Sst user authentication when joining a cluster

MySQL & MariaDB Percona XtraDB Cluster 8.x
1

Hi Another Percona XtraDB Cluster newbie question,

When setting up a new cluster and joining additional nodes, can I force each new node to authenticate using the sstuser password that is created in the first nodes database?

Thanks

1 Like
2

Hello @mikejohnhathaway,
PXC nodes do not authenticate against each other when joining. The SST user is only used by xtrabackup for purposes of taking the streaming backup from another node. The only way that nodes “authenticate” when joining the cluster are via wsrep_cluster_name and using SSL certificates. If node A and node B have different cluster names, then they will not join. If node B does not present the same certificate in use by node A, then B cannot join A.

1 Like