obd web 部署ocp时 检查都通过了,但是部署时报错 Access denied for user 'root' 失败

【 使用环境 】测试环境
【 OB or 其他组件 】obd web
【 使用版本 】4.2.0
【问题描述】obd web 部署ocp时 检查都通过了,但是部署时报错 Access denied for user ‘root’ 失败

部署时选择新建集群,ocp_meta和ocp_monitor 都是新建的,为啥会有密码报错的事

2026-05-13 15:02:02,113 ERROR wrapper (task.py:135) [280cf929dd254a2293552711049a9262] task 2 got exception
Traceback (most recent call last):
  File "service/common/task.py", line 121, in wrapper
  File "concurrent/futures/_base.py", line 456, in result
  File "concurrent/futures/_base.py", line 401, in __get_result
  File "concurrent/futures/thread.py", line 58, in run
  File "service/handler/ocp_handler.py", line 840, in _do_install
  File "_stdio.py", line 1209, in wrapper
  File "_stdio.py", line 1170, in func_wrapper
  File "tool.py", line 790, in __init__
  File "tool.py", line 824, in _connect
  File "pymysql/connections.py", line 361, in __init__
  File "pymysql/connections.py", line 669, in connect
  File "pymysql/connections.py", line 957, in _request_authentication
  File "pymysql/connections.py", line 775, in _read_packet
  File "pymysql/protocol.py", line 219, in raise_for_error
  File "pymysql/err.py", line 150, in raise_mysql_exception
pymysql.err.OperationalError: (1045, "Access denied for user 'root'@'xxx.xxx.xxx.xxx' (using password: YES)")

【备注】基于 LLM 和开源文档 RAG 的论坛小助手已开放测试,在发帖时输入 [@论坛小助手] 即可召唤小助手,欢迎试用!

5 个赞

部署了很多遍,都这个错,怀疑是不是有啥缓存,obd部署是离线 all-in-one包 安装的

2 个赞

这次改了东西,就是obp自定义参数重的密码,原来是自动生成,改成了指定密码,就ok了

1 个赞

日志发一下 obd日志: 默认保存在安装obd的用户home路径: cd ~/.obd/log/

1 个赞

app.log (110.4 KB)

1 个赞

密码错误导致的!

1 个赞

是的,主要是,密码都是在 obd web 上新填的,就离谱。

1 个赞

报错已经很清楚了,密码问题。还有常见的问题是在笔记本上部署往往会失败,另外,资源不足(特别是内存不足)往往也会失败

1 个赞

不是笔记本,是ecs;另,资源不足会出现密码问题?

2 个赞

以前好像遇到过类似的问题 但忘记是怎么解决的 很熟悉

1 个赞

看着像是密码有问题导致 再发一下日志信息
obd的yaml文件发一下
ocp的日志 ocp-server日志: /home/admin/ocp/log中,ocp-server.log

是通过obd web 安装的,我找一下yaml和日志,稍等

ocp-server.log 重建后就被自动删掉了,没有保留了

yaml文件如下

# cat config.yaml
user:
  username: ocpmeta
  password: ocpmeta
  port: 22
oceanbase-ce:
  version: 4.2.1.8
  release: 108000022024072217.el7
  package_hash: 499b676f2ede5a16e0c07b2b15991d1160d972e8
  127.0.0.1:
    zone: zone1
  servers:
  - 127.0.0.1
  global:
    appname: ocp
    root_password: xxxx
    mysql_port: 2881
    rpc_port: 2882
    home_path: /opt/oceanbase/ocpmeta
    data_dir: /data/ocp/data/1
    redo_dir: /data/ocp/log1
    obshell_port: 2886
    ocp_meta_tenant:
      tenant_name: ocp_meta
      max_cpu: 1.0
      memory_size: 2G
    ocp_meta_username: root
    ocp_meta_password: xxxx
    ocp_meta_db: meta_database
    ocp_monitor_tenant:
      tenant_name: ocp_monitor
      max_cpu: 1.0
      memory_size: 2G
    ocp_monitor_username: root
    ocp_monitor_password: xxxx
    ocp_monitor_db: monitor_database
    cluster_id: 1778656895
    proxyro_password: xxxx
    ocp_root_password: xxxx
    ocp_meta_tenant_log_disk_size: 6G
    enable_syslog_wf: false
    max_syslog_file_count: 16
    production_mode: false
    memory_limit: 15G
    datafile_size: 36G
    system_memory: 5G
    log_disk_size: 36G
    cpu_count: 8
    datafile_maxsize: 12T
    datafile_next: 1T
obproxy-ce:
  version: 4.3.5.0
  package_hash: f17b277b681adb1c86bfc3cfda369ad88896da9d
  release: 3.el7
  servers:
  - 127.0.0.1
  global:
    home_path: /opt/oceanbase/ocpmeta/obproxy
    prometheus_listen_port: 2884
    listen_port: 2883
    enable_obproxy_rpc_service: false
    proxy_mem_limited: 1GB
    obproxy_sys_password: xxxx
    skip_proxy_sys_private_check: true
    enable_strict_kernel_release: false
    enable_cluster_checkout: false
  depends:
  - oceanbase-ce
  127.0.0.1:
    proxy_id: 3267
    client_session_id_version: 2
ocp-server-ce:
  version: 4.4.0
  package_hash: f673d693677a2c640f925ad2127a604aaebf00bf
  release: 20251114143405.el7
  servers:
  - 127.0.0.1
  global:
    home_path: /home/ocpmeta/ocp
    soft_dir: /home/ocpmeta/software
    log_dir: /home/ocpmeta/logs
    ocp_site_url: http://127.0.0.1:2379
    port: 2379
    admin_password: xxxx
    memory_size: 4G
    manage_info:
      machine: 10
  depends:
  - oceanbase-ce
  - obproxy-ce


