【测试类型：故障注入】【测试版本：5.0.0.】问题描述主备集群备机reboot会丢失omm账户间的免密

【标题描述】:
【测试类型：故障注入】【测试版本：5.0.0.】 问题描述主备集群备机reboot会丢失omm账户间的免密

【操作系统和硬件信息】(查询命令: cat /etc/system-release, uname -a):

```
[root@localhost ~]# cat /etc/os-release
NAME="openEuler"
VERSION="22.03 (LTS-SP1)"
ID="openEuler"
VERSION_ID="22.03"
PRETTY_NAME="openEuler 22.03 (LTS-SP1)"
ANSI_COLOR="0;31"
[root@localhost ~]# uname -a
Linux localhost.localdomain 5.10.0-136.12.0.86.oe2203sp1.x86_64 #1 SMP Tue Dec 27 17:50:15 CST 2022 x86_64 x86_64 x86_64 GNU/Linux
```

【测试环境】(单机/1主x备x级联备):
1主1备
【被测功能】:
备机reboot
【数据库版本】(查询命令: gaussdb -V):

```
[root@gauss1 ~]# su - omm -c "gaussdb -V"
gaussdb (openGauss 5.0.0 build a07d57c3) compiled at 2023-03-29 03:37:13 commit 0 last mr
```

【预置条件】:
两台单机使用gs_expansion扩容

【操作步骤】(请填写详细的操作步骤):
1. 安装两台单节点openGauss
主机1

```
[root@gauss1 ~]# su - omm -c "gs_om -t status --detail"
[   Cluster State   ]

cluster_state   : Normal
redistributing  : No
current_az      : AZ_ALL

[  Datanode State   ]

node  node_ip         port      instance                         state
------------------------------------------------------------------------------------------
1  gauss1 10.125.9.62     15400      6001 /usr/bin/gaussdb/data/dn   P Primary Normal
```

主机2

```
[root@gauss2 ~]# su - omm -c "gs_om -t status --detail"
TMOUT=0
[   Cluster State   ]

cluster_state   : Normal
redistributing  : No
current_az      : AZ_ALL

[  Datanode State   ]

node  node_ip         port      instance                         state
------------------------------------------------------------------------------------------
1  gauss2 10.125.10.79    15400      6001 /usr/bin/gaussdb/data/dn   P Primary Normal
```

2. 使用gs_expansion扩容，并安装CM组件，

```
Start expansion without cluster manager component.
Database on standby nodes installed finished.

Checking gaussdb and gs_om version.
End to check gaussdb and gs_om version.

Start to establish the relationship.
Start to build standby 10.125.10.79.
Build standby 10.125.10.79 success.
Start to generate and send cluster static file.
End to generate and send cluster static file.

Expansion results:
10.125.10.79:   Success
Expansion Finish.

Start to install cm tool.
Preparing CM path.
Decompressing CM pacakage.
Creating cluster_manual_start file.
Initializing cm_server.
Initializing cm_agent.
Creating CM ca files.
Refreshing static and dynamic file using xml file with cm.
Setting om_monitor crontab.
Starting cluster.
[  CMServer State   ]

node      instance state
--------------------------
1  gauss1 1        Primary
2  gauss2 2        Standby

[   Cluster State   ]

cluster_state   : Normal
redistributing  : No
balanced        : Yes
current_az      : AZ_ALL

[  Datanode State   ]

node      instance state            | node      instance state
----------------------------------------------------------------------------
1  gauss1 6001     P Primary Normal | 2  gauss2 6002     S Standby Normal
Install CM tool success.
```
3.安装后集群状态如下

```
[root@gauss2 ~]# su - omm -c "gs_om -t status --detail"
[  CMServer State   ]

node      node_ip         instance                                 state
--------------------------------------------------------------------------
1  gauss1 10.125.9.62     1    /usr/bin/gaussdb/cmserver/cm_server Primary
2  gauss2 10.125.10.79    2    /usr/bin/gaussdb/cmserver/cm_server Standby

[   Cluster State   ]

cluster_state   : Normal
redistributing  : No
balanced        : Yes
current_az      : AZ_ALL

[  Datanode State   ]

node      node_ip         instance                      state            
-------------------------------------------------------------------------
1  gauss1 10.125.9.62     6001 /usr/bin/gaussdb/data/dn P Primary Normal
2  gauss2 10.125.10.79    6002 /usr/bin/gaussdb/data/dn S Standby Normal
```
4.此时在备机上验证omm免密存在

```
[root@gauss2 ~]# su - omm
上一次登录： 三 3月 20 02:05:38 CST 2024 pts/0 上

Welcome to 5.10.0-136.12.0.86.4.hl202.x86_64

System information as of time:  2024年 03月 20日 星期三 02:06:11 CST

System load:    0.94
Processes:      151
Memory used:    9.8%
Swap used:      0%
Usage On:       5%
IP address:     10.125.10.79
Users online:   1
To run a command as administrator(user "root"),use "sudo <command>".
[omm@gauss2 ~]$ ssh gauss1

Last login: Wed Mar 20 02:05:03 2024

Welcome to 5.10.0-136.12.0.86.4.hl202.x86_64

System information as of time:  2024年 03月 20日 星期三 02:06:22 CST

System load:    0.95
Processes:      155
Memory used:    10.5%
Swap used:      0%
Usage On:       6%
IP address:     10.125.9.62
IP address:     10.125.9.63
Users online:   2
To run a command as administrator(user "root"),use "sudo <command>".
[omm@gauss1 ~]$ exit
注销
Connection to gauss1 closed.
[omm@gauss2 ~]$ 
```
5.在备机执行reboot，再次验证发现免密丢失

```
[root@gauss2 ~]# su - omm
上一次登录： 三 3月 20 02:06:11 CST 2024 pts/0 上

Welcome to 5.10.0-136.12.0.86.4.hl202.x86_64

System information as of time:  2024年 03月 20日 星期三 02:07:42 CST

System load:    0.51
Processes:      159
Memory used:    1.6%
Swap used:      0%
Usage On:       5%
IP address:     10.125.10.79
Users online:   1
To run a command as administrator(user "root"),use "sudo <command>".
[omm@gauss2 ~]$ ssh gauss1
omm@gauss1's password:
```

【预期输出】:
免密存在
【实际输出】:
免密丢失
【原因分析】:
查询issue可以确认与https://gitee.com/opengauss/openGauss-server/issues/I8RP3Z?from=project-issue问题一致；
是搭建双机后，检查子账户免密的定时任务不存在导致

openGauss/openGauss-server

内容风险标识

评论 (16)

openGauss/openGauss-server .gitee-modal { width: 500px !important; }

内容风险标识