github
/
mysql-audit
mirror of https://github.com/mcafee-enterprise/mysql-audit
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Updated Troubleshooting (markdown)

master
guylichtman 2013-04-02 07:34:01 -07:00
parent 98de091a5d
commit 9ea5fbe457
1 changed files with 12 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
Troubleshooting.md

@ -22,7 +22,11 @@ Then try installing the AUDIT plugin either via plugin-load configuration option
Otherwise when mysqld is restarted it won't recognize the `audit_validate_checksum` option and fail starting up.
When checksum validation is turned off, AUDIT plugin will still search for valid offsets according to the MySQL version and perform basic validation on the offsets. If you still see in the error log the message:
When checksum validation is turned off, AUDIT plugin will still search for valid offsets according to the MySQL version and perform basic validation on the offsets.
**Note:** Starting with version 1.0.3 a new configuration parameter was introduced: `offsets_by_version`. It controls if to load and validate offsets according to the MySQL version (default: on) and `audit_validate_checksum` controls if to search for offsets according to predefined checksums. Meaning that by default, AUDIT plugin will also try to find valid offsets according to the MySQL version, if checksum validation does not pass.
If you still see in the error log the message:
> Audit Plugin: Couldn't find proper THD offsets for: MYSQL_VERSION
@ -44,15 +48,16 @@ Change the permission of the file to executable:
Then run the following:
./offset-extract.sh <path to mysqld>
./offset-extract.sh <path to mysqld> [optional mysqld symbols]
From the output you will need to use the number offsets later on.
Sample output:
~# ./offset-extract.sh /usr/sbin/mysqld
//offsets for: /usr/sbin/mysqld (5.1.41-community)
{"5.1.41-community","6ccf4357688d8e46bfcb4443966970b0", **6200, 6264, 3672, 3944, 88, 2048**},
~# ./offset-extract.sh /usr/sbin/mysqld
//offsets for: /usr/sbin/mysqld (5.1.41-community)
{"5.1.41-community","6ccf4357688d8e46bfcb4443966970b0", **6200, 6264, 3672, 3944, 88, 2048**},
Then add to the mysqld configuration file (usually /etc/my.cnf) the following under the [mysqld] section:
@ -64,4 +69,6 @@ The offset section for example should look like this:
Then try installing the AUDIT plugin either via plugin-load configuration option (restart) or by issuing the INSTALL PLUGIN statement.
**Note:** Some distributions (such as Percona Server) contain the mysqld debug symbols as a separate binary, which requires installing an additional package (rpm/deb). For example for Percona Server on RedHat you will need to install: Percona-Server-55-debuginfo-5.5.30-rel30.1.465.rhel6.x86_64.rpm. Once installed pass to the `offset-extract.sh` script also the path to the mysqld symbols file. For example:
./offset-extract.sh /usr/sbin/mysqld /usr/lib/debug/usr/sbin/mysqld.debug