruduced, because
CentOS 8 was not available at the time when RHEL8 was released.
Now CentOS 8 is also available, switching to CentOS 8 image.
2019-12-18 13:56:49 +02:00
Markus Mäkelä
b3f44adb16
MXS-2797: Fix handle_events documentation
The parameter was called handle_server_events when in reality it was
handle_events.
2019-12-17 13:48:51 +02:00
Markus Mäkelä
b0a1eddb6c
Store ignored error information
The errors that are ignored by readwritesplit are now stored as the
current close reason in the Backend. This allows the information about the
error to be retained and it can be used later in the error handler to
display the true reason why the connection was closed.
2019-12-17 13:48:51 +02:00
Timofey Turenko
aa801c74c5 Use constexpr instead of define in the mxs173_throttle_filter test 2019-12-16 19:53:53 +02:00
Timofey Turenko
e1fc0b8734 Squashed commit of the following:
commit 48a0b902b67da46f1eed4afa687bdcb56b59d02f
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Mon Dec 16 15:35:07 2019 +0200

    Increase timouts in the mxs173_trottle_filter test

commit 81d8083a89421a8004b8024d480ae0f35d715b86
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Mon Dec 16 14:19:39 2019 +0200

    Increase timeouts in max1071_maxrow test

commit e1039c6132f0e9274b8801165f3f905ede7c9421
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Mon Dec 16 00:06:53 2019 +0200

    Remove hardcoded 'home/vagrant/' from all maxscale.cnf in system tests

commit 28c8029e060afdcf5159bf802b13dcd5e484d9f1
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Sun Dec 15 21:31:34 2019 +0200

    Use private IP for Galera congiguration in maxscale-system-tests

commit 66dc36cbf43a5fb92465df31e1295e82865be1fc
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Sun Dec 15 09:06:28 2019 +0200

    Fix typos in fwf_*.cpp

commit 44c7a4384ddf39596c0254c955aeb6c008a00a35
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Sun Dec 15 09:05:26 2019 +0200

    Fix typos in fwf_*.cpp

commit 2649017611908a8b0d27090f49722947ac31c4f4
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Sun Dec 15 09:03:41 2019 +0200

    Fix typos in fwf_*.cpp

commit 5cc87658523e8496eaab17700be8a821af5b0cde
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Sat Dec 14 23:54:53 2019 +0200

    Fix typo in fwf_copy_rules.cpp

commit fb1accc36cb9d79691469f63cb4535f3bc38dedd
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Sat Dec 14 23:52:51 2019 +0200

    More hardcoded 'vagrant' removals

commit 77e49d474b4abe767629ff87b01f08137773d761
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Sat Dec 14 23:35:09 2019 +0200

    Fix hardcoded 'vagrant' user in fwf* tests

    Several firewall filter tests has hardcoded 'vagrant' as a user name for
    access user on the VM. Changed to node->access_user.

commit ed5ab1487f37822db6a7478f76c0f3652776c389
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Sat Dec 14 22:50:35 2019 +0200

    Fix IP vs IP_private

    Many tests use IP instead of IP_private which makes them failed in the
    AWS or GCloud environment.
    The same applies to get_conn_num() etc functions.

commit 0558aac23d303a675dc12d05b1766e698753b444
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Thu Aug 15 12:02:01 2019 +0300

    fix IP -> IP_private for some mysqlmon* testst

commit 5d9c70970d970eb995c8774d0088bd1c54ab76fe
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Sat Dec 14 20:20:51 2019 +0200

    Replace IP to IP_private in the maxscale-system-tests

commit b06cf3329af59ff100748691991213fe639f29e6
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Tue Nov 19 11:52:33 2019 +0200

    Remove spaces from value which were read from *_network_config

    MDBCI can put spaces around values in the *_network_config file which
    can cause ssh connection failures in the tests. To fix it removing all
    spaces from all values which were read from *_network_config

commit b3904f019847ef1db9d4ec9714ad9ef869fa0b01
Author: Timofey Turenko <timofey.turenko@mariadb.com>
Date:   Thu Dec 12 23:36:31 2019 +0200

    Increate default timeout for all system tests
2019-12-16 15:41:52 +02:00
Niclas Antti
41c1ce441a fix bug in average 2019-12-16 09:36:20 +02:00
Timofey Turenko
c04b7bc414 Fix typo in install_build_depends.sh 2019-12-14 22:13:30 +02:00
Markus Mäkelä
e057c751cd
Improve handleError error messages
The hangup and error handlers now have unique messages. Although the
behavior in the handlers is practically the same in both cases, the cause
of the error is not the same.

