Come join the San Diego MySQL Users group on August 2nd for a look at MySQL 5.6 and help make some pizza disappear. The presentation will start at 7PM and all are welcome.

Oracle Office
9515 Towne Center Drive
San Diego, CA 92121

Sheeri was also in Hämeenlinna for the OUGF Harmony conference a few weeks ago, and of course she had her video camera with her. My talk "Synchronous multi-master clusters with MySQL: an introduction to Galera" is now posted on Youtube. (You may also want to watch the slides on slideshare while listening.)

I think this is a really good talk if you are interested in Galera. First we cover how to get a Galera cluster running, including the most important options and status variables to pay attention to. I cover both the internal Galera architecture and how to use load balancers and clustering frameworks, and explain how galera handles node crashes and network partitioning.

…

A deep dive into the code

MySQL security is like an onion, it has many layers. MySQL check the user source location (IP) and password. MySQL can also check a user’s SSL Certificate credentials. MySQL may or may not give a user access to a set of databases, tables, functions or views based on the user’s Access Control List.

I’ve been reviewing ScaleArc’s iDB for some time.  The use of a proxy complicates the authentication process even more.  This has led to me reviewing all of MySQL Security.  I’ll blog about what I’ve found as I dive into the code.

The Login Handshake

In version 4.0 and before:

• The server sends a random string to the client, in scramble_buff.
• The client encrypts the scramble_buff value using the hash of a password that the user has entered. This happens in …

Next week, a couple of us at Tokutek will be heading to Buenos Aires for the MySQL / MariaDB Conference & Expo LA. Gerry Narvaja actually grew up in Buenos Aires. My own family is Argentinian. I spent several years there as a child, and my childhood home in South Carolina was Argentinian in spirit: absolutely no English, and the only grits that entered my house were served with tomato sauce and called polenta!

As some of you get ready to visit Buenos Aires, maybe for the first time, I thought I’d share an abbreviated list of my favorite things to do.

First of all, make sure to watch the really fantastic con movie Nueve Reinas. Not only is it a great movie, but much of it takes place in the Hilton where the conference will be held.

…

The MySQL for Database Administrators course is a 5 day course that teaches the key skills essential for MySQL Database Administrators.

You can take this course in one of the following three ways:

• Training on Demand: Get Instructor-led training within 24 hours through streaming-video from your desk.
• Live Virtual Class: Live instructor-led training from your desk. Over 1000! LVC events on the schedule for the MySQL for Database Administrator course.
• In Class: See below for a selection of locations where you can take this training

For more information on this course or teaching schedule, go to the Oracle University portal and click on MySQL or search under your country/location.

A selection of the In-Class schedule for the MySQL for Database Administrator course:

What do Tungsten, Galera and MySQL 5.5 diagnostics have in common? They are the subjects of 4 videos I took a few weeks ago in Finland, attending the Helsinki MySQL User Group and OUG Harmony. Without further ado, here are the videos:

2012 OUG Harmony: MySQL Sessions

• The powers of tungsten replicator: Fast, Flexible and Fun by Linas Virbalas, Continuent

  …

As I reported via Twitter late last week, we encountered an issue that got some of our mail delivery delayed by about a day and a half. I’ll explain more about what happened as I believe in openness on these matters, and also the experience has educational content for others.

Our mail server doesn’t have direct external interaction, it’s shielded by two relays that handle both the inbound MX and the outbound queue. This setup works remarkably well in terms of exposure to spam and other malicious activity. As previously discussed, it appears that it’s more difficult to make mail server infra more resilient without expending lots more time/effort and infrastructure expenditure. Just because of the way the common tools for mail delivery and imap are built, having two or more of each in a semi-active setup gets quite complex. Complexity is in itself a risk so it has to be considered in relation to the costs and risks of the …

A student asked, “Can you successfully overload MySQL stored procedures, like PL/SQL does in stored packages?” I said, “MySQL doesn’t formally support overloading stored procedures, and doesn’t support packages like Oracle 11g. You can, however, mimic (or fake) overloading with prepared statements. It requires a careful combination of stored procedures and session variables.”

Unfortunately, they asked for an example. So I wrote this set of code. It uses queries as the dynamic statements to make it simple to test but you can substitute INSERT, UPDATE, or DELETE statements. I didn’t provide type validation in the example, which would be required for dates or date-timestamps.

It’s presented in steps with test programs at each level. If you see an opportunity to improve on any of the example components, leave a comment. As to whether I’d implement this in …

I was playing with Percona Server today and found fast_index_creation does not work quite exactly like described in the manual. The point I’m looking to make though it would be very hard to catch this problem without additional
information_schema tables we added in Percona Server.

I was doing simple ALTER TABLE such as: “alter table sbtest add z int not null;” which I expected would create table with primary key only copy the data to it and when create secondary key by sort. Looking at innodb_sys_tables and innodb_sys_indexes I discovered it is not the case:

mysql> select * from innodb_sys_tables;
+----------+--------+------------------+------+--------+-------+
| TABLE_ID | SCHEMA | NAME             | FLAG | N_COLS | SPACE | …

The theme this week was “data integrity and security”:

• Upgraded the kernel in our Puppet Dashboard DB master/slave cluster after one of the machines crashed.
  
• Verified that none of our databases were running a version of MySQL that was affected by the serious MySQL authentication bypass vulnerability discovered, patched/fixed and reported by MariaDB. (On a personal note, the way they handled finding, fixing and reporting the bug makes me happy that they are such good community stewards)
  
• We removed duplicate entries from our Bugzilla instance that were put in when assumptions were made about nonexistent unique keys.
  
• Continued the database consistency check for …