# Install Failing at Bootstrap - Access Denied

**URL:** <https://forums.percona.com/t/install-failing-at-bootstrap-access-denied/3881>\
**Category:** Percona XtraDB Cluster 5.x\
**Created:** [November 13, 2014, 4:38pm UTC](https://forums.percona.com/t/install-failing-at-bootstrap-access-denied/3881 "2014-11-13T16:38:54Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dingusworrell](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/dingusworrell/32/1047_2.png) [@dingusworrell](https://forums.percona.com/u/dingusworrell)\
**Post date:** [November 13, 2014, 4:38pm UTC](https://forums.percona.com/t/install-failing-at-bootstrap-access-denied/3881/1 "2014-11-13T16:38:54Z")

</div>

I’m trying to do an initial install of Xtradb on Ubuntu 14.04 three node cluster. Eveything installed via apt-get fine after updating the sources. I don’t have a DB loaded yet, just trying to get the initial config going.  
I start the initial master server with: service mysql restart-bootstrap works fine  
I go to the second node and do a: service mysql start and it fails.

On the master, I have this in the innobackup.backup.log  
----------------------------------------------------------------------------------------------------------------------------------------------------- [INDENT]InnoDB Backup Utility v1.5.1-xtrabackup; Copyright 2003, 2009 Innobase Oy  
and Percona LLC and/or its affiliates 2009-2013. All Rights Reserved.

This software is published under  
the GNU GENERAL PUBLIC LICENSE Version 2, June 1991.

Get the latest version of Percona XtraBackup, documentation, and help resources:  
[http://www.percona.com/xb/p](http://www.percona.com/xb/p)[/INDENT]  
[INDENT]141113 15:42:29 innobackupex: Connecting to MySQL server with DSN ‘dbi:mysql:;mysql\_read\_default\_file=/etc/mysql/my.cnf;mysql\_read\_default\_group=xtrabackup;mysql\_socket=/var/run/mysqld/mysqld.sock’ as ‘sstuser’ (using password: YES).  
141113 15:42:29 innobackupex: Connected to MySQL server  
141113 15:42:29 innobackupex: Starting the backup operation

IMPORTANT: Please check that the backup run completes successfully.  
At the end of a successful backup run innobackupex  
prints “completed OK!”.

innobackupex: Using server version 5.6.20-68.0-56

## innobackupex: Created backup directory /tmp/tmp.34izv4eBe6 DBD::mysql::db selectrow\_hashref failed: Access denied; you need (at least one of) the SUPER, REPLICATION CLIENT privilege(s) for this operation at /usr//bin/innobackupex line 3028. innobackupex: got a fatal error with the following stacktrace: at /usr//bin/innobackupex line 3038. main::mysql\_query(‘HASH(0x198bba8)’, ‘SHOW SLAVE STATUS’) called at /usr//bin/innobackupex line 3057 main::get\_mysql\_slave\_status(‘HASH(0x198bba8)’) called at /usr//bin/innobackupex line 4954 main::detect\_mysql\_capabilities\_for\_backup(‘HASH(0x198bba8)’) called at /usr//bin/innobackupex line 1907 main::backup() called at /usr//bin/innobackupex line 1592 innobackupex: Error: Error executing ‘SHOW SLAVE STATUS’: DBD::mysql::db selectrow\_hashref failed: Access denied; you need (at least one of) the SUPER, REPLICATION CLIENT privilege(s) for this operation at /usr//bin/innobackupex line 3028.[/INDENT]

I then weep.

Config on master (in my.cnf) [INDENT]#

# The MySQL database server configuration file.

# 

# You can copy this to one of:

# - “/etc/mysql/my.cnf” to set global options,

# - “~/.my.cnf” to set user-specific options.

# 

# One can use all long options that the program supports.

# Run program with --help to get a list of available options and with

# –print-defaults to see which it would actually understand and use.

# 

# For explanations see

# [http://dev.mysql.com/doc/mysql/en/server-system-variables.html](http://dev.mysql.com/doc/mysql/en/server-system-variables.html)

# This will be passed to all mysql clients

# It has been reported that passwords should be enclosed with ticks/quotes

# escpecially if they contain “#” chars…

# Remember to edit /etc/mysql/debian.cnf when changing the socket location.

[client]  
port = 3306  
socket = /var/run/mysqld/mysqld.sock

# Here is entries for some specific programs

# The following values assume you have at least 32M ram

# This was formally known as [safe\_mysqld]. Both versions are currently parsed.

[mysqld\_safe]  
socket = /var/run/mysqld/mysqld.sock  
nice = 0

[mysqld]

