RepoMirrors/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git/ synced 2025-04-04 23:29:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

DOC: config: use CREATE USER for mysql-check

Browse Source 
CREATE USER has been the standard way of creating users since
MySQL-5.0 (2005).

The current syntax of INSERT INTO mysql.user won't actually work
on MariaDB-10.4+.

Because haproxy doesn't use any resources the MySQL executable comment
syntax provides resource contraints to make it more palatable
to risk adverse users.

/*!50701 is a syntax recognised by MySQL and MariaDB 5.7.1+ when
resource contraints where added.

/*M!100201 is a MariaDB executable comment syntax recognised for MariaDB
for the 10.2.1 where the MAX_STATEMENT_TIME was added.

This patch may be backported as far as 2.0.
This commit is contained in:
Daniel Black 2021-07-01 12:09:32 +10:00 committed by Christopher Faulet
parent bae4cb2790
commit d3e7dc498b
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
doc/configuration.txt
View File

@ -8984,12 +8984,13 @@ option mysql-check [ user <username> [ { post-41 | pre-41 } ] ]
one Client Authentication packet, and one QUIT packet, to correctly close one Client Authentication packet, and one QUIT packet, to correctly close
MySQL session. We then parse the MySQL Handshake Initialization packet and/or MySQL session. We then parse the MySQL Handshake Initialization packet and/or
Error packet. It is a basic but useful test which does not produce error nor Error packet. It is a basic but useful test which does not produce error nor
aborted connect on the server. However, it requires adding an authorization aborted connect on the server. However, it requires an unlocked authorised
in the MySQL table, like this : user without a password. To create a basic limited user in MySQL with
optional resource limits:
USE mysql; CREATE USER '<username>'@'<ip_of_haproxy|network_of_haproxy/netmask>'
INSERT INTO user (Host,User) values ('<ip_of_haproxy>','<username>'); /*!50701 WITH MAX_QUERIES_PER_HOUR 1 MAX_UPDATES_PER_HOUR 0 */
FLUSH PRIVILEGES; /*M!100201 MAX_STATEMENT_TIME 0.0001 */;
If you don't specify a username (it is deprecated and not recommended), the If you don't specify a username (it is deprecated and not recommended), the
check only consists in parsing the Mysql Handshake Initialization packet or check only consists in parsing the Mysql Handshake Initialization packet or