The proxies_priv table is not replicated

[monty solomon]

Proxies added via the GRANT PROXY statement or via INSERT statements to the proxies_priv table are not replicated to the slaves.

Version 5.7

Created upstream https://bugs.mysql.com/bug.php?id=81424

[monty solomon (monty+launchpad)]

Upstream hasn't fixed this bug. Any chance you can fix it in PS?

[Muhammad Irfan (muhammad-irfan)]

I'm able to replicate this on Percona Server 5.7.18 that PROXY privileges are not being replicated to slave.

[Laurynas Biveinis (laurynas-biveinis)]

Muhammad, what about 5.5 and 5.6?

Monty, the upstream bug has a regression tag - in which versions has this worked before?

[monty solomon (monty+launchpad)]

It works in versions prior to 5.7.

My understanding is that they fixed it in 8.0 and will backport the fix to 5.7.

[Muhammad Irfan (muhammad-irfan)]

Yeah, It works before 5.7, I tested it with Percona Server 5.5 and 5.6 but couldn't reproduced same problem.

master [localhost] {root} ((none)) > SHOW VARIABLES LIKE '%version%';
+-------------------------+------------------------------------------------------+
| Variable_name | Value |
+-------------------------+------------------------------------------------------+
| innodb_version | 5.6.36-rel82.0 |
| protocol_version | 10 |
| slave_type_conversions | |
| tls_version | TLSv1.1,TLSv1.2 |
| version | 5.6.36-82.0-log |
| version_comment | Percona Server (GPL), Release 82.0, Revision 58e846a |
| version_compile_machine | x86_64 |
| version_compile_os | Linux |
+-------------------------+------------------------------------------------------+
8 rows in set (0.00 sec)

master [localhost] {root} ((none)) > show plugins;
+-----------------------------+----------+--------------------+----------------+---------+
| Name | Status | Type | Library | License |
+-----------------------------+----------+--------------------+----------------+---------+
| auth_socket | ACTIVE | AUTHENTICATION | auth_socket.so | GPL |
+-----------------------------+----------+--------------------+----------------+---------+

slave1 [localhost] {msandbox} ((none)) > show plugins;
+-----------------------------+----------+--------------------+----------------+---------+
| Name | Status | Type | Library | License |
+-----------------------------+----------+--------------------+----------------+---------+
| auth_socket | ACTIVE | AUTHENTICATION | auth_socket.so | GPL |
+-----------------------------+----------+--------------------+----------------+---------+

slave2 [localhost] {msandbox} ((none)) > show plugins;
+-----------------------------+----------+--------------------+----------------+---------+
| Name | Status | Type | Library | License |
+-----------------------------+----------+--------------------+----------------+---------+
| auth_socket | ACTIVE | AUTHENTICATION | auth_socket.so | GPL |
+-----------------------------+----------+--------------------+----------------+---------+

master [localhost] {root} ((none)) > CREATE USER 'employee_ext'@'localhost' IDENTIFIED WITH auth_socket AS 'my_auth_string';
Query OK, 0 rows affected (0.01 sec)

master [localhost] {root} ((none)) > CREATE USER 'employee'@'localhost' IDENTIFIED BY 'employee_pass';
Query OK, 0 rows affected (0.00 sec)

master [localhost] {root} ((none)) > GRANT PROXY ON 'employee'@'localhost' TO 'employee_ext'@'localhost';
Query OK, 0 rows affected (0.01 sec)

master [localhost] ...

[Shahriyar Rzayev (rzayev-sehriyar)]

Percona now uses JIRA for bug reports so this bug report is migrated to: https://jira.percona.com/browse/PS-984