RecoverPoint for VMs：設定外掛程式伺服器失敗，未新增使用者管理員的認證至外掛程式伺服器

Summary: 從 WDM 介面設定 RecoverPoint 外掛程式伺服器時，收到錯誤「Configure plug-in server failed.無法將使用者管理員的認證新增至附掛程式伺服器。」

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

設定附掛程式伺服器無法完成，並產生下列錯誤： 
Configure plug-in server failed. Failed to add credentials for user admin to plug-in server
ClusterLogic 記錄 （home/kos/RPServers/RPServers_logs/clusterLogic） 顯示下列詳細資料： 
2021/02/02 13:39:00.281 [pool-4-thread-3384] (Task.java:93) DEBUG - GetClusterVCsCredentialsTask: Task successful: Retrieving the credentials of all registered vCenter servers on the cluster.
2021/02/02 13:39:00.281 [pool-4-thread-3384] (Task.java:111) DEBUG - GetClusterVCsCredentialsTask: task: Retrieving the credentials of all registered vCenter servers on the cluster.old status is: RUNNING, setting status to SUCCESS.
2021/02/02 13:39:00.281 [pool-4-thread-3384] (BaseRpaCall.java:36) DEBUG - Starting GetRpcsIpsFromClusterCall
2021/02/02 13:39:00.281 [pool-4-thread-3384] (BaseInstallationServerAdapter.java:117) INFO - validateConnection - validating connection to: xxx.xxx.xxx.xxx
2021/02/02 13:39:00.312 [pool-4-thread-3388] (BaseInstallationServerAdapter.java:214) DEBUG - Getting transaction 6321 result with timeout in secs: 350
2021/02/02 13:39:00.313 [pool-4-thread-3384] (BaseInstallationServerAdapter.java:214) DEBUG - Getting transaction 2287 result with timeout in secs: 350
2021/02/02 13:39:00.346 [pool-4-thread-3384] (GeneralUtils.java:233) DEBUG - Sleeping for: waiting for transaction 2287 to complete, time to sleep in millis is: 1000
2021/02/02 13:39:00.347 [pool-4-thread-3388] (GeneralUtils.java:233) DEBUG - Sleeping for: waiting for transaction 6321 to complete, time to sleep in millis is: 1000
2021/02/02 13:39:00.486 [pool-4-thread-3393] (BaseInstallationServerAdapter.java:214) DEBUG - Getting transaction 1953 result with timeout in secs: 350
2021/02/02 13:39:00.515 [pool-4-thread-3393] (BaseInstallationServerAdapter.java:227) DEBUG - transaction: 1953 ended, calling get method for result
2021/02/02 13:39:00.533 [pool-4-thread-3386] (BaseInstallationServerAdapter.java:100) ERROR - Failed to connect to vRPA with IP xxx.xxx.xxx.xxx.
com.sun.xml.ws.client.ClientTransportException: The server sent HTTP status code 401: null

2021/02/02 13:44:11.340 [pool-4-thread-3396] (Task.java:111) DEBUG - GetVcsStatusTask: task: Obtaining vCenter status for vRPA 1 at cluster vRPA_CLUSTER.old status is: RUNNING, setting status to SUCCESS.
2021/02/02 13:44:11.341 [https-openssl-nio-443-exec-10] (GetClusterStatusTask.java:50) DEBUG - GetClusterStatusTask FINISHED, returning: ClusterStatus(clusterName=vRPA_CLUSTER, clusterIps=[xxx.xxx.xxx.xxx],
extendedRpasStatuses=[ExtendedRpaStatus(rpaIp=xxx.xxx.xxx.xxx, rpaNumber=2, rpaVersion=unknown, rpaStatus=RpaStatus(message=Message(message=Failed to retrieve vRPA 2 status. Verify connectivity and credentials and try again., messageType=ERROR), attached=Unknown)),
ExtendedRpaStatus(rpaIp=xxx.xxx.xxx.xxx, rpaNumber=1, rpaVersion=5.3.SP1(m.161), rpaStatus=RpaStatus(message=Message(message=vRPA 1 is OK., messageType=INFO), attached=Attached))], vcsStatuses=[VcStatus(vcIp=xxx.xxx.xxx.xxx, vcName=vCENTER_NAME, vcConnectivity=true,
vwcPluginVersion=5.3.1.0, rpcIp=172.19.136.149, flexExtensionSupported=true)], currentCluster=false)

2021/02/04 15:47:52.723 [https-openssl-nio-443-exec-9] (RESTClient.java:245) ERROR - performCall - got error statusCode: '405', from call to: 'https://xxx.xxx.xxx.xxx/api/v1/rp-clusters/users/admin'
2021/02/04 15:47:52.724 [https-openssl-nio-443-exec-9] (AddClusterCredentialsToRPCenterRESTTask.java:61) ERROR - Got an error from plugin server: Method Not Allowed
2021/02/04 15:47:52.724 [https-openssl-nio-443-exec-9] (Task.java:116) DEBUG - AddClusterCredentialsToRPCenterRESTTask: task: Adding vRPA Cluster credentials to plugin server with IP xxx.xxx.xxx.xxx.old status is: RUNNING, setting status to ERROR.
2021/02/04 15:47:52.726 [https-openssl-nio-443-exec-9] (Task.java:98) ERROR - AddClusterCredentialsToRPCenterRESTTask :Task failed: Adding vRPA Cluster credentials to plugin server with IP xxx.xxx.xxx.xxx.
com.emc.recoverpoint.utils.javainfra.status.tasks.exception.TaskFailedException: Failed to add credentials for user admin to plugin server: xxx.xxx.xxx.xxx.

