【 使用环境 】生产环境
【 OB or 其他组件 】oceanbase-ce
【 使用版本 】4.3.5
【问题描述】
原先ob-server采用obd白屏部署,当时ssh使用root用户去连接,现在等保测评需要整改,root需要禁止远程登录,ob-server现在没法启动了,怎么处理
【附件及日志】
[root@ob0 ~]# obd cluster display ob_cluster_2
Get local repositories and plugins ok
Open ssh connection x
[ERROR] OBD-1013: root @192.168.0.89 connect failed: username or password error
Trace ID: bc78411c-713b-11f1-a5de-000c29962a8b
If you want to view detailed obd logs, please run: obd display-trace bc78411c-713b-11f1-a5de-000c29962a8b
[root@ob0 ~]# obd display-trace bc78411c-713b-11f1-a5de-000c29962a8b
[2026-06-26 16:48:00.420] [DEBUG] - cmd: [‘ob_cluster_2’]
[2026-06-26 16:48:00.421] [DEBUG] - opts: {‘encryption_passkey’: ******}
[2026-06-26 16:48:00.421] [DEBUG] - mkdir /root/.obd/lock/
[2026-06-26 16:48:00.421] [DEBUG] - unknown lock mode
[2026-06-26 16:48:00.421] [DEBUG] - try to get share lock /root/.obd/lock/global
[2026-06-26 16:48:00.422] [DEBUG] - share lock /root/.obd/lock/global, count 1
[2026-06-26 16:48:00.422] [DEBUG] - Get Deploy by name
[2026-06-26 16:48:00.422] [DEBUG] - mkdir /root/.obd/cluster/
[2026-06-26 16:48:00.422] [DEBUG] - mkdir /root/.obd/config_parser/
[2026-06-26 16:48:00.422] [DEBUG] - try to get exclusive lock /root/.obd/lock/deploy_ob_cluster_2
[2026-06-26 16:48:00.422] [DEBUG] - exclusive lock /root/.obd/lock/deploy_ob_cluster_2, count 1
[2026-06-26 16:48:00.427] [DEBUG] - Deploy status judge
[2026-06-26 16:48:00.427] [DEBUG] - Get deploy config
[2026-06-26 16:48:00.444] [INFO] Get local repositories and plugins
[2026-06-26 16:48:00.445] [DEBUG] - mkdir /root/.obd/repository
[2026-06-26 16:48:00.445] [DEBUG] - Get local repository oceanbase-ce-4.3.5.4-a30a15dd7a80f6acd0f113993bb70b2e56d40f80
[2026-06-26 16:48:00.446] [DEBUG] - try to get share lock /root/.obd/lock/mirror_and_repo
[2026-06-26 16:48:00.446] [DEBUG] - share lock /root/.obd/lock/mirror_and_repo, count 1
[2026-06-26 16:48:00.448] [DEBUG] - Get local repository obproxy-ce-4.3.5.0-f17b277b681adb1c86bfc3cfda369ad88896da9d
[2026-06-26 16:48:00.449] [DEBUG] - share lock /root/.obd/lock/mirror_and_repo, count 2
[2026-06-26 16:48:00.450] [DEBUG] - Searching param plugin for components …
[2026-06-26 16:48:00.451] [DEBUG] - Search param plugin for oceanbase-ce
[2026-06-26 16:48:00.451] [DEBUG] - mkdir /root/.obd/plugins
[2026-06-26 16:48:00.451] [DEBUG] - Found for oceanbase-ce-param-4.3.3.0 for oceanbase-ce-4.3.5.4
[2026-06-26 16:48:00.451] [DEBUG] - Applying oceanbase-ce-param-4.3.3.0 for oceanbase-ce-4.3.5.4-104000042025090916.el7-a30a15dd7a80f6acd0f113993bb70b2e56d40f80
[2026-06-26 16:48:00.975] [DEBUG] - Search param plugin for obproxy-ce
[2026-06-26 16:48:00.975] [DEBUG] - Found for obproxy-ce-param-4.3.0 for obproxy-ce-4.3.5.0
[2026-06-26 16:48:00.975] [DEBUG] - Applying obproxy-ce-param-4.3.0 for obproxy-ce-4.3.5.0-3.el7-f17b277b681adb1c86bfc3cfda369ad88896da9d
[2026-06-26 16:48:01.136] [INFO] Open ssh connection
[2026-06-26 16:48:01.143] [DEBUG] - host: 192.168.0.89, port: 22, user: root, password: ******
[2026-06-26 16:48:05.098] [ERROR] Traceback (most recent call last):
[2026-06-26 16:48:05.098] [ERROR] File “core.py”, line 2734, in display_cluster
[2026-06-26 16:48:05.098] [ERROR] File “core.py”, line 421, in get_clients
[2026-06-26 16:48:05.098] [ERROR] File “core.py”, line 440, in get_clients_with_connect_status
[2026-06-26 16:48:05.098] [ERROR] File “core.py”, line 476, in ssh_clients_connect
[2026-06-26 16:48:05.098] [ERROR] File “_stdio.py”, line 1164, in func_wrapper
[2026-06-26 16:48:05.098] [ERROR] File “ssh.py”, line 460, in connect
[2026-06-26 16:48:05.098] [ERROR] File “_stdio.py”, line 1164, in func_wrapper
[2026-06-26 16:48:05.098] [ERROR] File “ssh.py”, line 411, in _login
[2026-06-26 16:48:05.098] [ERROR] File “paramiko/client.py”, line 485, in connect
[2026-06-26 16:48:05.098] [ERROR] File “paramiko/client.py”, line 818, in _auth
[2026-06-26 16:48:05.098] [ERROR] File “paramiko/client.py”, line 805, in _auth
[2026-06-26 16:48:05.099] [ERROR] File “paramiko/transport.py”, line 1638, in auth_password
[2026-06-26 16:48:05.099] [ERROR] File “paramiko/auth_handler.py”, line 263, in wait_for_response
[2026-06-26 16:48:05.099] [ERROR] paramiko.ssh_exception.AuthenticationException: Authentication failed.
