VPLEX: udførelse af sikkerhedskonfiguration-certifikatkommando mislykkes med fejlen "Is a directory"

Ikonet security configure-certificate Kommandoudførelse mislykkes med følgende fejl:

VPlexcli:/> security configure-certificates
 security configure-certificates:  Evaluation of <<security configure-certificates>> failed.
 cause:                            Command execution failed.
 cause:                            21
 cause:                            Is a directory

Fejl i klientloggen:

2018-08-08 19:37:37,770 INFO  [Thread-57] service_localhost_T20810: security configure-certificates
2018-08-08 19:37:37,771 INFO  [Thread-57] audit: security configure-certificates
2018-08-08 19:37:37,892 ERROR [DefaultCommandHandler-Thread-3] security configure-certificates: Failed to configure certificates: Validation error: Certificates already present in the system.                    Delete old certificates before configuring the system with                    new certificates.
2018-08-08 19:37:37,967 ERROR [DefaultCommandHandler-Thread-3] ConfigureCertificatesCmd: 21
Traceback (most recent call last):
  File "/opt/emc/VPlex/jython2.7b4/LibExt/yyapi.py", line 322, in _execute
    result = self._execute_(shell,context,args)
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 148, in _execute_
    cfgCert.restore()
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 241, in restore
    self.cleanup()
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 656, in cleanup
    self._deleteFilesInDir(GlobalVals.DEFAULT_CACERT_LOCATION)
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 675, in _deleteFilesInDir
    self._removeFile(filePath)
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 652, in _removeFile
    os.remove(file)
OSError: [Errno 21] Is a directory: '/etc/ipsec.d/cacerts/save'

En manuel oprettelse af en mappe med navnet save der blev oprettet under /etc/ipsec.d/cacerts/ forstyrrede den kontrol, der kræves i forbindelse med fornyelse af sikkerhedscertifikater.

Løsning:

1. Log på VPLEX-administrationsserveren ved hjælp af service Kontooplysninger:

login as: service
Using keyboard-interactive authentication.
Password:
service@vplex01:~>

2. Gå til /etc/ipsec.d/cacerts/ sti, og se efter en mappe kaldet save:

service@vplex01:~> cd /etc/ipsec.d/cacerts/
service@vplex01:/etc/ipsec.d/cacerts> ll save

3. Slet filen med navnet save:

service@vplex01:/etc/ipsec.d/cacerts> rm -rf save

4. Slet de gamle certifikater, før du kører security configure-certificate kommando som følger:

service@vplex01:~> rm /etc/ipsec.d/*/*pem* 

5. Gå til VPLEXCLI, og kør security configure-certificates Kommando igen og kontroller, at det kørte med succes:

VPlexcli:/> security configure-certificates

6. Hvis kommandoen stadig mislykkes, skal du kontakte Dells kundesupport og se denne artikel.