2021/02/04 15:47:52.727 [https-openssl-nio-443-exec-9] (Task.java:116) DEBUG - RegisterVCAndAddRpClusterCredentialsToRPCenterTask: task: Adding vCenter and vRPA cluster credentials to plugin server.old status is: SUCCESS, setting status to ERROR.
2021/02/04 15:47:52.728 [https-openssl-nio-443-exec-9] (Task.java:98) ERROR - RegisterVCAndAddRpClusterCredentialsToRPCenterTask :Task failed: Adding vCenter and vRPA cluster credentials to plugin server.
com.emc.recoverpoint.utils.javainfra.status.tasks.exception.TaskFailedException: Failed to add credentials for user admin to plugin server: xxx.xxx.xxx.xxx.

Caused by: com.emc.recoverpoint.utils.javainfra.status.tasks.exception.TaskFailedException: Failed to add credentials for user admin to plugin server: xxx.xxx.xxx.xxx.
at com.emc.recoverpoint.deployment.task.AddClusterCredentialsToRPCenterRESTTask.handleResponse(AddClusterCredentialsToRPCenterRESTTask.java:62)
at com.emc.recoverpoint.deployment.task.AddClusterCredentialsToRPCenterRESTTask.perform(AddClusterCredentialsToRPCenterRESTTask.java:53)
at com.emc.recoverpoint.deployment.task.AddClusterCredentialsToRPCenterRESTTask.perform(AddClusterCredentialsToRPCenterRESTTask.java:16)
at com.emc.recoverpoint.utils.javainfra.status.tasks.Task.executeSync(Task.java:91)
at com.emc.recoverpoint.utils.javainfra.status.tasks.SerialTask.perform(SerialTask.java:32)
... 72 more
2021/02/04 15:47:52.728 [https-openssl-nio-443-exec-9] (ConfigurePluginServerRESTCommand.java:34) ERROR - com.emc.recoverpoint.utils.javainfra.status.tasks.exception.TaskFailedException: Failed to add credentials for user admin to plugin server: xxx.xxx.xxx.xxx.
另一個征狀會在 ClusterLogic 記錄中顯示下列錯誤： 
"You must confirm the root CA certificate for vCenter Server 'xx.xx.xx.xx:443' before you can register it."
"SSL Connection failed. Add the following vCenter CA certificate to RPCenter and try again."
在 *_rpc_authentication.log下的附掛程式伺服器記錄中，您應該會看到下列錯誤： 
Feb 02 23:59:58 vRPA_CLUSTER run.sh[661]: authentication [ERROR] (vcs_monitor.py:79) - Error getting custom fields for VC d70c2118-***-4da2-ae82-4a2c6b925449 ((500)
Feb 02 23:59:58 vRPA_CLUSTER run.sh[661]: Reason: INTERNAL SERVER ERROR
Feb 02 23:59:58 vRPA_CLUSTER run.sh[661]: HTTP response headers: HTTPHeaderDict({'Date': 'Tue, 02 Feb 2021 22:59:58 GMT', 'Content-Type': 'application/json', 'Content-Length': '104', 'Connection': 'keep-alive'})
Feb 02 23:59:58 vRPA_CLUSTER run.sh[661]: HTTP response body: {"error":{"code":"994000705","message":"Failed connecting to VC d70c2118-***-4da2-ae82-4a2c6b925449"}}
Feb 02 23:59:58 vRPA_CLUSTER run.sh[661]: ).
Feb 02 23:59:58 vRPA_CLUSTER run.sh[661]: authentication [ERROR] (vcs_monitor.py:66) - Error connecting to VC Inventory service

Cause

vCenter 伺服器包含兩種不同的憑證。由 vRPA 驗證的第一個憑證，將其傳送至外掛程式伺服器。接著外掛程式伺服器會嘗試聯絡 vCenter，以驗證憑證是否相符。通話時，系統會擷取另一個憑證，其簽章與最初傳送到 vRPA 的簽名不同。

Resolution

解決 方案：
請遵循此程式，將 vCenter 憑證新增至附掛程式伺服器的可信賴存放區：
  1. 使用下列 URL 從 vCenter 伺服器下載憑證： 
    http://vCenterIP/certs/download.zip  
注意：您可能需要嘗試各種瀏覽器，以便根據您的安全性設定下載 .zip 檔案。 
  1. 解壓縮下載的 .zip 檔案。
  2. 前往此檔案中的 \certs\lin 目錄，並在檔案名結尾新增 .pem ，以重新命名所有包含的憑證。
以下為所列憑證的範例：
       憑證清單範例
圖 1：憑證清單範例
  1. 將所有憑證複製到外掛程式伺服器的 /etc/pki/trust/anchors 目錄。若要使用 SSH 存取附掛程式伺服器，請使用具有根認證的主控台登入附掛程式伺服器，並使用下列命令停用防火牆：
/sbin/SuSEfirewall2 off 
  1. 在外掛程式伺服器內執行下列命令，以更新受信任憑證清單。
update-ca-certificates 
  1. 從 WDM 重新執行設定外掛程式精靈。
  2. 驗證一切正常運作後，請使用下列命令，在附掛程式伺服器上啟用防火牆：
/sbin/SuSEfirewall2 on
Article Properties
Article Number: 000183108
Article Type: Solution
Last Modified: 27 Sept 2023
Version:  7
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.