# Percona XtraDB Fails on Replication on Oracle Linux 7 **URL:** \ **Category:** Percona XtraBackup\ **Created:** [March 25, 2019, 2:35pm UTC](https://forums.percona.com/t/percona-xtradb-fails-on-replication-on-oracle-linux-7/6924 "2019-03-25T14:35:33Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![d4z3](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/d4z3/32/1259_2.png) [@d4z3](https://forums.percona.com/u/d4z3)\ **Post date:** [March 25, 2019, 2:35pm UTC](https://forums.percona.com/t/percona-xtradb-fails-on-replication-on-oracle-linux-7/6924/1 "2019-03-25T14:35:33Z")
Hello all, I’ve been banging my head around this. I have a Percona setup on Oracle Linux 7 (OEL 7) with the following packages below. Percona-XtraDB-Cluster-shared-57-5.7.25-31.35.1.el7.x86\_64 Percona-XtraDB-Cluster-shared-compat-57-5.7.25-31.35.1.el7.x86\_64 Percona-XtraDB-Cluster-server-57-5.7.25-31.35.1.el7.x86\_64 Percona-XtraDB-Cluster-client-57-5.7.25-31.35.1.el7.x86\_64 Percona-XtraDB-Cluster-57-5.7.25-31.35.1.el7.x86\_64 percona-xtrabackup-24-2.4.13-1.el7.x86\_64 On the first (and only node at this time), I setup as following: mysql -uroot -p -e “CREATE USER ‘sstuser’@‘localhost’ IDENTIFIED BY ‘REDACTED’;” mysql -uroot -p -e “GRANT RELOAD, LOCK TABLES, PROCESS, REPLICATION CLIENT ON _._ TO sstuser@localhost; FLUSH PRIVILEGES;” INSTALL PLUGIN keyring\_udf SONAME ‘keyring\_udf.so’; CREATE FUNCTION keyring\_key\_generate RETURNS INTEGER SONAME ‘keyring\_udf.so’; CREATE FUNCTION keyring\_key\_fetch RETURNS STRING SONAME ‘keyring\_udf.so’; CREATE FUNCTION keyring\_key\_length\_fetch RETURNS INTEGER SONAME ‘keyring\_udf.so’; CREATE FUNCTION keyring\_key\_type\_fetch RETURNS STRING SONAME ‘keyring\_udf.so’; CREATE FUNCTION keyring\_key\_store RETURNS INTEGER SONAME ‘keyring\_udf.so’; CREATE FUNCTION keyring\_key\_remove RETURNS INTEGER SONAME ‘keyring\_udf.so’; CREATE TABLESPACE foo ADD DATAFILE ‘foo.ibd’ ENCRYPTION=‘Y’; CREATE USER ‘redacted’@‘%’ IDENTIFIED BY ‘REDACTED’; GRANT ALL PRIVILEGES ON redacted.\* TO ‘redacted’@‘%’; FLUSH PRIVILEGES; FLUSH HOSTS; On node 1: To start replication, I ran: # systemctl start [mysql@bootstrap.service](mailto:mysql@bootstrap.service) ## /etc/my.cnf: #!includedir /etc/my.cnf.d/ #!includedir /etc/percona-xtradb-cluster.conf.d/ [mysqld] require\_secure\_transport=ON pxc\_encrypt\_cluster\_traffic=ON ssl-ca=REDACTED ssl-cert=REDACTED ssl-key=REDACTED early-plugin-load=keyring\_file.so keyring\_file\_data=/var/lib/mysql-keyring/keyring binlog\_format=ROW default\_storage\_engine=InnoDB innodb\_autoinc\_lock\_mode=2 wsrep\_provider=/usr/lib64/galera3/libgalera\_smm.so wsrep\_cluster\_name=pxc-prod wsrep\_cluster\_address=gcomm://IP1,IP2,IP3 wsrep\_node\_name=pxc-prod-node001 wsrep\_node\_address=IP1 wsrep\_sst\_method=xtrabackup-v2 wsrep\_sst\_auth=sstuser:REDACTED pxc\_strict\_mode=ENFORCING On node 2: I ran a simple: # systemctl start mysql ## /etc/my.cnf: !includedir /etc/my.cnf.d/ !includedir /etc/percona-xtradb-cluster.conf.d/ [mysqld] require\_secure\_transport=ON pxc\_encrypt\_cluster\_traffic=ON ssl-ca=REDACTED ssl-cert=REDACTED ssl-key=REDACTED early-plugin-load=keyring\_file.so keyring\_file\_data=/var/lib/mysql-keyring/keyring binlog\_format=ROW default\_storage\_engine=InnoDB innodb\_autoinc\_lock\_mode=2 wsrep\_provider=/usr/lib64/galera3/libgalera\_smm.so wsrep\_cluster\_name=pxc-stage-prod wsrep\_cluster\_address=gcomm://IP1,IP2,IP3 