[2026-06-26 16:48:05.099] [ERROR]
[2026-06-26 16:48:05.099] [CRITICAL] [ERROR] OBD-1013: root @192.168.0.89 connect failed: username or password error
[2026-06-26 16:48:05.133] [INFO] [ERROR] OBD-1013: root @192.168.0.89 connect failed: username or password error
[2026-06-26 16:48:05.133] [INFO]
[2026-06-26 16:48:05.133] [INFO] Trace ID: bc78411c-713b-11f1-a5de-000c29962a8b
[2026-06-26 16:48:05.133] [INFO] If you want to view detailed obd logs, please run: obd display-trace bc78411c-713b-11f1-a5de-000c29962a8b
[2026-06-26 16:48:05.133] [DEBUG] - unlock /root/.obd/lock/global
[2026-06-26 16:48:05.134] [DEBUG] - unlock /root/.obd/lock/deploy_ob_cluster_2
[2026-06-26 16:48:05.134] [DEBUG] - unlock /root/.obd/lock/mirror_and_repo
[root@ob0 home]# obd cluster restart ob_cluster_2 --wp
Get local repositories and plugins ok
Load cluster param plugin ok
Open ssh connection ok
Cluster status check ok
Connect to observer 192.168.0.89:2881 ok
Server check ok
[ERROR] OBD-1001: 192.168.0.89:2883 port is already used, Please choose another unoccupied port or terminate the process occupying the port
[ERROR] OBD-1001: 192.168.0.89:2883 port is already used
[WARN] OBD-1001: 192.168.0.89:2884 port is already used
[ERROR] OBD-1001: 192.168.0.89:2885 port is already used, Please choose another unoccupied port or terminate the process occupying the port
[ERROR] OBD-1001: 192.168.0.89:2885 port is already used
See https://www.oceanbase.com/product/ob-deployer/error-codes .
Trace ID: 20fb54b6-7142-11f1-a8a7-000c29962a8b
If you want to view detailed obd logs, please run: obd display-trace 20fb54b6-7142-11f1-a8a7-000c29962a8b
[root@ob0 home]# obd cluster restart ob_cluster_2 --wp
Get local repositories and plugins ok
Load cluster param plugin ok
Open ssh connection ok
Cluster status check ok
Load cluster param plugin ok
Start observer ok
observer program health check ok
Connect to observer 192.168.0.89:2881 ok
obshell start ok
obshell program health check ok
start obproxy x
[ERROR] failed to start 192.168.0.89 obproxy: bash: 行 1: /home/ob_cluster_2/obproxy/bin/obproxy: Permission denied
[ERROR] OBD-1005: Some of the servers in the cluster have been stopped
See https://www.oceanbase.com/product/ob-deployer/error-codes .
Trace ID: e0d0929c-7142-11f1-aae0-000c29962a8b
If you want to view detailed obd logs, please run: obd display-trace e0d0929c-7142-11f1-aae0-000c29962a8b
[root@ob0 home]# ll /home/ob_cluster_2/obproxy/bin/obproxy
lrwxrwxrwx 1 sysadmin sysgroup 93 6月26日 11:20 /home/ob_cluster_2/obproxy/bin/obproxy → /root/.obd/repository/obproxy-ce/4.3.5.0/f17b277b681adb1c86bfc3cfda369ad88896da9d/bin/obproxy
[root@ob0 home]#