Audit Plugin not loading on MySQL 5.1.63 32bit #4
Comments
|
Can you specify the distribution of mysql you are using and what linux distribution. Thanks, GuySent from my mobile device -----Original Message----- Attempted to install the .so from https://github.com/downloads/mcafee/mysql-audit/audit-plugin-mysql-5.1-1.0.1-320-linux-i386.zip via plugin-load but it will not load. mysql Ver 14.14 Distrib 5.1.63, for pc-linux-gnu (i686) using readline 5.1 Error Log below: 120627 09:13:11 mysqld_safe mysqld from pid file /var/lib/mysql/idp.imagedesignserver.ca.pid ended Reply to this email directly or view it on GitHub: |
|
I have the same problem,the version of mysql is 5.1.62-0ubuntu0.10.04.1-log. |
|
Hi darkz1984, Are you on a 32bit architecture? It is probably an offset issue. Did you try setting: audit_validate_checksum=OFF As stated in the wiki: https://github.com/mcafee/mysql-audit/wiki/Installation ------Original Message------ I have the same problem,the version of mysql is 5.1.62-0ubuntu0.10.04.1-log. Reply to this email directly or view it on GitHub: Sent from my mobile deviceSent from my mobile device |
|
I use the 32BIT systen,and directly down the zip file ,not the source code.Could you direct fix the bug in the *.so file??
|
|
Hi darkz1984, I am checking this out and will get back to you. |
|
OK，thank you very much
|
|
Hi darkz1984, The issue is that the 1.0.1 build doesn't have the 5.1.62 offsets compiled in. Please do the following. You should add to the mysqld configuration file (usually /etc/my.cnf or /etc/mysql/my.cnf) the following under the [mysqld] section: Then try installing the plugin. |
|
Ok,thank you very much...
|
|
I add audit_offsets=4104, 4144, 2248, 2428, 44, 1176 and loadmodule "/usr/lib/mysql/plugin/libaudit_plugin.so into my.cnf,but it still say errors in the logs as blow: 120712 11:33:45 [Note] /usr/sbin/mysqld: Shutdown complete 120712 11:34:10 [Note] Plugin 'FEDERATED' is disabled. 120712 11:34:10 InnoDB: Starting shutdown... |
|
Hi darkz1984, You should add to my.cnf the following: Otherwise if you have only the entry: When mysql starts up it doesn't recognize the audit_offsets settings. |
|
plugin-load=AUDIT=libaudit_plugin.so
|
|
Hi darkz1984, I don't think the order matters. I usually add the plugin-load option first. Let us know if things are working for you now and I"ll close the issue. |
|
Yeah,I try it，use so now it ok and the log says： 120716 16:37:46 [Note] Slave I/O thread killed while reading event 120716 16:37:47 [Note] Plugin 'FEDERATED' is disabled. at last，I want to know how to determine the offset if I use other version of mysql，such as mysql5.5 or mysql5.6？？
|
|
Hi darkz1984, Good to see that things are working for you. To extract offsets you can follow the instructions at the following note: It documents the process. A full wiki page on this will be added soon. |
|
I have read that issue，but I use the deb file from apt-get install mysql。。。。So,there no other way to fetch the offset but only complite from the source code?? Or I think should give a list of offset of each mysql version??
|
|
Hi darkz1984, You are correct regarding the deb distribution that it doesn't contain symbols. We have many offsets already defined in the code and we will be adding more in the next release. |
Attempted to install the .so from https://github.com/downloads/mcafee/mysql-audit/audit-plugin-mysql-5.1-1.0.1-320-linux-i386.zip via plugin-load but it will not load.
mysql Ver 14.14 Distrib 5.1.63, for pc-linux-gnu (i686) using readline 5.1
Error Log below:
120627 09:13:11 mysqld_safe mysqld from pid file /var/lib/mysql/idp.imagedesignserver.ca.pid ended
120627 09:13:12 mysqld_safe Starting mysqld daemon with databases from /var/lib/mysql
120627 9:13:12 [Note] Plugin 'FEDERATED' is disabled.
120627 9:13:12 [Note] Plugin 'InnoDB' is disabled.
120627 9:13:12 [Note] Audit Plugin: Set interface version to: 12841728 (50163)
120627 9:13:12 [Note] Audit Plugin: starting up. Version: 1.0.1, Revision: 320. AUDIT plugin interface version: 50163. MySQL Server version: 5.1.63-cll.
120627 9:13:12 [Note] Audit Plugin: setup_offsets offsets_string (null)
120627 9:13:12 [Note] Audit Plugin: Audit validate checksum enabled. Mysqld /usr/sbin/mysqld
120627 9:13:12 [Note] Audit Plugin: Couldn't find proper THD offsets for: 5.1.63-cll
120627 9:13:12 [ERROR] Plugin 'AUDIT' init function returned error.
120627 9:13:12 [Note] Audit Plugin: removing hot patching function: 0x8202800
120627 9:13:12 [Note] Audit Plugin: targetPage: 0x8202000 targetFunction: 0x8202800
120627 9:13:12 [Note] Audit Plugin: removing hot patching function: 0x81fde80
120627 9:13:12 [Note] Audit Plugin: targetPage: 0x81fd000 targetFunction: 0x81fde80
120627 9:13:12 [Note] Audit Plugin: removing hot patching function: 0x82495f0
120627 9:13:12 [Note] Audit Plugin: targetPage: 0x8249000 targetFunction: 0x82495f0
120627 9:13:12 [Note] Audit Plugin: removing hot patching function: 0x8321790
120627 9:13:12 [Note] Audit Plugin: targetPage: 0x8321000 targetFunction: 0x8321790
120627 9:13:12 [Note] Audit Plugin: removing hot patching function: 0x82032b0
120627 9:13:12 [Note] Audit Plugin: targetPage: 0x8203000 targetFunction: 0x82032b0
120627 9:13:12 [Note] Audit Plugin: removing hot patching function: 0x8206060
120627 9:13:12 [Note] Audit Plugin: targetPage: 0x8206000 targetFunction: 0x8206060
120627 9:13:12 [Note] Event Scheduler: Loaded 0 events
120627 9:13:12 [Note] /usr/sbin/mysqld: ready for connections.
Version: '5.1.63-cll' socket: '/var/lib/mysql/mysql.sock' port: 3306 MySQL Community Server (GPL)
The text was updated successfully, but these errors were encountered: