# rpm -q mysql percona-toolkit
mysql-5.0.95-1.el5_7.1
mysql-5.0.95-1.el5_7.1
percona-toolkit-2.1.5-1
Starting with an user that lacks necessary privileges brings me this.
Starting pt-heartbeat: DBD::mysql::db selectrow_hashref failed: Access denied; you need the SUPER,REPLICATION CLIENT privilege for this operation [for Statement "SHOW MASTER STATUS"] at /usr/bin/pt-heartbeat line 4883.
FAILED
This error message is could easily trick an admin to think that both privileges are necessary. The mysql docu at http://dev.mysql.com/doc/refman/5.0/en/privileges-provided.html says
The REPLICATION CLIENT privilege enables the use of SHOW MASTER STATUS and SHOW SLAVE STATUS.
Therefore I think it's important not to give SUPER privilege unnecessary. pt-heartbeat could eat up your extra connection slot (Imagine a full log partition for example)
I think the error message should read
you need the REPLICATION CLIENT privilege
instead of
you need the SUPER,REPLICATION CLIENT privilege
# rpm -q mysql percona-toolkit 0.95-1. el5_7.1 0.95-1. el5_7.1 toolkit- 2.1.5-1
mysql-5.
mysql-5.
percona-
Starting with an user that lacks necessary privileges brings me this.
Starting pt-heartbeat: DBD::mysql::db selectrow_hashref failed: Access denied; you need the SUPER,REPLICATION CLIENT privilege for this operation [for Statement "SHOW MASTER STATUS"] at /usr/bin/ pt-heartbeat line 4883.
FAILED
This error message is could easily trick an admin to think that both privileges are necessary. The mysql docu at dev.mysql. com/doc/ refman/ 5.0/en/ privileges- provided. html says
http://
The REPLICATION CLIENT privilege enables the use of SHOW MASTER STATUS and SHOW SLAVE STATUS.
so super is not needed.
http:// dev.mysql. com/doc/ refman/ 5.0/en/ too-many- connections. html says
mysqld actually permits max_connections+1 clients to connect. etc...
Therefore I think it's important not to give SUPER privilege unnecessary. pt-heartbeat could eat up your extra connection slot (Imagine a full log partition for example)
I think the error message should read
you need the REPLICATION CLIENT privilege
instead of
you need the SUPER,REPLICATION CLIENT privilege