search

trellix-enterprise / mysql-audit

AUDIT Plugin for MySQL. See wiki and readme for description. If you find the plugin useful, please star us on GitHub. We love stars and it's a great way to show your feedback.
Other
239 stars 57 forks source link

Is Percona Server 5.7.27-30 not supported? #222

Open kanpai0828 opened 4 years ago

kanpai0828 commented 4 years ago

Hi Team, My environment is 5.7.27-30-log Percona Server on CentOS 7.4. When I installed this plugin (audit-plugin-percona-5.7-1.1.7-866), I got the following error messages.

mysql> INSTALL PLUGIN AUDIT SONAME 'libaudit_plugin.so'; ERROR 1123 (HY000): Can't initialize function 'AUDIT'; Plugin initialization function failed.

In mysql error log:

2020-05-14T08:15:23.084986Z 222309 [Warning] option 'audit-json-file-bufsize': signed value 0 adjusted to 1 2020-05-14T08:15:23.085006Z 222309 [Warning] option 'plugin-audit-json-file-bufsize': signed value 0 adjusted to 1 2020-05-14T08:15:23.140600Z 222309 [ERROR] Plugin 'AUDIT' init function returned error. 2020-05-14T08:15:23.140624Z 222309 [ERROR] Plugin 'AUDIT' registration as a AUDIT failed.

Is it any way to solve this issue?

Thanks a lot.

kanpai0828 commented 4 years ago

I had downloaded the offset-extract.sh scrip from: https://raw.github.com/mcafee/mysql-audit/master/offset-extract/offset-extract.sh and installed gdb. I tried to run the following command. Then it did not work.

chmod +x offset-extract.sh ./offset-extract.sh /usr/sbin/mysqld

//offsets for: /usr/sbin/mysqld (5.7.27-30) {"5.7.27-30","c22976f35d2c0435446e90f220528a1f"offsets.gdb:7: Error in sourced command file: No symbol table is loaded. Use the "file" command.,

kanpai0828 commented 4 years ago

Refer to the page https://github.com/mcafee/mysql-audit/wiki/Troubleshooting. Firstly I installed additional package Percona-Server-57-debuginfo.

yum install Percona-Server-57-debuginfo-5.7.27*.x86_64

Then run the the following command.

./offset-extract.sh /usr/sbin/mysqld /usr/lib/debug/usr/sbin/mysqld.debug

I could successfully get the number offsets.

//offsets for: /usr/sbin/mysqld (5.7.27-30) {"5.7.27-30","c22976f35d2c0435446e90f220528a1f", 8360, 8424, 3928, 5088, 456, 360, 0, 32, 64, 160, 536, 8556, 4656, 3648, 3656, 3660, 6560, 2088, 8, 7592, 7632, 7616, 14328, 148, 672},