OceanBase用户
proxysys是obproxy代理专用的一个租户名，只能连接到obproxy
1、root@proxysys 密码查看
root@proxysys user has super privilege, and it can only use proxy internal cmd without connect to observer
[admin@ ~]$ mysql -uroot@proxysys -h127.0.0.1 -P2883 -pproxysys
Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MySQL connection id is 19
Server version: 5.6.25
Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
MySQL [(none)]> show users;
+--------------------------+-------------------+
| Variable_name | Value |
+--------------------------+-------------------+
| tx_isolation | READ-COMMITTED |
| system_time_zone | +08:00 |
| time_zone | +08:00 |
| character_set_server | utf8mb4 |
| character_set_client | utf8mb4 |
| interactive_timeout | 28800 |
| query_cache_size | 1048576 |
| character_set_results | utf8mb4 |
| max_allowed_packet | 4194304 |
| sql_mode | STRICT_ALL_TABLES |
| net_buffer_length | 16384 |
| wait_timeout | 28800 |
| lower_case_table_names | 2 |
| query_cache_type | OFF |
| init_connect | |
| transaction_isolation | READ |
| character_set_connection | utf8mb4 |
| net_write_timeout | 60 |
+--------------------------+-------------------+
18 rows in set (0.00 sec)
MySQL [(none)]>
查看obproxy用户和密码
MySQL [(none)]> show proxyconfig like '%password%';
+---------------------------------+------------------------------------------+--------------------------------+-------------+---------------+
| name | value | info | need_reboot | visible_level |
+---------------------------------+------------------------------------------+--------------------------------+-------------+---------------+
| observer_sys_password1 | | password for observer sys user | false | SYS |
| observer_sys_password | | password for observer sys user | false | SYS |
| obproxy_sys_password | e3fd448c516073714189b57233c9cf428ccb1bed | password for obproxy sys user | false | SYS |
| inspector_password | | password for inspector user | false | SYS |
| json_config_meta_table_password | | meta table password | true | virtual |
+---------------------------------+------------------------------------------+--------------------------------+-------------+---------------+
5 rows in set (0.00 sec)
通过alter命令可以对obproxy进行修改
alter proxyconfig set obproxy_sys_password='proxysys';
并密码加密并持久化到配置文件中
[admin@10 ~]$ strings /home/admin/obproxy/etc/obproxy_config.bin
observer_sys_password1=
observer_sys_password=
obproxy_sys_password=e3fd448c516073714189b57233c9cf428ccb1bed
inspector_password=
bt_retry_times=3
bt_instance_id=
bt_env_mode=TENANT_MODE
bt_local_work_mode=False
root@sys 或root自动带上sys租户 是一个超级用户，可执行obproxy相关命令，又可执行observer SQL
[admin ~]$ mysql -uroot -p -h127.0.0.1 -P2883
Enter password:
Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MySQL connection id is 34
Server version: 5.6.25 OceanBase 3.1.3 (r10000292022032916-3d79cacb37012cf61b7cb8faf00d9a6bb152bcd1) (Built Mar 29 2022 08:20:39)
Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
MySQL [(none)]> show databases;
+--------------------+
| Database |
+--------------------+
| oceanbase |
| information_schema |
| mysql |
| SYS |
| LBACSYS |
| ORAAUDITOR |
| test |
+--------------------+
7 rows in set (0.00 sec)
MySQL [(none)]> show proxyconfig like '%password%';
+---------------------------------+------------------------------------------+--------------------------------+-------------+---------------+
| name | value | info | need_reboot | visible_level |
+---------------------------------+------------------------------------------+--------------------------------+-------------+---------------+
| observer_sys_password1 | | password for observer sys user | false | SYS |
| observer_sys_password | | password for observer sys user | false | SYS |
| obproxy_sys_password | e3fd448c516073714189b57233c9cf428ccb1bed | password for obproxy sys user | false | SYS |
| inspector_password | | password for inspector user | false | SYS |
| json_config_meta_table_password | | meta table password | true | virtual |
+---------------------------------+------------------------------------------+--------------------------------+-------------+---------------+
5 rows in set (0.00 sec)
MySQL [(none)]> select user,password from mysql.user;
+------------+-------------------------------------------+
| user | password |
+------------+-------------------------------------------+
| root | |
| ORAAUDITOR | *9753e2cf9d2dcd5e13c052f581c310ac70c62723 |
| proxyro | |
+------------+-------------------------------------------+
3 rows in set (0.07 sec)
这个用户会存在二个地方
1、obproxy内，用show proxyconfig like '%password%'可以查看，并持久化在obproxy文件中
2、observer内，select user,password from mysql.user where user = 'root'; 密码存在mysql.user表中
3、如果两个密码不相同就会存在，通过obproxy无法访问，但是可以连接observer
遇到obproxy无法访问，但observer可以访问
一、修改obproxy密码
1、可以通过obd cluster edit-config obtest 修改参数 observer_sys_password
2、可以通过mysql -uroot@proxysys -h127.0.0.1 -P2883 -pproxysys 直接连接obproxy修改
二、修改observer密码
1、ALTER USER 'root' IDENTIFIED BY 'password'; 使其与obproxy中observer_sys_password一致
proxyro@sys 用户只有在observer上才有，并且只有oceanbase ，information_schema两个库的权限,只能连接到obserer上
[admin@~]$ mysql -uproxyro@sys -p -h127.0.0.1 -P2881
Enter password:
Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MySQL connection id is 3221661743
Server version: 5.7.25 OceanBase 3.1.3 (r10000292022032916-3d79cacb37012cf61b7cb8faf00d9a6bb152bcd1) (Built Mar 29 2022 08:20:39)
Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
MySQL [(none)]> show databases;
+--------------------+
| Database |
+--------------------+
| oceanbase |
| information_schema |
+--------------------+
2 rows in set (0.00 sec)