wsrep\_node\_name=pxc-prod-node002 wsrep\_node\_address=IP2 wsrep\_sst\_method=xtrabackup-v2 wsrep\_sst\_auth=sstuser:REDACTED The process on this node fails: # systemctl start mysql Job for mysql.service failed because the control process exited with error code. See “systemctl status mysql.service” and “journalctl -xe” for details. If I check the DONOR logs (first node), I see this: /var/lib/mysql # cat innobackup.backup.log -0-root@mr36p01ww-stagedb001:/var/lib/mysql # cat innobackup.backup.log xtrabackup: recognized server arguments: --defaults\_group=mysqld --parallel=4 --transition-key=\* xtrabackup: recognized client arguments: --defaults\_group=mysqld --parallel=4 --transition-key=\* --user=sstuser --password=\* --socket=/var/lib/mysql/mysql.sock --lock-ddl=1 --backup=1 --galera-info=1 --binlog-info=ON --stream=xbstream --target-dir=/tmp/pxc\_sst\_hhfd/donor\_xb\_B6di 190325 12:30:26 version\_check Connecting to MySQL server with DSN ‘dbi:mysql:;mysql\_read\_default\_group=xtrabackup;mysql\_socket=/var/lib/mysql/mysql.sock’ as ‘sstuser’ (using password: YES). Failed to connect to MySQL server: DBI connect(‘;mysql\_read\_default\_group=xtrabackup;mysql\_socket=/var/lib/mysql/mysql.sock’,‘sstuser’,…) failed: Access denied for user ‘sstuser’@‘localhost’ (using password: YES) at - line 1314. 190325 12:30:26 Connecting to MySQL server host: localhost, user: sstuser, password: set, port: not set, socket: /var/lib/mysql/mysql.sock Failed to connect to MySQL server: Access denied for user ‘sstuser’@‘localhost’ (using password: YES). Not sure After each attempt, I clean the /var/lib/mysq/\* dir so it’s a clean start… I am at my wit’s end. I have previously configured Percona in the lab, and didn’t have many problems. Here I am trying to do it in prod with no ports blocked/firewall turned off (by default): Node 1: # iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Node2: # iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination If you need any more logs, please let me know. And HALP! Thanks, d4z3 ---
**Author:** ![vadimtk](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/vadimtk/32/9528_2.png) [@vadimtk](https://forums.percona.com/u/vadimtk)\ **Post date:** [March 26, 2019, 8:42am UTC](https://forums.percona.com/t/percona-xtradb-fails-on-replication-on-oracle-linux-7/6924/2 "2019-03-26T08:42:26Z")
d4z3. Error 190325 12:30:26 Connecting to MySQL server host: localhost, user: sstuser, password: set, port: not set, socket: /var/lib/mysql/mysql.sock Failed to connect to MySQL server: Access denied for user ‘sstuser’@‘localhost’ (using password: YES). States that XtraBackup can’t connect to the node with given sstuser and password. Make sure that in my.cnf use have a user configured that can connect to the instance. # === wsrep\_sst\_method=xtrabackup-v2 wsrep\_sst\_auth=“root:” ---
**Author:** ![d4z3](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/d4z3/32/1259_2.png) [@d4z3](https://forums.percona.com/u/d4z3)\ **Post date:** [March 26, 2019, 10:42am UTC](https://forums.percona.com/t/percona-xtradb-fails-on-replication-on-oracle-linux-7/6924/3 "2019-03-26T10:42:10Z")
vadimtk, I do have a sst user created, on the donor and in the configuration. I did have a hash “blahblah#blah” (e.g.) in the sst user password, so I removed that with a different non-comment symbol and it seems to be working now. Thanks for the input.