原作者：彭冲

• 问题概述
• 问题原因
• 解决方案

问题概述

虚拟机解压安装的MogDB3.0.4，宿主机远程连接虚拟机omm用户正常，虚拟机之间omm用户使用ssh报错。

操作系统为Centos 8.4

$ cat /etc/centos-release
CentOS Linux release 8.4.2105

ARM架构

$ uname -r
5.11.12-300.el8.aarch64

虚拟机内部omm用户使用ssh报错如下：

$ ssh node2
ssh: symbol lookup error: /usr/lib64/libk5crypto.so.3: undefined symbol: EVP_KDF_ctrl, version OPENSSL_1_1_1b

问题原因

omm用户使用LD_LIBRARY_PATH配置动态库路径时，优先使用了数据库lib下的libcrypto.so.1.1(/opt/mogdb304/lib/libcrypto.so.1.1)，版本不匹配，引起错误。

$ ldd /usr/bin/ssh
        linux-vdso.so.1 (0x0000ffffb293e000)
        libcrypto.so.1.1 => /opt/mogdb304/lib/libcrypto.so.1.1 (0x0000ffffb25d5000)
        libdl.so.2 => /usr/lib64/libdl.so.2 (0x0000ffffb25b4000)
        libutil.so.1 => /usr/lib64/libutil.so.1 (0x0000ffffb2593000)
        libz.so.1 => /opt/mogdb304/lib/libz.so.1 (0x0000ffffb2562000)
        libcrypt.so.1 => /usr/lib64/libcrypt.so.1 (0x0000ffffb2529000)
        libresolv.so.2 => /usr/lib64/libresolv.so.2 (0x0000ffffb24f6000)
        libselinux.so.1 => /usr/lib64/libselinux.so.1 (0x0000ffffb24b3000)
        libgssapi_krb5.so.2 => /usr/lib64/libgssapi_krb5.so.2 (0x0000ffffb2452000)
        libkrb5.so.3 => /usr/lib64/libkrb5.so.3 (0x0000ffffb2350000)
        libk5crypto.so.3 => /usr/lib64/libk5crypto.so.3 (0x0000ffffb231f000)
        libcom_err.so.2 => /usr/lib64/libcom_err.so.2 (0x0000ffffb22fe000)
        libc.so.6 => /usr/lib64/libc.so.6 (0x0000ffffb2189000)
        /lib/ld-linux-aarch64.so.1 (0x0000ffffb2900000)
        libpthread.so.0 => /usr/lib64/libpthread.so.0 (0x0000ffffb2154000)
        libpcre2-8.so.0 => /usr/lib64/libpcre2-8.so.0 (0x0000ffffb20c3000)
        libkrb5support.so.0 => /usr/lib64/libkrb5support.so.0 (0x0000ffffb20a2000)
        libkeyutils.so.1 => /usr/lib64/libkeyutils.so.1 (0x0000ffffb2081000)

解决方案

参考root用户ssh的动态链接库，修改omm用户的.bashrc文件，将路径/lib64放到LD_LIBRARY_PATH环境变量的最前面即可。

export LD_LIBRARY_PATH=/lib64:/usr/lib64:$GAUSSHOME/lib:$GAUSSHOME/lib/postgresql/: