MHA+非root用户SSH等效性配置

rwedewe

环境：CentOS5.8
             MySQL5.5.17
实验：搭建MHA高可用架构（非root用户SSH等效性配置）SSH等效性用户配置的是：concert  端口：1314
MHA配置文件
[concert@mhamanager mha]$ more /etc/masterha_default.cnf
[server default]
user          = root
password      = mysql_admin
ssh_user      = concert
ssh_port      = 1314
repl_user     = repl
repl_password = repl_pwd
ping_interval = 3
ping_type     = select

[concert@mhamanager mha]$ more /etc/appl.cnf
[server default]
manager_workdir    = /mha/appl
manager_log        = /mha/appl/manager.log
remote_workdir     = /mha/appl
[server1]
hostname           = 192.168.66.88
master_binlog_dir  = /data/lib/mysql
candidate_master   = 1
[server2]
hostname           = 192.168.66.89
master_binlog_dir  = /data/lib/mysql
candidate_master   = 1
[server3]
hostname           = 192.168.66.120
no_master          = 1
port               = 3307

问题：配置好非root用户SSH等效性后，通过masterha_check_ssh检查没有问题
[concert@mhamanager ~]$ /usr/bin/masterha_check_ssh --conf=/etc/appl.cnf
Tue Sep  2 15:06:01 2014 - [info] Reading default configuratoins from /etc/masterha_default.cnf..
Tue Sep  2 15:06:01 2014 - [info] Reading application default configurations from /etc/appl.cnf..
Tue Sep  2 15:06:01 2014 - [info] Reading server configurations from /etc/appl.cnf..
Tue Sep  2 15:06:01 2014 - [info] Starting SSH connection tests..
Tue Sep  2 15:06:01 2014 - [debug]
Tue Sep  2 15:06:01 2014 - [debug]  Connecting via SSH from concert@192.168.66.88(192.168.66.88:1314) to concert@192.168.66.89(192.168.66.89:1314)..
Tue Sep  2 15:06:01 2014 - [debug]   ok.
Tue Sep  2 15:06:01 2014 - [debug]  Connecting via SSH from concert@192.168.66.88(192.168.66.88:1314) to concert@192.168.66.120(192.168.66.120:1314)..
Tue Sep  2 15:06:01 2014 - [debug]   ok.
Tue Sep  2 15:06:02 2014 - [debug]
Tue Sep  2 15:06:01 2014 - [debug]  Connecting via SSH from concert@192.168.66.89(192.168.66.89:1314) to concert@192.168.66.88(192.168.66.88:1314)..
Tue Sep  2 15:06:01 2014 - [debug]   ok.
Tue Sep  2 15:06:01 2014 - [debug]  Connecting via SSH from concert@192.168.66.89(192.168.66.89:1314) to concert@192.168.66.120(192.168.66.120:1314)..
Tue Sep  2 15:06:02 2014 - [debug]   ok.
Tue Sep  2 15:06:02 2014 - [debug]
Tue Sep  2 15:06:02 2014 - [debug]  Connecting via SSH from concert@192.168.66.120(192.168.66.120:1314) to concert@192.168.66.88(192.168.66.88:1314)..
Tue Sep  2 15:06:02 2014 - [debug]   ok.
Tue Sep  2 15:06:02 2014 - [debug]  Connecting via SSH from concert@192.168.66.120(192.168.66.120:1314) to concert@192.168.66.89(192.168.66.89:1314)..
Tue Sep  2 15:06:02 2014 - [debug]   ok.
Tue Sep  2 15:06:02 2014 - [info] All SSH connection tests passed successfully.
但通过masterha_check_repl检查则不通过
[concert@mhamanager ~]$ /usr/bin/masterha_check_repl --conf=/etc/appl.cnf
Tue Sep  2 17:10:08 2014 - [info] Reading default configuratoins from /etc/masterha_default.cnf..
Tue Sep  2 17:10:08 2014 - [info] Reading application default configurations from /etc/appl.cnf..
Tue Sep  2 17:10:08 2014 - [info] Reading server configurations from /etc/appl.cnf..
Tue Sep  2 17:10:08 2014 - [info] MHA::MasterMonitor version 0.55.
Tue Sep  2 17:10:08 2014 - [info] Dead Servers:
Tue Sep  2 17:10:08 2014 - [info] Alive Servers:
Tue Sep  2 17:10:08 2014 - [info]   192.168.66.88(192.168.66.88:3306)
Tue Sep  2 17:10:08 2014 - [info]   192.168.66.89(192.168.66.89:3306)
Tue Sep  2 17:10:08 2014 - [info]   192.168.66.120(192.168.66.120:3307)
Tue Sep  2 17:10:08 2014 - [info] Alive Slaves:
Tue Sep  2 17:10:08 2014 - [info]   192.168.66.89(192.168.66.89:3306)  Version=5.5.17-log (oldest major version between slaves) log-bin:enabled
Tue Sep  2 17:10:08 2014 - [info]     Replicating from 192.168.66.88(192.168.66.88:3306)
Tue Sep  2 17:10:08 2014 - [info]     Primary candidate for the new Master (candidate_master is set)
Tue Sep  2 17:10:08 2014 - [info]   192.168.66.120(192.168.66.120:3307)  Version=5.5.17-log (oldest major version between slaves) log-bin:enabled
Tue Sep  2 17:10:08 2014 - [info]     Replicating from 192.168.66.88(192.168.66.88:3306)
Tue Sep  2 17:10:08 2014 - [info]     Not candidate for the new Master (no_master is set)
Tue Sep  2 17:10:08 2014 - [info] Current Alive Master: 192.168.66.88(192.168.66.88:3306)
Tue Sep  2 17:10:08 2014 - [info] Checking slave configurations..
Tue Sep  2 17:10:08 2014 - [info] Checking replication filtering settings..
Tue Sep  2 17:10:08 2014 - [info]  binlog_do_db= , binlog_ignore_db=
Tue Sep  2 17:10:08 2014 - [info]  Replication filtering check ok.
Tue Sep  2 17:10:08 2014 - [info] Starting SSH connection tests..
Tue Sep  2 17:10:10 2014 - [error][/usr/lib/perl5/vendor_perl/MHA/MasterMonitor.pm, ln386] Error happend on checking configurations. SSH Configuration Check Failed!
at /usr/lib/perl5/vendor_perl/MHA/MasterMonitor.pm line 341
Tue Sep  2 17:10:10 2014 - [error][/usr/lib/perl5/vendor_perl/MHA/MasterMonitor.pm, ln482] Error happened on monitoring servers.
Tue Sep  2 17:10:10 2014 - [info] Got exit code 1 (Not master dead).

