I've been working off and on now for a while to try to set up a master
server containing all of the mysql privilege tables for our mysql servers.
This has turned out to be a huge pain and now I don't even know if it will
ever work. The biggest culprit is the fact that the mysql database is the
only place where privilege information is allowed to be stored and that
you can't specify alternate databases for GRANT/REVOKE to modify.

My latest setup which works the best so far goes as follows:

master:

. the mysql database is set up as a symlink, normally to the privilege
tables that belong to the master.

. each host which replicates from the master, has a database named after
their hostname:
    foo_bar_com (for foo.bar.com)

. when I make privilege system changes for the clients, I switch the
symlink to the host database, flush tables, and issue grant/revoke
statements. then when I am done, I switch the symlink back, flush tables,
and flush privileges.


client:

. client uses the my.cnf option 'replicate-rewrite-db' to rewrite the
replicated 'foo_bar_com' database to 'mysql'.


Problem #1: Even though 'mysql' is just a symlink to table 'foo_bar_com',
replication will not run as I had 'binlog-ignore-db=mysql'.

Problem #2: Removing the 'binlog-ignore-db=mysql' option causes the system
to work BUT also causes any changes to the _real_ 'mysql' database to be
propegated to all clients.


Anyone ever done something like this, or have any suggestions? Please
reply to me as well as the list as I am not normally on the list (and
lately signing up for the list has taken 24+hrs).


Thanks!
Atle
-
Flying Crocodile Inc, Junior Unix Systems Administrator



---------------------------------------------------------------------
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/           (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Reply via email to