OceanBase用户介绍

OceanBase用户

proxysys是obproxy代理专用的一个租户名,只能连接到obproxy

1、root@proxysys 密码查看

root@proxysys user has super privilege, and it can only use proxy internal cmd without connect to observer


[admin@ ~]$ mysql -uroot@proxysys -h127.0.0.1 -P2883 -pproxysys
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MySQL connection id is 19
Server version: 5.6.25

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MySQL [(none)]> show users;
+--------------------------+-------------------+
| Variable_name            | Value             |
+--------------------------+-------------------+
| tx_isolation             | READ-COMMITTED    |
| system_time_zone         | +08:00            |
| time_zone                | +08:00            |
| character_set_server     | utf8mb4           |
| character_set_client     | utf8mb4           |
| interactive_timeout      | 28800             |
| query_cache_size         | 1048576           |
| character_set_results    | utf8mb4           |
| max_allowed_packet       | 4194304           |
| sql_mode                 | STRICT_ALL_TABLES |
| net_buffer_length        | 16384             |
| wait_timeout             | 28800             |
| lower_case_table_names   | 2                 |
| query_cache_type         | OFF               |
| init_connect             |                   |
| transaction_isolation    | READ              |
| character_set_connection | utf8mb4           |
| net_write_timeout        | 60                |
+--------------------------+-------------------+
18 rows in set (0.00 sec)

MySQL [(none)]>


查看obproxy用户和密码 
MySQL [(none)]> show proxyconfig like '%password%';
+---------------------------------+------------------------------------------+--------------------------------+-------------+---------------+
| name                            | value                                    | info                           | need_reboot | visible_level |
+---------------------------------+------------------------------------------+--------------------------------+-------------+---------------+
| observer_sys_password1          |                                          | password for observer sys user | false       | SYS           |
| observer_sys_password           |                                          | password for observer sys user | false       | SYS           |
| obproxy_sys_password            | e3fd448c516073714189b57233c9cf428ccb1bed | password for obproxy sys user  | false       | SYS           |
| inspector_password              |                                          | password for inspector user    | false       | SYS           |
| json_config_meta_table_password |                                          | meta table password            | true        | virtual       |
+---------------------------------+------------------------------------------+--------------------------------+-------------+---------------+
5 rows in set (0.00 sec)

通过alter命令可以对obproxy进行修改
alter proxyconfig set obproxy_sys_password='proxysys';
并密码加密并持久化到配置文件中

[admin@10 ~]$ strings /home/admin/obproxy/etc/obproxy_config.bin
observer_sys_password1=
observer_sys_password=
obproxy_sys_password=e3fd448c516073714189b57233c9cf428ccb1bed
inspector_password=
bt_retry_times=3
bt_instance_id=
bt_env_mode=TENANT_MODE
bt_local_work_mode=False




root@sys 或root自动带上sys租户 是一个超级用户,可执行obproxy相关命令,又可执行observer SQL

[admin ~]$ mysql -uroot -p -h127.0.0.1 -P2883
Enter password:
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MySQL connection id is 34
Server version: 5.6.25 OceanBase 3.1.3 (r10000292022032916-3d79cacb37012cf61b7cb8faf00d9a6bb152bcd1) (Built Mar 29 2022 08:20:39)

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MySQL [(none)]> show  databases;
+--------------------+
| Database           |
+--------------------+
| oceanbase          |
| information_schema |
| mysql              |
| SYS                |
| LBACSYS            |
| ORAAUDITOR         |
| test               |
+--------------------+
7 rows in set (0.00 sec)

MySQL [(none)]>  show proxyconfig like '%password%';
+---------------------------------+------------------------------------------+--------------------------------+-------------+---------------+
| name                            | value                                    | info                           | need_reboot | visible_level |
+---------------------------------+------------------------------------------+--------------------------------+-------------+---------------+
| observer_sys_password1          |                                          | password for observer sys user | false       | SYS           |
| observer_sys_password           |                                          | password for observer sys user | false       | SYS           |
| obproxy_sys_password            | e3fd448c516073714189b57233c9cf428ccb1bed | password for obproxy sys user  | false       | SYS           |
| inspector_password              |                                          | password for inspector user    | false       | SYS           |
| json_config_meta_table_password |                                          | meta table password            | true        | virtual       |
+---------------------------------+------------------------------------------+--------------------------------+-------------+---------------+
5 rows in set (0.00 sec)

MySQL [(none)]> select user,password from mysql.user;
+------------+-------------------------------------------+
| user       | password                                  |
+------------+-------------------------------------------+
| root       |                                           |
| ORAAUDITOR | *9753e2cf9d2dcd5e13c052f581c310ac70c62723 |
| proxyro    |                                           |
+------------+-------------------------------------------+
3 rows in set (0.07 sec)

这个用户会存在二个地方
1、obproxy内,用show proxyconfig like '%password%'可以查看,并持久化在obproxy文件中
2、observer内,select user,password from mysql.user where user = 'root'; 密码存在mysql.user表中
3、如果两个密码不相同就会存在,通过obproxy无法访问,但是可以连接observer

遇到obproxy无法访问,但observer可以访问
一、修改obproxy密码 
1、可以通过obd cluster edit-config obtest 修改参数 observer_sys_password
2、可以通过mysql -uroot@proxysys -h127.0.0.1 -P2883 -pproxysys 直接连接obproxy修改
二、修改observer密码
1、ALTER USER 'root' IDENTIFIED BY 'password'; 使其与obproxy中observer_sys_password一致


proxyro@sys 用户只有在observer上才有,并且只有oceanbase ,information_schema两个库的权限,只能连接到obserer上

[admin@~]$ mysql -uproxyro@sys -p -h127.0.0.1 -P2881
Enter password:
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MySQL connection id is 3221661743
Server version: 5.7.25 OceanBase 3.1.3 (r10000292022032916-3d79cacb37012cf61b7cb8faf00d9a6bb152bcd1) (Built Mar 29 2022 08:20:39)

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MySQL [(none)]> show databases;
+--------------------+
| Database           |
+--------------------+
| oceanbase          |
| information_schema |
+--------------------+
2 rows in set (0.00 sec)


👍