130 lines
4.3 KiB
Plaintext
130 lines
4.3 KiB
Plaintext
|
|
#
|
|
# WL#5706/Bug#58712/Bug#11746378
|
|
# Encrypt or remove passwords from slow, query, and binary logs
|
|
# (see sql/sql_rewrite.cc for bulk of implementation)
|
|
#
|
|
|
|
--source include/not_windows.inc
|
|
|
|
# For Bug#16467055 and friends:
|
|
--source include/not_embedded.inc
|
|
|
|
# make sure we start with a clean slate. log_tables.test says this is OK.
|
|
TRUNCATE TABLE mysql.slow_log;
|
|
|
|
SET @old_log_output= @@global.log_output;
|
|
SET @old_slow_query_log= @@global.slow_query_log;
|
|
SET @old_slow_query_log_file= @@global.slow_query_log_file;
|
|
SET @old_long_query_time= @@global.long_query_time;
|
|
|
|
--replace_result $MYSQLTEST_VARDIR ...
|
|
eval SET GLOBAL slow_query_log_file= '$MYSQLTEST_VARDIR/log/rewrite_slow.log';
|
|
SET GLOBAL log_output = 'FILE,TABLE';
|
|
SET GLOBAL slow_query_log= 'ON';
|
|
|
|
# The answer is obvious: log everything!
|
|
SET SESSION long_query_time= 0;
|
|
|
|
# Show that obfuscation applies to the slow log at all.
|
|
# If one applies, they all do, and we've already demonstrated the individual
|
|
# obfuscations above for the general log.
|
|
|
|
# 1.1.1.1
|
|
GRANT ALL on *.* TO test_user1 IDENTIFIED BY 'azundris1';
|
|
|
|
# 1.1.1.2
|
|
CREATE USER test_user2 IDENTIFIED BY 'azundris2';
|
|
|
|
# 1.1.1.3
|
|
--disable_warnings
|
|
CHANGE MASTER TO MASTER_PASSWORD='azundris3';
|
|
CHANGE MASTER TO MASTER_CONNECT_RETRY = 1, MASTER_HEARTBEAT_PERIOD = 1.01,
|
|
MASTER_LOG_FILE = 'master_log_name', MASTER_LOG_POS = 0,
|
|
MASTER_SSL = 0, MASTER_SSL_CA = 'ca_file_name',
|
|
MASTER_SSL_CAPATH = 'ca_directory_name',
|
|
MASTER_SSL_CERT = 'cert_file_name', MASTER_SSL_KEY = 'key_file_name',
|
|
MASTER_SSL_CIPHER = 'cipher_list', MASTER_SSL_VERIFY_SERVER_CERT = 0,
|
|
IGNORE_SERVER_IDS = (99,100);
|
|
# cleanup
|
|
CHANGE MASTER TO MASTER_CONNECT_RETRY = 1, MASTER_HEARTBEAT_PERIOD = 1.01,
|
|
MASTER_LOG_FILE = '', MASTER_LOG_POS = 0,
|
|
MASTER_SSL = 0, MASTER_SSL_CA = '',
|
|
MASTER_SSL_CAPATH = '',
|
|
MASTER_SSL_CERT = '', MASTER_SSL_KEY = '',
|
|
MASTER_SSL_CIPHER = '', MASTER_SSL_VERIFY_SERVER_CERT = 0,
|
|
IGNORE_SERVER_IDS = ( );
|
|
--enable_warnings
|
|
|
|
# 1.1.1.4
|
|
CREATE USER 'test_user4'@'localhost';
|
|
SET PASSWORD FOR 'test_user4'@'localhost' = 'azundris4';
|
|
|
|
# clean-up
|
|
SET SESSION long_query_time= @old_long_query_time;
|
|
SET GLOBAL slow_query_log='OFF';
|
|
|
|
DROP USER 'test_user4'@'localhost';
|
|
DROP USER test_user2;
|
|
DROP USER test_user1;
|
|
|
|
let $wait_condition= SELECT sql_text FROM mysql.slow_log WHERE sql_text LIKE "%SET PASSWORD FOR `test_user4`@`localhost`%";
|
|
--source include/wait_condition.inc
|
|
|
|
# show slow-logging to file is correct
|
|
CREATE TABLE test_log (sql_text TEXT);
|
|
--replace_result $MYSQLTEST_VARDIR ...
|
|
eval LOAD DATA LOCAL INFILE '$MYSQLTEST_VARDIR/log/rewrite_slow.log'
|
|
INTO TABLE test_log FIELDS TERMINATED BY '\n' LINES TERMINATED BY '\n';
|
|
|
|
# all passwords ('azundris%') must have been obfuscated -> empty result set
|
|
--echo This line should be followed by two SELECTs with empty result sets
|
|
SELECT sql_text FROM test_log WHERE sql_text LIKE CONCAT('%azun','dris%');
|
|
|
|
# same for logging to table
|
|
SELECT sql_text FROM mysql.slow_log WHERE sql_text LIKE CONCAT('%azun','dris%');
|
|
|
|
--echo ------ from file ------
|
|
SELECT sql_text FROM test_log WHERE sql_text like '%AS %';
|
|
SELECT sql_text FROM test_log WHERE sql_text like 'CHANGE MASTER TO MASTER_PASSWORD %';
|
|
SELECT sql_text FROM test_log WHERE sql_text like '%SET PASSWORD %';
|
|
--echo ------ from table ------
|
|
SELECT sql_text FROM mysql.slow_log WHERE sql_text like '%AS %';
|
|
SELECT sql_text FROM test_log WHERE sql_text like 'CHANGE MASTER TO MASTER_PASSWORD %';
|
|
SELECT sql_text FROM test_log WHERE sql_text like '%SET PASSWORD %';
|
|
--echo ------ done ------
|
|
|
|
DROP TABLE test_log;
|
|
|
|
--remove_file $MYSQLTEST_VARDIR/log/rewrite_slow.log
|
|
|
|
--echo End of 5.6 tests!
|
|
|
|
|
|
|
|
--echo #
|
|
--echo # Bug#16467055: GRANT STATEMENTS LOGGED TWICE IN SLOW QUERY LOG
|
|
--echo #
|
|
|
|
SET SESSION long_query_time= 0;
|
|
SET GLOBAL slow_query_log = 1;
|
|
SET GLOBAL log_output = 'TABLE';
|
|
|
|
TRUNCATE mysql.slow_log;
|
|
|
|
--exec $MYSQL -e "SET SESSION long_query_time=0; GRANT ALL PRIVILEGES ON *.* TO u16467055 IDENTIFIED BY 'meow';" test
|
|
let $wait_condition= SELECT "slow -->", sql_text FROM mysql.slow_log WHERE sql_text LIKE "%TO 'u16467055'%";
|
|
--source include/wait_condition.inc
|
|
|
|
DROP USER u16467055;
|
|
|
|
|
|
|
|
--echo End of 5.7 tests!
|
|
|
|
# clean-up
|
|
SET SESSION long_query_time= @old_long_query_time;
|
|
SET GLOBAL slow_query_log_file=@old_slow_query_log_file;
|
|
SET GLOBAL slow_query_log= @old_slow_query_log;
|
|
SET GLOBAL log_output= @old_log_output;
|