# cat inner_config.yaml
oceanbase-ce:
  127.0.0.1: {}
obproxy-ce:
  127.0.0.1: {}
ocp-server-ce:
  127.0.0.1: {}
$_deploy_install_mode: ln  

还有一个报错:

grep -r 'Access denied' *.log
bootstrap.log:	sql 55: INSERT INTO `ocp_ob_error_code`(`error_code`,`error_code_definition`,`error_code_description`) VALUES (4043,'OB_PASSWORD_WRONG','Access denied for user') ON DUPLICATE KEY UPDATE `error_code_definition`='OB_PASSWORD_WRONG',`error_code_description`='Access denied for user'
bootstrap.log:	sql 520: INSERT INTO `ocp_ob_error_code`(`error_code`,`error_code_definition`,`error_code_description`) VALUES (5036,'OB_ERR_NO_PRIVILEGE','Access denied') ON DUPLICATE KEY UPDATE `error_code_definition`='OB_ERR_NO_PRIVILEGE',`error_code_description`='Access denied'
bootstrap.log:	sql 627: INSERT INTO `ocp_ob_error_code`(`error_code`,`error_code_definition`,`error_code_description`) VALUES (5170,'OB_ERR_NO_DB_PRIVILEGE','Access denied for user to database') ON DUPLICATE KEY UPDATE `error_code_definition`='OB_ERR_NO_DB_PRIVILEGE',`error_code_description`='Access denied for user to database'
        sql 54: INSERT INTO `ocp_ob_error_code`(`error_code`,`error_code_definition`,`
error_code_description`) VALUES (4042,'OB_USER_NOT_EXIST','Can not find any matching r
ow in the user table') ON DUPLICATE KEY UPDATE `error_code_definition`='OB_USER_NOT_EX
IST',`error_code_description`='Can not find any matching row in the user table'
        sql 55: INSERT INTO `ocp_ob_error_code`(`error_code`,`error_code_definition`,`error_code_description`) VALUES (4043,'OB_PASSWORD_WRONG','Access denied for user') ON DUPLICATE KEY UPDATE `error_code_definition`='OB_PASSWORD_WRONG',`error_code_description`='Access denied for user'
        sql 56: INSERT INTO `ocp_ob_error_code`(`error_code`,`error_code_definition`,`error_code_description`) VALUES (4044,'OB_SKEY_VERSION_WRONG','Wrong skey version') ON DUPLICATE KEY UPDATE `error_code_definition`='OB_SKEY_VERSION_WRONG',`error_code_description`='Wrong skey version'

单独重启一下ocp-server的组件 ocp-server.log日志发一下 看看
obd cluster start xxxx -c ocp-server-ce

display-trace.log (44.1 KB)

前面已经搭建好了,重启日志不知道管不管用,这个是trace日志,请问大佬是否还需要其他日志。

看着没有问题了 之前看着是启动ocp-server失败 失败的原因好像是密码的问题 想让你在重启一下看看 估计在重启也看不出来了

又重启一次没有明显的 ERROR日志,有一个failed to start报错:

[2026-05-14 14:19:53.383] [DEBUG] -- exited code 0
[2026-05-14 14:19:53.383] [DEBUG] -- failed to start 127.0.0.1 ocp-server-ce, remaining retries: 118
[2026-05-14 14:20:08.384] [DEBUG] -- 127.0.0.1 program health check
[2026-05-14 14:20:08.384] [DEBUG] -- ocpmeta@127.0.0.1 execute: ls /proc/12845
[2026-05-14 14:20:08.420] [DEBUG] -- exited code 0
[2026-05-14 14:20:08.421] [DEBUG] -- ocpmeta@127.0.0.1 execute: bash -c 'cat /proc/net/{tcp*,udp*}' | awk -F' ' '{print $2,$10}' | grep '00000000:094B' | awk -F' ' '{print $2}' | uniq

display-trace.log (44.1 KB)

但是后面看着ocp-server是正常的 目前ocp-server进程应该是启动的吧

是的,正常跑着的。
感谢大佬,有问题我再发帖求助 :pray: