[Bug]: gs_probackup 远程全量备份时认证失败-openGauss-server-AtomGit

已关闭

[Bug]: gs_probackup 远程全量备份时认证失败 #8494

wuchenlong创建于 6 天前关闭于 3 天前

wuchenlong成员

6 天前创建

测试类型

工具功能

测试版本

7.0.0LTS

操作系统和硬件信息

openEuler release 24.03 (LTS-SP2) aarch64

测试环境

企业版主备

操作步骤

环境

openGauss 7.0.0-LTS (build bc72a519)，企业版一主两备
Primary: 20.20.20.224:15600；Standby: 20.20.20.226/228
非初始用户：backup_repro（SYSADMIN + REPLICATION），密码认证 sha256
pg_hba 已配置：host all/replication backup_repro <backup_client_ip>/32 sha256

步骤

在备机上执行：

source /home/wcl0623/wcl.env
BDIR=/home/wcl0623/cluster/back_remote_primary_repro
rm -rf "$BDIR"; mkdir -p "$BDIR"; chmod 700 "$BDIR"
gs_probackup init -B "$BDIR"
gs_probackup add-instance -B "$BDIR" --instance=instance_primary \
  -D /home/wcl0623/cluster/dn1 \
  --remote-proto=ssh --remote-host=20.20.20.224 --remote-port=22 \
  --remote-user=wcl0623 \
  --remote-path=/home/wcl0623/cluster/app/bin \
  --remote-libpath=/home/wcl0623/cluster/app/lib
# 文档要求 remote-proto=ssh 时 -h 与 --remote-host 为同一台机器
gs_probackup backup -B "$BDIR" -b full --instance=instance_primary \
  -h 20.20.20.224 -p 15600 -d postgres -U backup_repro -W 'BackupRepro123' \
  --remote-proto=ssh --remote-host=20.20.20.224 --remote-port=22 \
  --remote-user=wcl0623 \
  --remote-path=/home/wcl0623/cluster/app/bin \
  --remote-libpath=/home/wcl0623/cluster/app/lib \
  --backup-pg-replslot -j 8

对照实验

本地全量（无 -h，remote:false）：成功（Status=OK）
本地全量但加 -h 20.20.20.224（TCP+sha256）：同样在 STREAM 二次连接失败
远程全量备份备机：补齐 replication pg_hba 后，同样 Invalid username/password
库日志可见：首次 connection authorized: user=backup_repro database=postgres 成功；随后来自同一客户端的连接 FATAL: Invalid username/password（replication/STREAM 通道未正确带上 -W）

预期输出

远程模式下对主节点（及备节点）执行 gs_probackup backup -b full（STREAM）应能使用 -W/--password 完成 WAL 流复制连接并成功产出 Status=OK 的备份集。文档已声明支持远程备份与备份主机/备机。

实际输出

远程全量备份主节点失败：

INFO: Backup start, gs_probackup version: 2.4.2, instance: instance_primary, backup ID: TL6KWL, backup mode: FULL, wal mode: STREAM, remote: true, compress-algorithm: none, compress-level: 1
LOG: Database backup start
LOG: logical replication slots for subscriptions not found
ERROR: could not connect to database postgres: FATAL:  Invalid username/password,login denied.
FATAL:  Invalid username/password,login denied.
WARNING: Backup TL6KWL is running, setting its status to ERROR
BACKUP_EXIT=1
+ echo BACKUP_EXIT=1

对照：本地无 -h 成功：

INFO: Backup start, gs_probackup version: 2.4.2, instance: inst_local, backup ID: TL6KUG, backup mode: FULL, wal mode: STREAM, remote: false, compress-algorithm: none, compress-level: 1
INFO: Backup TL6KUG data files are valid
INFO: Backup TL6KUG resident size: 654MB
INFO: Backup TL6KUG completed
BACKUP_EXIT=0

对照：本地带 -h 同样失败：

INFO: Backup start, gs_probackup version: 2.4.2, instance: inst_local_h, backup ID: TL6KZI, backup mode: FULL, wal mode: STREAM, remote: false, compress-algorithm: none, compress-level: 1
ERROR: could not connect to database postgres: FATAL:  Invalid username/password,login denied.
FATAL:  Invalid username/password,login denied.
BACKUP_EXIT=1

日志信息

主库 pg_log 可见首次业务连接授权成功、后续 replication 连接认证失败。文档依据：docs/zh/tool_and_commandreference/gs_probackup.md（支持远程备份；remote-proto=ssh 时 -h 与 --remote-host 须为同一机器）。

提单组织

测试团队

wuchenlong成员

6 天前添加了label：bug

opengauss_bot成员

6 天前评论：

This issue requires an assignee. Since you haven't specified one, we've assigned TestManager as the default assignee for this issue.

opengauss_bot成员

6 天前将 TestManager 设为负责人

opengauss_bot成员

6 天前评论：

Welcome To openGauss Community

Hey @wuchenlong , thanks for your contribution to the community.

