#2478·oceanbase

Rejected CREATE STANDBY TENANT logs the LOG_RESTORE_SOURCE password

Author: Wwwing301Created Sep 1, 2026Updated Sep 8, 2026

Self Checks

  • I have read the Contributing Guide.
  • This is only for bug report, if you would like to ask a question, please head to Discussions.
  • I have searched for existing issues search for existing issues, including closed ones.
  • I confirm that I am using English to submit this report, otherwise it will be closed.
  • 【中文用户 & Non English User】请使用英语提交,否则会被关闭 :)
  • Please do not modify this template :) and fill in all the required fields.

OceanBase version

OceanBase CE 5.0.2.0, source revision d128661ca4f5b3d167c1928e556d70d2f901baef, Release+ASan.

Self Hosted

Self Hosted (Source)

Environment

Ubuntu 22.04.5 LTS, x86_64, one-zone loopback observer.

Steps to reproduce

As root@sys on a disposable cluster, use an overlength synthetic password (139 bytes in the authoritative run):

sql
CREATE STANDBY TENANT edbf_standby
  LOG_RESTORE_SOURCE=
  'SERVICE=127.0.0.1:1 USER=edbf@edbf PASSWORD=EDBF_LOG_RESTORE_PASSWORD_SENTINEL_20260901AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA';

The statement returns error 1210 during local argument validation. Inspect the new run's observer and rootservice logs; both complete authoritative files are bundled as artifacts/observer.log and artifacts/rootservice.log:

WDIAG ... parse restore source service password failed(
  name=password,
  value=EDBF_LOG_RESTORE_PASSWORD_SENTINEL_20260901AAAAAAAA...,
  ret=...)

The sink is src/share/backup/ob_log_restore_config.cpp:435. A pre-trigger log scan was negative; the post-trigger scan found the complete unique marker. A tenant-count query confirmed that edbf_standby was not created.

artifacts.zip

✔️ Expected Behavior

LOG_RESTORE_SOURCE validation errors should report the invalid field name, constraint, and safe length metadata without printing the password value.

❌ Actual Behavior

The parser's error branch writes the complete rejected password to a warning log. The parser fails before tenant scheduling, no network connection occurs, and the observer stays healthy.