Question

我在尝试获得最佳实践规则时遇到了一些问题＆＃34;安全超级用户有默认设置＆＃34;通过。

我已经关注了如何更改默认超级用户的DataStax文档（https://docs.datastax.com/en/datastax_enterprise/4.8/datastax_enterprise/sec/secChangingDefaultSuperuser.html）。

更改默认超级用户密码（cassandra / cassandra）后，最佳做法失败并给我：

Problem when checking login on 'ip address':
Please update the password for the user 'cassandra'.

查看日志显示错误的凭据，这很可能是因为OpsCenter仍在使用cassandra默认密码（cassandra）。

2016-07-08 13:43:00+0000 [cluster_name]  INFO: Starting scheduled job 20921ac5-c5a3-488b-b01e-a90e5189182d

2016-07-08 13:43:00+0000 []  INFO: Starting factory <cassandra.io.twistedreactor.TwistedConnectionClientFactory instance at 0x3ecd878>

2016-07-08 13:43:00+0000 []  INFO: Stopping factory <cassandra.io.twistedreactor.TwistedConnectionClientFactory instance at 0x3ecd878>

2016-07-08 13:43:00+0000 []  WARN: [control connection] Error connecting to 256.256.256.256: Failed to authenticate to
256.256.256.256: code=0100 [Bad credentials] message="Username and/or password are incorrect"

2016-07-08 13:43:00+0000 [] ERROR: Control connection failed to connect, shutting down Cluster: ('Unable to connect to any servers', {'256.256.256.256': AuthenticationFailed(u'Failed to authenticate to
256.256.256.256: code=0100 [Bad credentials] message="Username and/or password are incorrect"',)})

2016-07-08 13:43:00+0000 [] ERROR: Problem when checking login on
256.256.256.256: Traceback (most recent call last):
          File "/usr/lib/python2.7/site-packages/opscenterd/bestpractice/BestPracticeRules.py", line 227, in check_cassandra_user
          File "/usr/share/opscenter/lib/py-redhat/2.7/shared/amd64/twisted/internet/defer.py", line 1018, in _inlineCallbacks
            result = result.throwExceptionIntoGenerator(g)
          File "/usr/share/opscenter/lib/py-redhat/2.7/shared/amd64/twisted/python/failure.py", line 349, in throwExceptionIntoGenerator
            return g.throw(self.type, self.value, self.tb)
          File "/usr/lib/python2.7/site-packages/opscenterd/CassandraService.py", line 136, in check_connection
          File "/usr/share/opscenter/lib/py-redhat/2.7/shared/amd64/twisted/internet/defer.py", line 1018, in _inlineCallbacks
            result = result.throwExceptionIntoGenerator(g)
          File "/usr/share/opscenter/lib/py-redhat/2.7/shared/amd64/twisted/python/failure.py", line 349, in throwExceptionIntoGenerator
            return g.throw(self.type, self.value, self.tb)
          File "/usr/lib/python2.7/site-packages/opscenterd/WrappedDriver.py", line 163, in connect
          File "/usr/share/opscenter/lib/py-redhat/2.7/shared/amd64/twisted/internet/defer.py", line 1018, in _inlineCallbacks
            result = result.throwExceptionIntoGenerator(g)
          File "/usr/share/opscenter/lib/py-redhat/2.7/shared/amd64/twisted/python/failure.py", line 349, in throwExceptionIntoGenerator
            return g.throw(self.type, self.value, self.tb)
          File "/usr/lib/python2.7/site-packages/opscenterd/WrappedDriver.py", line 310, in _hacky_connect
        NoHostAvailable: Unable to connect to any seed nodes, tried ['256.256.256.256']

2016-07-08 13:43:00+0000 [cluster_name] ERROR: The best practice rule 'Security superuser has default setting' has failed.

我的address.yaml文件如下所示：

stomp_interface: 256.256.256.255
cassandra_user: cassandra
cassandra_pass: ********** (correct cassandra password)

我的cluster.conf看起来跟着

[jmx]
username =
password =
port = 7199

[destinations]
active =

[agents]
backup_staging_dir = /path/to/commitlog/backup

[cassandra]
username = cassandra
seed_hosts = 256.256.256.253, 256.256.256.254
password = ******** (correct password)
cql_port = 9042

使用OpsCenter 5.2.4和DataStax Enterprise 4.8.8。

任何建议都将不胜感激。

谢谢！

Answer 1

opscenterd进程将直接连接到您的群集以进行许多操作。由于更改密码，您需要编辑群集配置以更新密码。

以下是通过UI更改设置的步骤： https://docs.datastax.com/en/opscenter/5.2/opsc/online_help/opscModifyingClusterSetting_t.html

或者您可以直接编辑群集配置文件： https://docs.datastax.com/en/opscenter/5.2/opsc/configure/opscConnectionConfig_r.html#opscConnectionConfig__cassandra-password

OpsCenter安全超级用户具有默认设置失败

1 个答案: