OpsCenter Security 超级用户的默认设置失败

Question

我在尝试通过最佳实践规则“安全超级用户具有默认设置”时遇到了一些问题。

我已按照 DataStax 文档 (https://docs.datastax.com/en/datastax_enterprise/4.8/datastax_enterprise/sec/secChangingDefaultSuperuser.html) 了解如何更改默认超级用户。

更改默认超级用户密码（cassandra/cassandra）后，最佳实践失败并给了我：

Problem when checking login on 'ip address':
Please update the password for the user 'cassandra'.

查看他们显示错误凭据的日志，这很可能是因为 OpsCenter 仍在使用 cassandra 默认密码 (cassandra)。

2016-07-08 13:43:00+0000 [cluster_name]  INFO: Starting scheduled job 20921ac5-c5a3-488b-b01e-a90e5189182d

2016-07-08 13:43:00+0000 []  INFO: Starting factory <cassandra.io.twistedreactor.TwistedConnectionClientFactory instance at 0x3ecd878>

2016-07-08 13:43:00+0000 []  INFO: Stopping factory <cassandra.io.twistedreactor.TwistedConnectionClientFactory instance at 0x3ecd878>

2016-07-08 13:43:00+0000 []  WARN: [control connection] Error connecting to 256.256.256.256: Failed to authenticate to
256.256.256.256: code=0100 [Bad credentials] message="Username and/or password are incorrect"

2016-07-08 13:43:00+0000 [] ERROR: Control connection failed to connect, shutting down Cluster: ('Unable to connect to any servers', {'256.256.256.256': AuthenticationFailed(u'Failed to authenticate to
256.256.256.256: code=0100 [Bad credentials] message="Username and/or password are incorrect"',)})

2016-07-08 13:43:00+0000 [] ERROR: Problem when checking login on
256.256.256.256: Traceback (most recent call last):
          File "/usr/lib/python2.7/site-packages/opscenterd/bestpractice/BestPracticeRules.py", line 227, in check_cassandra_user
          File "/usr/share/opscenter/lib/py-redhat/2.7/shared/amd64/twisted/internet/defer.py", line 1018, in _inlineCallbacks
            result = result.throwExceptionIntoGenerator(g)
          File "/usr/share/opscenter/lib/py-redhat/2.7/shared/amd64/twisted/python/failure.py", line 349, in throwExceptionIntoGenerator
            return g.throw(self.type, self.value, self.tb)
          File "/usr/lib/python2.7/site-packages/opscenterd/CassandraService.py", line 136, in check_connection
          File "/usr/share/opscenter/lib/py-redhat/2.7/shared/amd64/twisted/internet/defer.py", line 1018, in _inlineCallbacks
            result = result.throwExceptionIntoGenerator(g)
          File "/usr/share/opscenter/lib/py-redhat/2.7/shared/amd64/twisted/python/failure.py", line 349, in throwExceptionIntoGenerator
            return g.throw(self.type, self.value, self.tb)
          File "/usr/lib/python2.7/site-packages/opscenterd/WrappedDriver.py", line 163, in connect
          File "/usr/share/opscenter/lib/py-redhat/2.7/shared/amd64/twisted/internet/defer.py", line 1018, in _inlineCallbacks
            result = result.throwExceptionIntoGenerator(g)
          File "/usr/share/opscenter/lib/py-redhat/2.7/shared/amd64/twisted/python/failure.py", line 349, in throwExceptionIntoGenerator
            return g.throw(self.type, self.value, self.tb)
          File "/usr/lib/python2.7/site-packages/opscenterd/WrappedDriver.py", line 310, in _hacky_connect
        NoHostAvailable: Unable to connect to any seed nodes, tried ['256.256.256.256']

2016-07-08 13:43:00+0000 [cluster_name] ERROR: The best practice rule 'Security superuser has default setting' has failed.

我的 address.yaml 文件如下所示：

stomp_interface: 256.256.256.255
cassandra_user: cassandra
cassandra_pass: ********** (correct cassandra password)

我的 cluster.conf 看起来如下

[jmx]
username =
password =
port = 7199

[destinations]
active =

[agents]
backup_staging_dir = /path/to/commitlog/backup

[cassandra]
username = cassandra
seed_hosts = 256.256.256.253, 256.256.256.254
password = ******** (correct password)
cql_port = 9042

使用 OpsCenter 5.2.4 和 DataStax Enterprise 4.8.8。

任何建议将不胜感激。

谢谢！

Answer 1

opscenterd 进程将直接连接到您的集群以执行多项操作。由于更改密码，您需要编辑集群配置以更新密码。

以下是通过 UI 更改设置的步骤： https://docs.datastax.com/en/opscenter/5.2/opsc/online_help/opscModifyingClusterSetting_t.html

或者你可以直接编辑集群的conf文件： https://docs.datastax.com/en/opscenter/5.2/opsc/configure/opscConnectionConfig_r.html#opscConnectionConfig__cassandra-password