Bot Usage Manual

I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands. You can self-configure the PR merge rules for this repository. For more details, please refer to Here.

Contact Guide

If you have any questions, please contact the SIG: StorageEngine, AI, CM, CloudNative, SecurityTechnology, SQLEngine ,
and any of the maintainers: @CarrotGo, @chendong76, @chenxiaobin19, @congzhou2603, @dodders, @hwworkholic, @jemappellehc, @libiao2024, @muyulinzhong, @quemingjian, @shenzheng4, @shirley_zhengx, @superlchf, @totaj, @wlff234, @wofanzheng, @ywzq1161327784 ,
and any of the committers: @Igali, @bihua111, @cailei19, @h_ray, @levy53071, @libiao2024, @lihaixiao, @mrzack, @wangfeihuo, @wuyuechuan, @xiong_xjun, @zhangfengzhi123, @zhangxubo, @zhangzq131, @zjh_hw .

wuchenlong成员

6 天前关联了看板：openGauss 7.0.0-LTS

opengauss_bot成员

6 天前添加了label：sig/Tools

wuchenlong成员

6 天前将 Nerifish 设为负责人

wuchenlong成员

6 天前移除了负责人 TestManager

wuchenlong成员

6 天前 issue优先级由无优先级改变为主要

liuzhanfeng成员

6 天前关联了pull request：修复gs_probackup认证失败问题

chendong76成员

6 天前将 liuzhanfeng 设为负责人，移除负责人 Nerifish

liuzhanfeng成员

5 天前评论：

自验：
远程备份本节点：

本地备份本节点：

远程备份其他节点：

liuzhanfeng成员

5 天前 issue状态由待办的改变为待回归

wuchenlong成员

3 天前评论：

回归版本：7.0.0-B023（openGauss 7.0.0 build 68f12854，compiled at 2026-09-12 16:05:53 commit 1003 last mr 9774）
回归环境：224 三节点集群（ARM，wcl0623:15600），cluster_state=Normal
结论：通过（远程 STREAM 全量备份 Status=OK，BACKUP_EXIT=0）

说明：按 issue 步骤用非初始用户 backup_repro（SYSADMIN+REPLICATION，sha256）+ remote-proto=ssh 对主节点做远程全量；对照本地无 -h 亦成功。

完整回归 SQL / 命令

source /home/wcl0623/wcl.env
# 用户与 pg_hba（摘要）
# CREATE USER backup_repro WITH PASSWORD 'BackupRepro123' SYSADMIN REPLICATION;
# host all/replication backup_repro 20.20.20.224/32 sha256

BDIR=/home/wcl0623/cluster/back_remote_primary_repro_b023
rm -rf "$BDIR"; mkdir -p "$BDIR"; chmod 700 "$BDIR"
gs_probackup init -B "$BDIR"
gs_probackup add-instance -B "$BDIR" --instance=instance_primary \
  -D /home/wcl0623/cluster/dn1 \
  --remote-proto=ssh --remote-host=20.20.20.224 --remote-port=22 \
  --remote-user=wcl0623 \
  --remote-path=/home/wcl0623/cluster/app/bin \
  --remote-libpath=/home/wcl0623/cluster/app/lib
gs_probackup backup -B "$BDIR" -b full --instance=instance_primary \
  -h 20.20.20.224 -p 15600 -d postgres -U backup_repro -W 'BackupRepro123' \
  --remote-proto=ssh --remote-host=20.20.20.224 --remote-port=22 \
  --remote-user=wcl0623 \
  --remote-path=/home/wcl0623/cluster/app/bin \
  --remote-libpath=/home/wcl0623/cluster/app/lib \
  --backup-pg-replslot -j 8

实际输出

INFO: Backup start, gs_probackup version: 2.4.2, instance: instance_primary, backup ID: TLC2NV, backup mode: FULL, wal mode: STREAM, remote: true, ...
INFO: Backup TLC2NV data files are valid
INFO: Backup TLC2NV resident size: 625MB
INFO: Backup TLC2NV completed
BACKUP_EXIT=0

对照本地无 -h：inst_local / TLC2O0 同样 completed，LOCAL_EXIT=0。

wuchenlong成员

3 天前 issue状态由待回归改变为已验收

wuchenlong成员

3 天前关闭了 issue