Avamar：更新 Data Domain 失敗，並出現 SSH 用戶端未驗證錯誤

Summary: 本文說明在 Avamar 伺服器上編輯 Data Domain 會導致「更新 Data Domain 失敗」錯誤的問題，因為「SSH 用戶端未通過驗證」。 將新的 Data Domain 新增至 Avamar 時，失敗訊息為：「無法將 SNMP 社群字串新增至 Data Domain 系統。」

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

使用 Avamar 使用者介面 （AUI） 編輯 Data Domain 時失敗並顯示錯誤 Update DataDomain failed。

在 AUI 中編輯 Data Domain，便會顯示錯誤訊息。

可使用 /usr/local/avamar/var/mc/server_log/mc-rest-api.log 顯示： 
2024-12-18 15:01:54.077  WARN 8841 --- [AsyncTask-1] com.avamar.mc.api.task.AsyncTask: Unexpected error occurred in async task
com.avamar.mc.api.core.exception.RestClientException: Update DataDomain failed.
        at com.avamar.mc.api.datadomain.service.DataDomainServiceImpl.updateDataDomain(DataDomainServiceImpl.java:192)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:344)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:198)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)
        at org.springframework.aop.interceptor.AsyncExecutionInterceptor.lambda$invoke$0(AsyncExecutionInterceptor.java:115)
        at org.springframework.aop.interceptor.AsyncExecutionAspectSupport.lambda$doSubmit$3(AsyncExecutionAspectSupport.java:276)
        at java.util.concurrent.CompletableFuture$AsyncSupply.run(CompletableFuture.java:1604)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at java.lang.Thread.run(Thread.java:750)

2024-12-18 15:01:54.079  WARN 8841 --- [AsyncTask-1] com.avamar.mc.api.task.AsyncTask : Task.Error(code=31300, exception=com.avamar.mc.api.core.exception.RestClientException: Update DataDomain failed., details=null, event=Event(id=3984576, time=1734555714069, code=31300, category=APPLICATION, type=WARNING, severity=PROCESS, summary=Ssh client is not authenticated, domain=/, hasData=No, swSource=MCS:VM, source=EventSource(nodeId=av-server, programName=com.avamar.mc.datadomain.DataDomainService, sourceHardwareId=CKM01234567890_100-580-846-00-FFF, hardwareId=CKM01234567890_100-580-846-00-FFF, ddrName=dd-srv.lab.com, ddrId=8E72DC56A503F3865A0A418BFEF9414E3A4D7981, gsanVersion=19.10.0-135), data=EventData(attributes={dd=dd-srv.lab.com, ipv6Hostname=, user=ddboost, requestor={product=INTERNAL, role=Administrator, domain=/, host=192.168.1.110, user=MCUser}, ipv4Hostname=dd-srv.lab.com}), dataList=null, principal=UserPrincipal(id=69d23d7e-567e-4f98-ae2e-17367ec68f80, name=MCUser, domain=/, host=/192.168.1.110, product=INTERNAL, productVersion=null, role=ROOT), detail=null))
可使用 /usr/local/avamar/var/mc/server_log/mcserver.log.0 顯示以下異常： 
Unsupported type: OPENSSH PRIVATE KEY

10/24-13:53:03.00526 [RMI TCP Connection(2239)-192.168.1.110#50125] com.avamar.mc.datadomain.DataDomainService._updateDdr
FINE: Validate key based ssh connection when updating ddr
10/24-13:53:03.00526 [RMI TCP Connection(2239)-192.168.1.110#50125] com.avamar.asn.service.ServiceContainerImpl.getService
FINE: Service get initiated to service: com.avamar.mc.prefs.MCSPreferencesService
10/24-13:53:03.00526 [RMI TCP Connection(2239)-192.168.1.110#50125] com.avamar.asn.service.ServiceContainerImpl.getService
FINE: Service get completed for service: com.avamar.mc.prefs.MCSPreferencesService
10/24-13:53:03.00526 [RMI TCP Connection(2239)-192.168.1.110#50125] com.avamar.mc.datadomain.DdrSshUtils.loadJ2sshLicense
INFO: Successfully load j2ssh license
10/24-13:53:03.00601 [RMI TCP Connection(2239)-192.168.1.110#50125] com.avamar.mc.util.MCException.logException
WARNING: com.sshtools.publickey.InvalidPassphraseException: Unsupported type: OPENSSH PRIVATE KEY
  at com.sshtools.publickey.OpenSSHPrivateKeyFile.toKeyPair(OpenSSHPrivateKeyFile.java:79)
  at com.avamar.mc.datadomain.DdrSsh.createSshClient(DdrSsh.java:140)
  at com.avamar.mc.datadomain.DdrSsh.createSshClient(DdrSsh.java:189)
  at com.avamar.mc.datadomain.DdrSsh.validateCredentials(DdrSsh.java:283)
  at com.avamar.mc.datadomain.DataDomainService.validateKeyBasedSshConnection(DataDomainService.java:3563)
  at com.avamar.mc.datadomain.DataDomainService._updateDdr(DataDomainService.java:1179)
  at com.avamar.mc.datadomain.DataDomainService.updateDdr(DataDomainService.java:1036)
  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
  at java.lang.reflect.Method.invoke(Method.java:498)

Cause

最新的作業系統安全性匯總包含新版本的 OpenSSH。

先前的作業系統安全性匯總版本顯示： OpenSSH_7.2p2： 
admin@av-serveradmin@av-server:~/>: awk -F'"' '/<package-survey/ {print $2}' /usr/local/avamar/var/package-survey-*post_errata* |sort|tail -1
2023-R3-v4
admin@av-server:~/>: ssh -V
OpenSSH_7.2p2, OpenSSL 1.0.2p-fips  14 Aug 2018 (OwB:1.5.9.0, BSAFE Micro Edition Suite:5.0.1.0)
admin@av-server:~/>: 
最近的作業系統安全性匯總版本顯示 OpenSSH_8.4p1： 
admin@av-server:~/>: awk -F'"' '/<package-survey/ {print $2}' /usr/local/avamar/var/package-survey-*post_errata* |sort|tail -1
2024-R3-v4
admin@av-server:~/>:
admin@av-server:~/>: ssh -V
OpenSSH_8.4p1, OpenSSL 1.1.1d  10 Sep 2019
admin@av-server:~/>:

管理主控台伺服器 （MCS） 不支援以 OPENSSH 作為標頭的私密金鑰，僅支援 RSA。

Resolution

此問題需要編輯 mcddrcreate_sshkey 檔案，並重新產生 ddr_key。

請聯絡 Dell 支援，並參考本文 ID。Dell 支援部門必須執行編輯。

Affected Products

Avamar, Avamar Server
Article Properties
Article Number: 000265265
Article Type: Solution
Last Modified: 02 Dec 2025
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.