# 

# \* Basic Settings

# 

user = mysql  
pid-file = /var/run/mysqld/mysqld.pid  
socket = /var/run/mysqld/mysqld.sock  
port = 3306  
basedir = /usr  
datadir = /var/lib/mysql  
tmpdir = /tmp  
lc-messages-dir = /usr/share/mysql  
skip-external-locking

wsrep\_provider=/usr/lib/libgalera\_smm.so  
wsrep\_cluster\_address=gcomm://192.168.45.53,192.168.45.103,192.168.45.66  
#wsrep\_cluster\_address=gcomm://  
binlog\_format=ROW  
default\_storage\_engine=InnoDB  
innodb\_autoinc\_lock\_mode=2  
wsrep\_sst\_auth=“sstuser:password”  
wsrep\_node\_address=192.168.45.53  
wsrep\_sst\_method=xtrabackup-v2  
wsrep\_cluster\_name=govmint\_db\_cluster

# 

# Instead of skip-networking the default is now to listen only on

# localhost which is more compatible and is not less secure.

bind-address = 127.0.0.1  
bind-address = 0.0.0.0

# 

# \* Fine Tuning

# 

key\_buffer = 16M  
max\_allowed\_packet = 16M  
thread\_stack = 192K  
thread\_cache\_size = 8

# This replaces the startup script and checks MyISAM tables if needed

# the first time they are touched

myisam-recover = BACKUP  
#max\_connections = 100  
#table\_cache = 64  
#thread\_concurrency = 10

# 

# \* Query Cache Configuration

# 

query\_cache\_limit = 1M  
query\_cache\_size = 16M

## …[/INDENT]

ON the second node: [INDENT]#

# The MySQL database server configuration file.

# 

# You can copy this to one of:

# - “/etc/mysql/my.cnf” to set global options,

# - “~/.my.cnf” to set user-specific options.

# 

# One can use all long options that the program supports.

# Run program with --help to get a list of available options and with

# –print-defaults to see which it would actually understand and use.

# 

# For explanations see

# [http://dev.mysql.com/doc/mysql/en/server-system-variables.html](http://dev.mysql.com/doc/mysql/en/server-system-variables.html)

# This will be passed to all mysql clients

# It has been reported that passwords should be enclosed with ticks/quotes

# escpecially if they contain “#” chars…

# Remember to edit /etc/mysql/debian.cnf when changing the socket location.

[client]  
port = 3306  
socket = /var/run/mysqld/mysqld.sock

# Here is entries for some specific programs

# The following values assume you have at least 32M ram

# This was formally known as [safe\_mysqld]. Both versions are currently parsed.

[mysqld\_safe]  
socket = /var/run/mysqld/mysqld.sock  
nice = 0

[mysqld]

# 

# \* Basic Settings

# 

user = mysql  
pid-file = /var/run/mysqld/mysqld.pid  
socket = /var/run/mysqld/mysqld.sock  
port = 3306  
basedir = /usr  
datadir = /var/lib/mysql  
tmpdir = /tmp  
lc-messages-dir = /usr/share/mysql  
skip-external-locking

wsrep\_provider=/usr/lib/libgalera\_smm.so  
wsrep\_cluster\_address=gcomm://192.168.45.53,192.168.45.103,192.168.45.66  
binlog\_format=ROW  
default\_storage\_engine=InnoDB  
innodb\_autoinc\_lock\_mode=2  
wsrep\_sst\_auth=“sstuser:password”  
wsrep\_node\_address=192.168.45.103  
wsrep\_sst\_method=xtrabackup-v2  
wsrep\_cluster\_name=govmint\_db\_cluster

# 

# Instead of skip-networking the default is now to listen only on

# localhost which is more compatible and is not less secure.

#bind-addre3ss = 0.0.0.0  
#bind-address = 127.0.0.1

# 

# \* Fine Tuning

# 

key\_buffer = 16M  
max\_allowed\_packet = 16M  
thread\_stack = 192K  
thread\_cache\_size = 8

# This replaces the startup script and checks MyISAM tables if needed

# the first time they are touched

myisam-recover = BACKUP  
#max\_connections = 100  
#table\_cache = 64  
#thread\_concurrency = 10

# 

# \* Query Cache Configuration

# 

query\_cache\_limit = 1M  
query\_cache\_size = 16M

# 

…[/INDENT]

* * *

Any help appreciated!!!

Rodd

---

<div class="post-metadata">

**Author:** ![tkauppin](https://avatars.discourse-cdn.com/v4/letter/t/a9adbd/32.png) [@tkauppin](https://forums.percona.com/u/tkauppin)\
**Post date:** [November 14, 2014, 7:44am UTC](https://forums.percona.com/t/install-failing-at-bootstrap-access-denied/3881/2 "2014-11-14T07:44:07Z")

</div>

Does the ‘sstuser’ have required privileges???  
You could try first with the ‘root’ to see that it works.

---

<div class="post-metadata">

**Author:** ![dingusworrell](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/dingusworrell/32/1047_2.png) [@dingusworrell](https://forums.percona.com/u/dingusworrell)\
**Post date:** [November 14, 2014, 4:55pm UTC](https://forums.percona.com/t/install-failing-at-bootstrap-access-denied/3881/3 "2014-11-14T16:55:13Z")

</div>

tkauppin,

You are so correct. I just assumed (yes, I made an ass out of me and me) and used sstuser as directed by a how-to. Ubuntu asks in the apt-get for the password for ‘root’ and that is worked!

Thanks for the response!