If a socket error is present, it is added to the error message. If an
error is present, it should clearly show the reason why the TCP socket was
closed.

The is_fake_event boolean helps distinguish fake events from real
ones. This makes figuring out the real source of hangup events easier.
2019-12-13 10:50:04 +02:00
Esa Korhonen
44664132bc MXS-2792 Improve monitor script documentation
Apparently the previous script example was not working. Moved the
updated example to Monitor-Common.md.
2019-12-13 10:38:07 +02:00
Timofey Turenko
da682b7777 Fix trailing whitespace in install_build_deps.sh 2019-12-12 23:31:38 +02:00
Timofey Turenko
ba46cb4434 Enable 'PowerTools' yum repo if it is present
In CentOS8 some -devel packages are moved to PowerTools repository which
is disabled by default. install_build_depends now checks if this repo
is in the repolist then add enablerepo=PowerTools to the yum command
2019-12-11 17:35:32 +02:00
Timofey Turenko
2fc42fca1e Remove Docker installation from build script
Installation of Docker is removed from build script because it is done
in the not very reliable way and can fail and cause build failure.
E.g. this installation causes conflict with existing Docker.
2019-12-11 13:08:27 +02:00
Markus Mäkelä
7be6ee1616
MXS-2789: Make stale journal messages notifications
These events are of no actual consequence and can be safely ignored. It is
simply informational.
2019-12-10 11:11:05 +02:00
Markus Mäkelä
5ab6c472a0
Fix parameter name for kerberos_setup_ssl config 2019-12-10 09:48:58 +02:00
Johan Wikman
e673c3eab0 MXS-2788 Use case-insensitive string comparisons
When names are matched in rules and in resultsets, case insensitive
matching must be used.
2019-12-05 13:44:18 +02:00
Johan Wikman
694c0e784b MXS-2788 Add test that reveals problem
String comparison when checking whether a columns should be masked
is made in a case-insensitive way.
2019-12-05 13:02:05 +02:00
Johan Wikman
4f91d8aa77 Merge branch '2.3.15' into 2.3 2019-12-05 10:47:38 +02:00
Johan Wikman
578004677f Update 2.3.15 release date 2019-12-05 10:36:48 +02:00
Markus Mäkelä
fa656c6870
Disable peer verification in kerberos_setup_ssl
The test uses the command line client which doesn't provide certificates.
2019-12-05 10:21:25 +02:00
Johan Wikman
c5c6cc0363 Update 2.3 maintenance version 2019-12-05 10:11:15 +02:00
Markus Mäkelä
a7ca73a0de
Disable peer verification in kerberos_setup_ssl
The test uses the command line client which doesn't provide certificates.
2019-12-05 10:01:02 +02:00
Markus Mäkelä
acb8c70515
Skip timezone info for unit tests
The docker-based unit tests don't require timezones and not loading them
speeds things up greatly.
2019-12-04 13:27:24 +02:00
Johan Wikman
216ce9b4ee Add 2.3.15 release notes and update change log 2019-12-04 11:29:45 +02:00
Markus Mäkelä
9e9abbe8be
MXS-2786: Require certificates when verifying peers
When peer verification is enabled, clients must present a certificate.
2019-12-03 10:34:00 +02:00
Markus Mäkelä
255071efce
Add version to show servers output
This was missing in maxctrl but it was present in maxadmin.
2019-12-03 09:58:24 +02:00
Markus Mäkelä
1e57c2cb67
MXS-2643: Mention Galera in causal_reads documentation
causal_reads does not work with servers that update their state via
mechanisms other than the standard replication. In practice this is just
another Galera limitation.
2019-12-03 09:58:23 +02:00
Timofey Turenko
5ae2d02215 Merge branch '2.3' of github.com:mariadb-corporation/MaxScale into 2.3 2019-11-30 22:35:47 +02:00