MySQL Replication Health is NOT OK!

解决方案：
1、增加remote_workdir（运行MySQL实例的服务器）的工作目录权限，其中会生成日志文件，将该目录拥有者设为concert   
[iyunv@master88 ~]# chown -R concert:concert /mha/               
2、添加concert为MySQL同组用户，使其有读取MySQL binary/relay log文件和relay_log.info文件的权限，以及日志目录的写权限
[iyunv@bakmaster ~]# usermod -g mysql concert
再次检查
[concert@mhamanager mha]$ /usr/bin/masterha_check_repl --conf=/etc/appl.cnf
Wed Sep  3 22:27:41 2014 - [info] Reading default configuratoins from /etc/masterha_default.cnf..
Wed Sep  3 22:27:41 2014 - [info] Reading application default configurations from /etc/appl.cnf..
Wed Sep  3 22:27:41 2014 - [info] Reading server configurations from /etc/appl.cnf..
Wed Sep  3 22:27:41 2014 - [info] MHA::MasterMonitor version 0.55.
Wed Sep  3 22:27:41 2014 - [info] Dead Servers:
Wed Sep  3 22:27:41 2014 - [info] Alive Servers:
Wed Sep  3 22:27:41 2014 - [info]   192.168.66.88(192.168.66.88:3306)
Wed Sep  3 22:27:41 2014 - [info]   192.168.66.89(192.168.66.89:3306)
Wed Sep  3 22:27:41 2014 - [info]   192.168.66.120(192.168.66.120:3307)
Wed Sep  3 22:27:41 2014 - [info] Alive Slaves:
Wed Sep  3 22:27:41 2014 - [info]   192.168.66.89(192.168.66.89:3306)  Version=5.5.17-log (oldest major version between slaves) log-bin:enabled
Wed Sep  3 22:27:41 2014 - [info]     Replicating from 192.168.66.88(192.168.66.88:3306)
Wed Sep  3 22:27:41 2014 - [info]     Primary candidate for the new Master (candidate_master is set)
Wed Sep  3 22:27:41 2014 - [info]   192.168.66.120(192.168.66.120:3307)  Version=5.5.17-log (oldest major version between slaves) log-bin:enabled
Wed Sep  3 22:27:41 2014 - [info]     Replicating from 192.168.66.88(192.168.66.88:3306)
Wed Sep  3 22:27:41 2014 - [info]     Not candidate for the new Master (no_master is set)
Wed Sep  3 22:27:41 2014 - [info] Current Alive Master: 192.168.66.88(192.168.66.88:3306)
Wed Sep  3 22:27:41 2014 - [info] Checking slave configurations..
Wed Sep  3 22:27:41 2014 - [info] Checking replication filtering settings..
Wed Sep  3 22:27:41 2014 - [info]  binlog_do_db= , binlog_ignore_db=
Wed Sep  3 22:27:41 2014 - [info]  Replication filtering check ok.
Wed Sep  3 22:27:41 2014 - [info] Starting SSH connection tests..
Wed Sep  3 22:27:42 2014 - [info] All SSH connection tests passed successfully.
Wed Sep  3 22:27:42 2014 - [info] Checking MHA Node version..
Wed Sep  3 22:27:43 2014 - [info]  Version check ok.
Wed Sep  3 22:27:43 2014 - [info] Checking SSH publickey authentication settings on the current master..
Wed Sep  3 22:27:43 2014 - [info] HealthCheck: SSH to 192.168.66.88 is reachable.
Wed Sep  3 22:27:43 2014 - [info] Master MHA Node version is 0.54.
Wed Sep  3 22:27:43 2014 - [info] Checking recovery script configurations on the current master..
Wed Sep  3 22:27:43 2014 - [info]   Executing command: save_binary_logs --command=test --start_pos=4 --binlog_dir=/data/lib/mysql --output_file=/mha/appl/save_binary_logs_test --manager_version=0.55 --start_file=mysql-bin.000004
