RecoverPoint for VMs: Configurazione del server plug-in non riuscita, non ha aggiunto le credenziali per l'amministratore dell'utente al server plug-in
Summary: La configurazione del server plug-in RecoverPoint dall'interfaccia WDM riceve l'errore "Configure plug-in server failed. Impossibile aggiungere le credenziali per l'amministratore dell'utente al server plug-in." ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Symptoms
Il completamento della configurazione del server plug-in non riesce e viene generato il seguente errore:
I log ClusterLogic (home/kos/RPServers/RPServers_logs/clusterLogic) mostrano i seguenti dettagli:
Configure plug-in server failed. Failed to add credentials for user admin to plug-in server
2021/02/02 13:39:00.281 [pool-4-thread-3384] (Task.java:93) DEBUG - GetClusterVCsCredentialsTask: Task successful: Retrieving the credentials of all registered vCenter servers on the cluster. 2021/02/02 13:39:00.281 [pool-4-thread-3384] (Task.java:111) DEBUG - GetClusterVCsCredentialsTask: task: Retrieving the credentials of all registered vCenter servers on the cluster.old status is: RUNNING, setting status to SUCCESS. 2021/02/02 13:39:00.281 [pool-4-thread-3384] (BaseRpaCall.java:36) DEBUG - Starting GetRpcsIpsFromClusterCall 2021/02/02 13:39:00.281 [pool-4-thread-3384] (BaseInstallationServerAdapter.java:117) INFO - validateConnection - validating connection to: xxx.xxx.xxx.xxx 2021/02/02 13:39:00.312 [pool-4-thread-3388] (BaseInstallationServerAdapter.java:214) DEBUG - Getting transaction 6321 result with timeout in secs: 350 2021/02/02 13:39:00.313 [pool-4-thread-3384] (BaseInstallationServerAdapter.java:214) DEBUG - Getting transaction 2287 result with timeout in secs: 350 2021/02/02 13:39:00.346 [pool-4-thread-3384] (GeneralUtils.java:233) DEBUG - Sleeping for: waiting for transaction 2287 to complete, time to sleep in millis is: 1000 2021/02/02 13:39:00.347 [pool-4-thread-3388] (GeneralUtils.java:233) DEBUG - Sleeping for: waiting for transaction 6321 to complete, time to sleep in millis is: 1000 2021/02/02 13:39:00.486 [pool-4-thread-3393] (BaseInstallationServerAdapter.java:214) DEBUG - Getting transaction 1953 result with timeout in secs: 350 2021/02/02 13:39:00.515 [pool-4-thread-3393] (BaseInstallationServerAdapter.java:227) DEBUG - transaction: 1953 ended, calling get method for result 2021/02/02 13:39:00.533 [pool-4-thread-3386] (BaseInstallationServerAdapter.java:100) ERROR - Failed to connect to vRPA with IP xxx.xxx.xxx.xxx. com.sun.xml.ws.client.ClientTransportException: The server sent HTTP status code 401: null 2021/02/02 13:44:11.340 [pool-4-thread-3396] (Task.java:111) DEBUG - GetVcsStatusTask: task: Obtaining vCenter status for vRPA 1 at cluster vRPA_CLUSTER.old status is: RUNNING, setting status to SUCCESS. 2021/02/02 13:44:11.341 [https-openssl-nio-443-exec-10] (GetClusterStatusTask.java:50) DEBUG - GetClusterStatusTask FINISHED, returning: ClusterStatus(clusterName=vRPA_CLUSTER, clusterIps=[xxx.xxx.xxx.xxx], extendedRpasStatuses=[ExtendedRpaStatus(rpaIp=xxx.xxx.xxx.xxx, rpaNumber=2, rpaVersion=unknown, rpaStatus=RpaStatus(message=Message(message=Failed to retrieve vRPA 2 status. Verify connectivity and credentials and try again., messageType=ERROR), attached=Unknown)), ExtendedRpaStatus(rpaIp=xxx.xxx.xxx.xxx, rpaNumber=1, rpaVersion=5.3.SP1(m.161), rpaStatus=RpaStatus(message=Message(message=vRPA 1 is OK., messageType=INFO), attached=Attached))], vcsStatuses=[VcStatus(vcIp=xxx.xxx.xxx.xxx, vcName=vCENTER_NAME, vcConnectivity=true, vwcPluginVersion=5.3.1.0, rpcIp=172.19.136.149, flexExtensionSupported=true)], currentCluster=false) 2021/02/04 15:47:52.723 [https-openssl-nio-443-exec-9] (RESTClient.java:245) ERROR - performCall - got error statusCode: '405', from call to: 'https://xxx.xxx.xxx.xxx/api/v1/rp-clusters/users/admin' 2021/02/04 15:47:52.724 [https-openssl-nio-443-exec-9] (AddClusterCredentialsToRPCenterRESTTask.java:61) ERROR - Got an error from plugin server: Method Not Allowed 2021/02/04 15:47:52.724 [https-openssl-nio-443-exec-9] (Task.java:116) DEBUG - AddClusterCredentialsToRPCenterRESTTask: task: Adding vRPA Cluster credentials to plugin server with IP xxx.xxx.xxx.xxx.old status is: RUNNING, setting status to ERROR. 2021/02/04 15:47:52.726 [https-openssl-nio-443-exec-9] (Task.java:98) ERROR - AddClusterCredentialsToRPCenterRESTTask :Task failed: Adding vRPA Cluster credentials to plugin server with IP xxx.xxx.xxx.xxx. com.emc.recoverpoint.utils.javainfra.status.tasks.exception.TaskFailedException: Failed to add credentials for user admin to plugin server: xxx.xxx.xxx.xxx. 2021/02/04 15:47:52.727 [https-openssl-nio-443-exec-9] (Task.java:116) DEBUG - RegisterVCAndAddRpClusterCredentialsToRPCenterTask: task: Adding vCenter and vRPA cluster credentials to plugin server.old status is: SUCCESS, setting status to ERROR. 