跳转到主内容

由于客户端证书已过期、无法添加集群、或者对AIQUM上的现有集群执行采集失败

Views:
18
Visibility:
Public
Votes:
0
Category:
active-iq-unified-manager
Specialty:
om
Last Updated:

适用场景

  • Active IQ Unified Manager (AIQUM)
  • ONTAP 9
  • AIQUM和ONTAP集群会使用相同的NTP设置进行时间同步
  • AIQUM安装于5年多前

注意:可以使用确认安装日期 Install_Upgrade.log

                    ------ postinst start Sat Feb  9 10:10:20 UTC 2019 ------

问题描述

  • 尝试将ONTAP 集群添加到AIQUM失败:
Unable to add cluster data source. This can occur if the clocks on the systems are not synchronized and the Active IQ Unified Manager HTTPS certificate start date is later than the date on the cluster, or if the cluster has reached the maximum number of EMS notification destinations.
  • ocumserver.log 在AIQUM中、使用表示HTTP 500 Failed to add the datasource

INFO  [admin] [default task-22] [c.n.d.o.o.s.z.OntapSecurityCertificateZapiService] Installing self-signed client certicate on ONTAP
..
ERROR [admin] [default task-22] [c.n.d.c.h.DatasourcesHttpClientManager] Failed to add the datasource
com.onaro.commons.exception.ConfigurationException: Server returned HTTP status 500.HTTP error message :{"timestamp":"<TIMESTAMP>","status":500,"error":"Internal Server Error","path":"/acquisition-api/server/datasource"}

   at com.netapp.mega//com.onaro.commons.framework.mgmt.HTTPClientManager.logHTTPErrorStatusWithMessage(HTTPClientManager.java:120)
   at deployment.dfm-app.war//com.netapp.dfm.collector.httpclient.DatasourcesHttpClientManager.addDS(DatasourcesHttpClientManager.java:243)
   at deployment.dfm-app.war//com.netapp.dfm.collector.OcieAcquisitionFacade.addDataSource(OcieAcquisitionFacade.java:287)
   at deployment.dfm-app.war//com.netapp.dfm.collector.AbstractDataSourceManager.addDataSource(AbstractDataSourceManager.java:53)
   at deployment.dfm-app.war//com.netapp.dfm.collector.AbstractDataSourceManager$$FastClassBySpringCGLIB$$babcc85.invoke(<generated>)
..

  • /etc/log/mlog/audit.log 在ONTAP集群中、表示证书安装因过期而失败
[kern_audit:info:3167] 8503e80000dac04e :: clustername:ontapi :: xx.xxx.xxx.xx:52938 :: clustername:user :: security-certificate-install :: Error: The certificate has expired.
  • server_acq.log 在AIQUM中 、表示证书已过期

ERROR [default task-6260] c.n.s.a.s.r.s.i.AcquisitionFacadeSessionServiceImpl (AcquisitionFacadeSessionServiceImpl.java:843) - Fail to add data source for acquisitionUnitName: local, dataSourceName: <cluster name>, vendor:NetApp OCI Essentials, model: NetApp OCI Essentials, datasourceTypeId: 91, manual: 1, isActive: false, attrs: -- listing properties --
<truncated>
: com.netapp.oci.netapp.client.interfaces.data.EmsManagerException: The certificate has expired. (errno=61105) (errno=
..
ERROR [default task-340653] c.o.s.a.s.AcquisitionFacadeUtil (AcquisitionFacadeUtil.java:202) - failed to register EMS: : com.netapp.oci.netapp.client.interfaces.data.EmsManagerException: The certificate has expired. (errno=61105)

 

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.