# Percona XtraDB and the McAfee MySQL Audit Plugin

**URL:** <https://forums.percona.com/t/percona-xtradb-and-the-mcafee-mysql-audit-plugin/3207>\
**Category:** Percona XtraDB Cluster 5.x\
**Created:** [January 15, 2014, 6:04pm UTC](https://forums.percona.com/t/percona-xtradb-and-the-mcafee-mysql-audit-plugin/3207 "2014-01-15T18:04:33Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![wcp96](https://avatars.discourse-cdn.com/v4/letter/w/c77e96/32.png) [@wcp96](https://forums.percona.com/u/wcp96)\
**Post date:** [January 15, 2014, 6:04pm UTC](https://forums.percona.com/t/percona-xtradb-and-the-mcafee-mysql-audit-plugin/3207/1 "2014-01-15T18:04:33Z")

</div>

I am attempting to enable the McAfee audit plugin on a Percona XtraDB installation to validate its functionality to meet security requirements.

Percona XtraDB: 5.5.34

i am stuck getting the offset to work. I can generate the offset correctly, but with the XtraDB build, its 10 numbers.

6576, 6624, 4104, 4616, 104, 2608, 96, 0, 32, 104

If I generate the offset against the server build, its six.

6552, 6600, 4080, 4592, 104, 2608

When starting the XtraDB server with the 10 numbers, the plugin fails to load with this error:

[ERROR] Audit Plugin: Failed parsing audit\_offsets: 6576, 6624, 4104, 4616, 104, 2608, 96, 0, 32, 104  
[ERROR] Plugin ‘AUDIT’ init function returned error.

I read the post with getting this plugin to work with the server and those instructions were helpful. My question is has the plugin been successfully installed on the XtraDB server?

---

<div class="post-metadata">

**Author:** ![wcp96](https://avatars.discourse-cdn.com/v4/letter/w/c77e96/32.png) [@wcp96](https://forums.percona.com/u/wcp96)\
**Post date:** [January 17, 2014, 10:10am UTC](https://forums.percona.com/t/percona-xtradb-and-the-mcafee-mysql-audit-plugin/3207/2 "2014-01-17T10:10:43Z")

</div>

The offsets are correct. I compiled the plugin against mysql 5.5.16 and the plugin installs just fine.

1. Install the debug packages for XtraDB cluster and galera on a dev/test member. Get your offsets.
2. Compile the auditor plugin against the base mysql version for your install. In my case, 5.5.16.  
3, Load the plugin.

---

<div class="post-metadata">

**Author:** ![fleveneur](https://avatars.discourse-cdn.com/v4/letter/f/df705f/32.png) [@fleveneur](https://forums.percona.com/u/fleveneur)\
**Post date:** [February 4, 2014, 6:54pm UTC](https://forums.percona.com/t/percona-xtradb-and-the-mcafee-mysql-audit-plugin/3207/3 "2014-02-04T18:54:41Z")

</div>

I’m having the same issue with 5.5.35-rel33.0. I would appreciate if someone could help.

140204 16:17:09 Percona XtraDB ([http://www.percona.com](http://www.percona.com)) 5.5.35-rel33.0 started; log sequence number 1597945  
140204 16:17:09 [Note] Audit Plugin: starting up. Version: 1.0.2 , Revision: 345 (64bit). AUDIT plugin interface version: 50535. MySQL Server version: 5.5.35-33.0.  
140204 16:17:09 [Note] Audit Plugin: setup\_offsets audit\_offsets: 6560, 6608, 4088, 4600, 104, 2608, 96, 0, 32, 104  
140204 16:17:09 [Note] Audit Plugin: Validate checksum enabled. Mysqld /usr/sbin/mysqld  
140204 16:17:09 [ERROR] Audit Plugin: Failed parsing audit\_offsets: 6560, 6608, 4088, 4600, 104, 2608, 96, 0, 32, 104  
140204 16:17:09 [ERROR] Plugin ‘AUDIT’ init function returned error.  
140204 16:17:09 [Note] Audit Plugin: deinit

rpm -qa|grep Percona  
Percona-Server-server-55-5.5.35-rel33.0.611.rhel5  
Percona-Server-shared-55-5.5.35-rel33.0.611.rhel5  
Percona-Server-55-debuginfo-5.5.35-rel33.0.611.rhel5  
Percona-Server-shared-compat-5.5.35-rel33.0.611.rhel5  
Percona-Server-client-55-5.5.35-rel33.0.611.rhel5

gdb is installed

# which gdb

/usr/bin/gdb

Thank you.

---

<div class="post-metadata">

**Author:** ![guylichtman](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/guylichtman/32/989_2.png) [@guylichtman](https://forums.percona.com/u/guylichtman)\
**Post date:** [February 5, 2014, 6:05am UTC](https://forums.percona.com/t/percona-xtradb-and-the-mcafee-mysql-audit-plugin/3207/4 "2014-02-05T06:05:03Z")

</div>

Hi fleveneur,

Try using the latest dev snapshot build from: [url][JFrog Distribution: Get your software to where it needs to be -- ASAP!](https://bintray.com/mcafee/mysql-audit-plugin/dev-snapshot%5B/url%5D)

If you have questions please feel free to open an issue at: [url][Issues · mcafee-enterprise/mysql-audit · GitHub](https://github.com/mcafee/mysql-audit/issues?sort=updated&state=open%5B/url%5D)

Best,

Guy

---

<div class="post-metadata">

**Author:** ![fleveneur](https://avatars.discourse-cdn.com/v4/letter/f/df705f/32.png) [@fleveneur](https://forums.percona.com/u/fleveneur)\
**Post date:** [March 25, 2014, 12:13pm UTC](https://forums.percona.com/t/percona-xtradb-and-the-mcafee-mysql-audit-plugin/3207/5 "2014-03-25T12:13:30Z")

</div>

Guy,  
Thank you, it worked. Much appreciated.