{"action":"created","issue":{"url":"https://api.github.com/repos/codership/mysql-wsrep/issues/141","labels_url":"https://api.github.com/repos/codership/mysql-wsrep/issues/141/labels{/name}","comments_url":"https://api.github.com/repos/codership/mysql-wsrep/issues/141/comments","events_url":"https://api.github.com/repos/codership/mysql-wsrep/issues/141/events","html_url":"https://github.com/codership/mysql-wsrep/issues/141","id":82570681,"number":141,"title":"wsrep_sst_auth password in cleartext in error log and ps","user":{"login":"bstillman","id":5289825,"avatar_url":"https://avatars.githubusercontent.com/u/5289825?v=3","gravatar_id":"","url":"https://api.github.com/users/bstillman","html_url":"https://github.com/bstillman","followers_url":"https://api.github.com/users/bstillman/followers","following_url":"https://api.github.com/users/bstillman/following{/other_user}","gists_url":"https://api.github.com/users/bstillman/gists{/gist_id}","starred_url":"https://api.github.com/users/bstillman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bstillman/subscriptions","organizations_url":"https://api.github.com/users/bstillman/orgs","repos_url":"https://api.github.com/users/bstillman/repos","events_url":"https://api.github.com/users/bstillman/events{/privacy}","received_events_url":"https://api.github.com/users/bstillman/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/codership/mysql-wsrep/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/codership/mysql-wsrep/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":{"login":"ayurchen","id":1644111,"avatar_url":"https://avatars.githubusercontent.com/u/1644111?v=3","gravatar_id":"","url":"https://api.github.com/users/ayurchen","html_url":"https://github.com/ayurchen","followers_url":"https://api.github.com/users/ayurchen/followers","following_url":"https://api.github.com/users/ayurchen/following{/other_user}","gists_url":"https://api.github.com/users/ayurchen/gists{/gist_id}","starred_url":"https://api.github.com/users/ayurchen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ayurchen/subscriptions","organizations_url":"https://api.github.com/users/ayurchen/orgs","repos_url":"https://api.github.com/users/ayurchen/repos","events_url":"https://api.github.com/users/ayurchen/events{/privacy}","received_events_url":"https://api.github.com/users/ayurchen/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/codership/mysql-wsrep/milestones/7","html_url":"https://github.com/codership/mysql-wsrep/milestones/5.5.x","labels_url":"https://api.github.com/repos/codership/mysql-wsrep/milestones/7/labels","id":1040031,"number":7,"title":"5.5.x","description":null,"creator":{"login":"ayurchen","id":1644111,"avatar_url":"https://avatars.githubusercontent.com/u/1644111?v=3","gravatar_id":"","url":"https://api.github.com/users/ayurchen","html_url":"https://github.com/ayurchen","followers_url":"https://api.github.com/users/ayurchen/followers","following_url":"https://api.github.com/users/ayurchen/following{/other_user}","gists_url":"https://api.github.com/users/ayurchen/gists{/gist_id}","starred_url":"https://api.github.com/users/ayurchen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ayurchen/subscriptions","organizations_url":"https://api.github.com/users/ayurchen/orgs","repos_url":"https://api.github.com/users/ayurchen/repos","events_url":"https://api.github.com/users/ayurchen/events{/privacy}","received_events_url":"https://api.github.com/users/ayurchen/received_events","type":"User","site_admin":false},"open_issues":1,"closed_issues":1,"state":"open","created_at":"2015-03-26T14:11:57Z","updated_at":"2015-05-31T15:51:18Z","due_on":null,"closed_at":null},"comments":4,"created_at":"2015-05-29T20:18:12Z","updated_at":"2015-05-31T17:47:10Z","closed_at":null,"body":"The SST auth password is in clear text in the error log a ps. Example using xtrabackup-v2 SST method:\r\n\r\n150526 15:39:04 [Note] WSREP: Running: 'wsrep_sst_xtrabackup-v2 --role 'joiner' --address 'xxx.xxx.xxx.xxx' --auth 'sst_user:secret' --datadir '/var/lib/mysql/' --defaults-file '/etc/my.cnf' --parent '13238''\r\n\r\nmysql     1108  1098  0 16:16 pts/1    00:00:00 /bin/bash -ue /usr//bin/wsrep_sst_xtrabackup-v2 --role joiner --address xxx.xxx.xxx.xxx --auth sst_user:secret --datadir /var/lib/mysql/ --defaults-file /etc/my.cnf --parent 1098\r\n\r\nAlso on failures:\r\n\r\n150526 15:39:04 [ERROR] WSREP: Failed to read 'ready <addr>' from: wsrep_sst_xtrabackup-v2 --role 'joiner' --address 'xxx.xxx.xxx.xxx' --auth 'sst_user:secret' --datadir '/var/lib/mysql/' --defaults-file '/etc/my.cnf' --parent '13238'\r\n        Read: '(null)'\r\n150526 15:39:04 [ERROR] WSREP: Process completed with error: wsrep_sst_xtrabackup-v2 --role 'joiner' --address 'xxx.xxx.xxx.xxx' --auth 'sst_user:secret' --datadir '/var/lib/mysql/' --defaults-file '/etc/my.cnf' --parent '13238': 2 (No such file or directory)\r\n\r\nCan this be obfuscated? "},"comment":{"url":"https://api.github.com/repos/codership/mysql-wsrep/issues/comments/107227384","html_url":"https://github.com/codership/mysql-wsrep/issues/141#issuecomment-107227384","issue_url":"https://api.github.com/repos/codership/mysql-wsrep/issues/141","id":107227384,"user":{"login":"dbpercona","id":9259336,"avatar_url":"https://avatars.githubusercontent.com/u/9259336?v=3","gravatar_id":"","url":"https://api.github.com/users/dbpercona","html_url":"https://github.com/dbpercona","followers_url":"https://api.github.com/users/dbpercona/followers","following_url":"https://api.github.com/users/dbpercona/following{/other_user}","gists_url":"https://api.github.com/users/dbpercona/gists{/gist_id}","starred_url":"https://api.github.com/users/dbpercona/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dbpercona/subscriptions","organizations_url":"https://api.github.com/users/dbpercona/orgs","repos_url":"https://api.github.com/users/dbpercona/repos","events_url":"https://api.github.com/users/dbpercona/events{/privacy}","received_events_url":"https://api.github.com/users/dbpercona/received_events","type":"User","site_admin":false},"created_at":"2015-05-31T17:47:10Z","updated_at":"2015-05-31T17:47:10Z","body":"FWIW,  Raghu fixed this in PXC...\r\n\r\n  https://bugs.launchpad.net/percona-xtradb-cluster/+bug/1200727\r\n\r\nThere's a patch for the PXB \"v1\" SST script here:\r\n\r\n  https://bazaar.launchpad.net/~percona-core/percona-xtradb-cluster/5.5/revision/401\r\n\r\n"}}