Wed Sep  3 22:27:43 2014 - [info]   Connecting to concert@192.168.66.88(192.168.66.88)..
  Creating /mha/appl if not exists..    ok.
  Checking output directory is accessible or not..
   ok.
  Binlog found at /data/lib/mysql, up to mysql-bin.000004
Wed Sep  3 22:27:43 2014 - [info] Master setting check done.
Wed Sep  3 22:27:43 2014 - [info] Checking SSH publickey authentication and checking recovery script configurations on all alive slave servers..
Wed Sep  3 22:27:43 2014 - [info]   Executing command : apply_diff_relay_logs --command=test --slave_user='root' --slave_host=192.168.66.89 --slave_ip=192.168.66.89 --slave_port=3306 --workdir=/mha/appl --target_version=5.5.17-log --manager_version=0.55 --relay_log_info=/data/lib/mysql/relay-log.info  --relay_dir=/data/lib/mysql/  --slave_pass=xxx
Wed Sep  3 22:27:43 2014 - [info]   Connecting to concert@192.168.66.89(192.168.66.89:1314)..
  Checking slave recovery environment settings..
    Opening /data/lib/mysql/relay-log.info ... ok.
    Relay log found at /data/lib/mysql, up to mysql-relay-bin.000006
    Temporary relay log file is /data/lib/mysql/mysql-relay-bin.000006
    Testing mysql connection and privileges.. done.
    Testing mysqlbinlog output.. done.
    Cleaning up test file(s).. done.
Wed Sep  3 22:27:43 2014 - [info]   Executing command : apply_diff_relay_logs --command=test --slave_user='root' --slave_host=192.168.66.120 --slave_ip=192.168.66.120 --slave_port=3307 --workdir=/mha/appl --target_version=5.5.17-log --manager_version=0.55 --relay_log_info=/data/lib/mysqlb/relay-log.info  --relay_dir=/data/lib/mysqlb/  --slave_pass=xxx
Wed Sep  3 22:27:43 2014 - [info]   Connecting to concert@192.168.66.120(192.168.66.120:1314)..
  Checking slave recovery environment settings..
    Opening /data/lib/mysqlb/relay-log.info ... ok.
    Relay log found at /data/lib/mysqlb, up to mysql-relay-bin.000005
    Temporary relay log file is /data/lib/mysqlb/mysql-relay-bin.000005
    Testing mysql connection and privileges.. done.
    Testing mysqlbinlog output.. done.
    Cleaning up test file(s).. done.
Wed Sep  3 22:27:44 2014 - [info] Slaves settings check done.
Wed Sep  3 22:27:44 2014 - [info]
192.168.66.88 (current master)
+--192.168.66.89
+--192.168.66.120
Wed Sep  3 22:27:44 2014 - [info] Checking replication health on 192.168.66.89..
Wed Sep  3 22:27:44 2014 - [info]  ok.
Wed Sep  3 22:27:44 2014 - [info] Checking replication health on 192.168.66.120..
Wed Sep  3 22:27:44 2014 - [info]  ok.
Wed Sep  3 22:27:44 2014 - [warning] master_ip_failover_script is not defined.
Wed Sep  3 22:27:44 2014 - [warning] shutdown_script is not defined.
Wed Sep  3 22:27:44 2014 - [info] Got exit code 0 (Not master dead).
MySQL Replication Health is OK.

OK!问题解决。