Avamar: Remote-MCCLI-Befehl schlägt nach dem Upgrade auf Java höher als 1.8.0_481 fehl

Zusammenfassung: In diesem Artikel wird das Fehlschlagen von Remote-mccli-Befehlen nach dem Upgrade von Java auf Version 1.8.0_492 erläutert und eine Problemumgehung für die Wiederherstellungsfunktionalität bereitgestellt. ...

Dieser Artikel gilt für Dieser Artikel gilt nicht für Dieser Artikel ist nicht an ein bestimmtes Produkt gebunden. In diesem Artikel werden nicht alle Produktversionen aufgeführt.
Andere Ressourcen ansehen

Symptome

Die remote-mccli-Befehle können nach dem Upgrade auf Java ab Version 1.8.0_481 auf dem Remoteserver keine Verbindung zum MCS herstellen.

Funktionierende Version von Java auf dem Remote-MCCLI-Server:

root@remote-linux:~/>: java -version
openjdk version "1.8.0_472"
OpenJDK Runtime Environment (build 1.8.0_472-b08)
OpenJDK 64-Bit Server VM (build 25.472-b08, mixed mode)
root@remote-linux:~/>:

Gehen Sie nach dem Upgrade der Java-Version höher als 1.8.0_481 wie folgt vor:

root@remote-linux:~/>: java -version
openjdk version "1.8.0_492"
OpenJDK Runtime Environment (build 1.8.0_492-b09)
OpenJDK 64-Bit Server VM (build 25.492-b09, mixed mode)
root@remote-linux:~/>:  
root@remote-linux:~/>:  ./mccli server show-prop
1,23996,CLI failed to connect to MCS.
Attribute Value
--------- -------------------------------------------------------------------------------------------------------------------------------------------------
reason    FIPS 140-2 mode is not supported on Java 7.  Please install supported version of Java on the client machine, or turn off this mode on the server.
option    non-JRMP server at remote endpoint
root@remote-linux:~/>:
Bei der /usr/local/avamar/var/mc/server_log/mcserver.log.0 Zeigt: 
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:05.00969 [RMI TCP Connection(504846)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504846)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00011 [RMI TCP Connection(504847)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504847)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00094 [RMI TCP Connection(504848)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504848)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00127 [RMI TCP Connection(504849)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504849)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00156 [RMI TCP Connection(504850)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504850)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00174 [Web Services monitor thread#186] com.avamar.mc.dpn.ExecuteCommand.createTimer
FINE: Creating timer for com.avamar.mc.mon.WebServicesMonitor
05/07-13:38:06.00216 [RMI TCP Connection(504851)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504851)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00220 [RMI TCP Connection(504852)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504852)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Ciphertext is too large in received TLS record
    at com.rsa.sslj.x.aI.b(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)

Ursache

Änderungen, die in Java-Versionen höher als 1.8.0_481 eingeführt wurden, wirken sich auf diese Funktionalität aus. Die technische Abteilung untersucht das Problem.

Lösung

Befolgen Sie die Anweisungen im Artikel Avamar: Avamar Administrator JNLP mit Java 1.8.0_481 kann nicht gestartet werden, um den Workaround zu implementieren, indem der Parameter festgelegt wird rmi_over_ssl auf false in der Datei /usr/local/avamar/var/mc/server_data/mcserver.xml und starten Sie dann den Management Console Service (MCS).

Betroffene Produkte

Avamar
Artikeleigenschaften
Artikelnummer: 000466865
Artikeltyp: Solution
Zuletzt geändert: 19 Mai 2026
Version:  2
Antworten auf Ihre Fragen erhalten Sie von anderen Dell NutzerInnen
Support Services
Prüfen Sie, ob Ihr Gerät durch Support Services abgedeckt ist.