| 2012-11-04 14:58:55 |
Markus Falb |
description |
# rpm -q mysql percona-toolkit
mysql-5.0.95-1.el5_7.1
mysql-5.0.95-1.el5_7.1
percona-toolkit-2.1.5-1
Starting with an user that lacks necessary privileges brings me this.
Starting pt-heartbeat: DBD::mysql::db selectrow_hashref failed: Access denied; you need the SUPER,REPLICATION CLIENT privilege for this operation [for Statement "SHOW MASTER STATUS"] at /usr/bin/pt-heartbeat line 4883.
FAILED
This error message is could easily trick an admin to think that both privileges are necessary. The mysql docu at
http://dev.mysql.com/doc/refman/5.0/en/privileges-provided.html says
The REPLICATION CLIENT privilege enables the use of SHOW MASTER STATUS and SHOW SLAVE STATUS.
so super is not needed.
http://dev.mysql.com/doc/refman/5.0/en/too-many-connections.html says
mysqld actually permits max_connections+1 clients to connect. etc...
Therefore I think it's important not to give SUPER privilege unnecessary. pt-heartbeat could eat up your extra connection slot (Imagine a full log partition for example)
I think the error message should read
you need the REPLICATION CLIENT privilege
instead of
you need the SUPER,REPLICATION CLIENT privilege |
# rpm -q mysql-server percona-toolkit
mysql-server-5.0.95-1.el5_7.1
percona-toolkit-2.1.5-1
Starting with an user that lacks necessary privileges brings me this.
Starting pt-heartbeat: DBD::mysql::db selectrow_hashref failed: Access denied; you need the SUPER,REPLICATION CLIENT privilege for this operation [for Statement "SHOW MASTER STATUS"] at /usr/bin/pt-heartbeat line 4883.
FAILED
This error message is could easily trick an admin to think that both privileges are necessary. The mysql docu at
http://dev.mysql.com/doc/refman/5.0/en/privileges-provided.html says
The REPLICATION CLIENT privilege enables the use of SHOW MASTER STATUS and SHOW SLAVE STATUS.
so super is not needed.
http://dev.mysql.com/doc/refman/5.0/en/too-many-connections.html says
mysqld actually permits max_connections+1 clients to connect. etc...
Therefore I think it's important not to give SUPER privilege unnecessary. pt-heartbeat could eat up your extra connection slot (Imagine a full log partition for example)
I think the error message should read
you need the REPLICATION CLIENT privilege
instead of
you need the SUPER,REPLICATION CLIENT privilege |
|
