# Cannot configure group replication **URL:** \ **Category:** Uncategorized\ **Tags:** mysql, percona\ **Created:** [January 11, 2023, 6:37pm UTC](https://forums.percona.com/t/cannot-configure-group-replication/19576 "2023-01-11T18:37:50Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![jevgeni](https://avatars.discourse-cdn.com/v4/letter/j/7ea924/32.png) [@jevgeni](https://forums.percona.com/u/jevgeni)\ **Post date:** [January 11, 2023, 6:37pm UTC](https://forums.percona.com/t/cannot-configure-group-replication/19576/1 "2023-01-11T18:37:50Z")
> **[Percona Software Documentation](https://docs.percona.com/percona-distribution-for-mysql/8.0/solutions/deploy-pdps-group-replication.html)** > > .container-box-download { justify-content: flex-start; } .container-button-learn-more { margin-bottom: 10px; } .logo-server-home { background: url(/img/product-logos/sprite.png) this is the guide, I am using. mysql version is Persona 8.0.30 But when I start START GROUP\_REPLICATION on secondary node, this secondary node remains in RECOVERING state for a minute and the it is in ERROR state. I checked the error log of this secondary node and: 2023-01-11T18:14:54.843518Z 67 [ERROR] [MY-010584] [Repl] Slave I/O for channel ‘group\_replication\_recovery’: error connecting to master ‘replica@dev8-db01:3306’ - retry-time: 60 retries: 1 message: Authentication plugin ‘caching\_sha2\_password’ reported error: Authentication requires secure connection. Error\_code: MY-002061 2023-01-11T18:14:54.845546Z 24 [ERROR] [MY-011582] [Repl] Plugin group\_replication reported: ‘There was an error when connecting to the donor server. Please check that group\_replication\_recovery channel credentials and all MEMBER\_HOST column values of performance\_schema.replication\_group\_members table are correct and DNS resolvable.’ 2023-01-11T18:14:54.845587Z 24 [ERROR] [MY-011583] [Repl] Plugin group\_replication reported: ‘For details please check performance\_schema.replication\_connection\_status table and error log messages of Slave I/O for channel group\_replication\_recovery.’ 2023-01-11T18:15:54.894429Z 24 [System] [MY-010597] [Repl] ‘CHANGE MASTER TO FOR CHANNEL ‘group\_replication\_recovery’ executed’. Previous state master\_host=‘dev8-db01’, master\_port= 3306, master\_log\_file=‘’, master\_log\_pos= 4, master\_bind=‘’. New state master\_host=‘dev8-db01’, master\_port= 3306, master\_log\_file=‘’, master\_log\_pos= 4, master\_bind=‘’. 2023-01-11T18:15:54.937927Z 73 [Warning] [MY-010897] [Repl] Storing MySQL user name or password information in the master info repository is not secure and is therefore not recommended. Please consider using the USER and PASSWORD connection options for START SLAVE; see the ‘START SLAVE Syntax’ in the MySQL Manual for more information. 2023-01-11T18:15:54.945115Z 73 [ERROR] [MY-010584] [Repl] Slave I/O for channel ‘group\_replication\_recovery’: error connecting to master ‘replica@dev8-db01:3306’ - retry-time: 60 retries: 1 message: Authentication plugin ‘caching\_sha2\_password’ reported error: Authentication requires secure connection. Error\_code: MY-002061 2023-01-11T18:15:54.948648Z 24 [ERROR] [MY-011582] [Repl] Plugin group\_replication reported: ‘There was an error when connecting to the donor server. Please check that group\_replication\_recovery channel credentials and all MEMBER\_HOST column values of performance\_schema.replication\_group\_members table are correct and DNS resolvable.’ 2023-01-11T18:15:54.948720Z 24 [ERROR] [MY-011583] [Repl] Plugin group\_replication reported: ‘For details please check performance\_schema.replication\_connection\_status table and error log messages of Slave I/O for channel group\_replication\_recovery.’ ---
**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\ **Post date:** [January 12, 2023, 2:33pm UTC](https://forums.percona.com/t/cannot-configure-group-replication/19576/2 "2023-01-12T14:33:24Z")
It says in the log that you pasted above: “Authentication requires secure connection.” Do you have SSL configured correctly on all members? ---
**Author:** ![devdewboy](https://avatars.discourse-cdn.com/v4/letter/d/c0e974/32.png) [@devdewboy](https://forums.percona.com/u/devdewboy)\ **Post date:** [February 24, 2023, 12:33am UTC](https://forums.percona.com/t/cannot-configure-group-replication/19576/3 "2023-02-24T00:33:02Z")
Hello, I too am having this exact same issue and error messages. I am literally chasing my tail on this. Yes it says, “Authentication requires secure connection.” but setting SSL up is not straight forward following the MySQL docs. Do you have a process or article that explains how to enable SSL for the server as well group replication (`group_replication_ssl_mode= REQUIRED`) geared towards setting up Group Replication? The nodes I have are using the mysql generated self signed certs. I copied them from the Primary to the the secondary node. The Primarty bootstraps fine and has started as the Primary, I can connect with users using the `--SSL_MODE=REQUIRED`. I don’t yet have `require_secure_transport = ON` enabled since this effectively breaks replication too When using non SSL required Replication User, GROUP\_REPLICATION is all good for the other node. Now I attempt to do the following 2 commands on the secondary node and then I get the errors above: ```auto change replication source to source_user='rpl_user_ssl', source_password='password' for channel 'group_replication_recovery'; START GROUP_REPLICATION user='rpl_user_ssl', password='password ``` '; The node is always in a RECOVERING status. Any assistance would be great! Thanks, DD PS Using MySql 8.0.32 ---
**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\ **Post date:** [March 7, 2023, 3:55pm UTC](https://forums.percona.com/t/cannot-configure-group-replication/19576/4 "2023-03-07T15:55:22Z")
The following parameters are taking directly from our Group Replication 101 training class: ``` [mysqld] group_replication_recovery_get_public_key = on ssl_ca = /etc/ssl/mysql/ca.pem ssl_cert = /etc/ssl/mysql/server-cert.pem ssl_key = /etc/ssl/mysql/server-key.pem group_replication_ssl_mode = REQUIRED group_replication_recovery_use_ssl = ON; ``` You must bootstrap your cluster in secure mode. Either restart the cluster or here’s how you can transition to SSL: ```auto mysql3/2/1> STOP GROUP_REPLICATION; mysql3/2/1> SET PERSIST group_replication_ssl_mode = REQUIRED; mysql1> SET GLOBAL group_replication_bootstrap_group = ON; mysql1> START GROUP_REPLICATION; mysql1> SET GLOBAL group_replication_bootstrap_group = OFF; mysql2/3> START GROUP_REPLICATION; ```