2021/02/04 15:47:52.728 [https-openssl-nio-443-exec-9] (Task.java:98) ERROR - RegisterVCAndAddRpClusterCredentialsToRPCenterTask :Task failed: Adding vCenter and vRPA cluster credentials to plugin server. com.emc.recoverpoint.utils.javainfra.status.tasks.exception.TaskFailedException: Failed to add credentials for user admin to plugin server: xxx.xxx.xxx.xxx. Caused by: com.emc.recoverpoint.utils.javainfra.status.tasks.exception.TaskFailedException: Failed to add credentials for user admin to plugin server: xxx.xxx.xxx.xxx. at com.emc.recoverpoint.deployment.task.AddClusterCredentialsToRPCenterRESTTask.handleResponse(AddClusterCredentialsToRPCenterRESTTask.java:62) at com.emc.recoverpoint.deployment.task.AddClusterCredentialsToRPCenterRESTTask.perform(AddClusterCredentialsToRPCenterRESTTask.java:53) at com.emc.recoverpoint.deployment.task.AddClusterCredentialsToRPCenterRESTTask.perform(AddClusterCredentialsToRPCenterRESTTask.java:16) at com.emc.recoverpoint.utils.javainfra.status.tasks.Task.executeSync(Task.java:91) at com.emc.recoverpoint.utils.javainfra.status.tasks.SerialTask.perform(SerialTask.java:32) ... 72 more 2021/02/04 15:47:52.728 [https-openssl-nio-443-exec-9] (ConfigurePluginServerRESTCommand.java:34) ERROR - com.emc.recoverpoint.utils.javainfra.status.tasks.exception.TaskFailedException: Failed to add credentials for user admin to plugin server: xxx.xxx.xxx.xxx.
Un altro sintomo mostra i seguenti errori nei registri ClusterLogic:
"You must confirm the root CA certificate for vCenter Server 'xx.xx.xx.xx:443' before you can register it." "SSL Connection failed. Add the following vCenter CA certificate to RPCenter and try again."
Nei registri del server plug-in disponibili in *_rpc_authentication.log, dovrebbero essere visualizzati i seguenti errori:
Feb 02 23:59:58 vRPA_CLUSTER run.sh[661]: authentication [ERROR] (vcs_monitor.py:79) - Error getting custom fields for VC d70c2118-***-4da2-ae82-4a2c6b925449 ((500) Feb 02 23:59:58 vRPA_CLUSTER run.sh[661]: Reason: INTERNAL SERVER ERROR Feb 02 23:59:58 vRPA_CLUSTER run.sh[661]: HTTP response headers: HTTPHeaderDict({'Date': 'Tue, 02 Feb 2021 22:59:58 GMT', 'Content-Type': 'application/json', 'Content-Length': '104', 'Connection': 'keep-alive'}) Feb 02 23:59:58 vRPA_CLUSTER run.sh[661]: HTTP response body: {"error":{"code":"994000705","message":"Failed connecting to VC d70c2118-***-4da2-ae82-4a2c6b925449"}} Feb 02 23:59:58 vRPA_CLUSTER run.sh[661]: ). Feb 02 23:59:58 vRPA_CLUSTER run.sh[661]: authentication [ERROR] (vcs_monitor.py:66) - Error connecting to VC Inventory service
Cause
Il vCenter Server contiene due certificati diversi. Il primo certificato dai vRPA che lo convalida, inviandolo al server plug-in. Il plug-in server tenta quindi di contattare vCenter per verificare la corrispondenza dei certificati. Quando viene effettuata questa chiamata, viene eseguito il recupero dell'altro certificato, che ha una firma diversa rispetto alla prima originariamente inviata ai vRPA.
Resolution
Soluzione:
Aggiungere i certificati vCenter all'archivio attendibilità del plug-in server seguendo questa procedura:
Figura 1. Esempio di elenco dei certificati
Aggiungere i certificati vCenter all'archivio attendibilità del plug-in server seguendo questa procedura:
- Scaricare i certificati dal vCenter Server utilizzando il seguente URL:
http://vCenterIP/certs/download.zip
NOTA: Potrebbe essere necessario provare vari browser per scaricare il file .zip a seconda delle impostazioni di sicurezza.
- Estrarre il file .zip scaricato.
- Passare alla directory \certs\lin in questo file e rinominare tutti i certificati inclusi aggiungendo .pem alla fine del nome del file.
Di seguito è riportato un esempio dei certificati elencati:
Figura 1. Esempio di elenco dei certificati
- Copiare tutti i certificati nella directory /etc/pki/trust/anchors del server plug-in. Per accedere al server plug-in tramite SSH, accedere al server plug-in utilizzando la console con le credenziali root e disabilitare il firewall utilizzando il seguente comando:
/sbin/SuSEfirewall2 off
- Eseguire il seguente comando all'interno del server plug-in per aggiornare l'elenco dei certificati attendibili.
update-ca-certificates
- Eseguire nuovamente la procedura guidata di configurazione del plug-in da WDM.
- Dopo aver validato il corretto funzionamento di tutto, abilitare il firewall sul server plug-in utilizzando il seguente comando:
/sbin/SuSEfirewall2 on
Article Properties
Article Number: 000183108
Article Type: Solution
Last Modified: 27 Sep 2023
Version: 7
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.