search

trellix-enterprise / mysql-audit

AUDIT Plugin for MySQL. See wiki and readme for description. If you find the plugin useful, please star us on GitHub. We love stars and it's a great way to show your feedback.
Other
239 stars 57 forks source link

"Offsets set didn't pass validation" for Percona XtraDB Cluster 5.5.41-25.11-853.trusty #146

Closed selivan closed 8 years ago

selivan commented 8 years ago

OS: Ubuntu 14.04 Trusty amd64. Official percona repo http://repo.percona.com/apt is used. Packages installed:

percona-xtradb-cluster-server-5.5 5.5.41-25.11-853.trusty percona-xtradb-cluster-server-debug-5.5 5.5.41-25.11-853.trusty

mysql-audit revision 0839e929a5748b0b75d904bd87b68c01a89be902 (from https://github.com/mcafee/mysql-audit.git). Built with sources for percona-xtradb-cluster-server-5.5 package.

offset-extract.sh script: https://raw.githubusercontent.com/mcafee/mysql-audit/master/offset-extract/offset-extract.sh

Extracting offset:

root@pxc-cluster-build:~# ./offset-extract.sh /usr/sbin/mysqld /usr/sbin/mysqld-debug 
160802 14:37:28 [Warning] Using unique option prefix key_buffer instead of key_buffer_size is deprecated and will be removed in a future release. Please use the full name instead.
//offsets for: /usr/sbin/mysqld (5.5.41-37.0-55)
{"5.5.41-37.0-55","4aa67e7bbbde1b77a557fcbb7df995dc", 6640, 6688, 4168, 4688, 104, 2608, 96, 0, 32, 104, 136, 6792},

my.cnf:

plugin-load=AUDIT=libaudit_plugin.so
audit_validate_checksum=OFF
audit_offsets=6640, 6688, 4168, 4688, 104, 2608, 96, 0, 32, 104, 136, 6792

error.log:

160802 14:30:22 [Note] Audit Plugin: starting up. Version: 1.0.0 , Revision: 99999 (64bit). AUDIT plugin interface version: 50541 (0xc56d). MySQL Server version: 5.5.41-37.0-55.
160802 14:30:22 [Note] Audit Plugin: setup_offsets audit_offsets: 6640, 6688, 4168, 4688, 104, 2608, 96, 0, 32, 104, 136, 6792 validate_checksum: 0 offsets_by_version: 1
160802 14:30:22 [Note] Audit Plugin: mysqld: /usr/sbin/mysqld (4aa67e7bbbde1b77a557fcbb7df995dc) 
160802 14:30:22 [Note] Audit Plugin: setup_offsets Audit_formatter::thd_offsets values: 6640 6688 4168 4688 104 2608 96 0 32 104 136 6792
160802 14:30:22 [ERROR] Audit Plugin: Offsets: (null) ((null)) match thread validation check fails with value: 0. Skipping offest.
160802 14:30:22 [ERROR] Audit Plugin: Offsets set didn't pass validation. audit_offsets: 6640, 6688, 4168, 4688, 104, 2608, 96, 0, 32, 104, 136, 6792 .
160802 14:30:22 [ERROR] Plugin 'AUDIT' init function returned error.
160802 14:30:22 [Note] Audit Plugin: deinit
selivan commented 8 years ago

My bad, here is how to extract correctly:

./offset-extract.sh /usr/sbin/mysqld /usr/lib/debug/usr/sbin/mysqld
aharonrobbins commented 8 years ago

Hi. Glad you got things going OK.

Aharon (Arnold) Robbins Senior Software Engineer Sensor - Database Security McAfee. Part of Intel Security. [cid:image003.png@01CF5AF2.16A4D380]

From: Selivanov Pavel [mailto:notifications@github.com] Sent: Tuesday, August 02, 2016 14:47 To: mcafee/mysql-audit mysql-audit@noreply.github.com Subject: Re: [mcafee/mysql-audit] "Offsets set didn't pass validation" for Percona XtraDB Cluster 5.5.41-25.11-853.trusty (#146)

My bad, here is who to extract correctly:

./offset-extract.sh /usr/sbin/mysqld /usr/lib/debug/usr/sbin/mysqld

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHubhttps://github.com/mcafee/mysql-audit/issues/146#issuecomment-236880531, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AKT-vdxJ_028r-jaL7qzJCl4mL3buCxJks5qby4dgaJpZM4JahOq.