Unable to login, status: 7656
При открытии на сервере консоли Security Management появляется ошибка:
|
1 2 3 |
Unable to login, status: 7656 The revocation status of the host certificate cannot be verified using the Certifiacete Revocation List (CRL) because the CRL expired. |
Это происходит из-за ошибки обновлении сертификата сервера. Ошибка присутствует в Security Management -> Security Events -> Audit Event
|
1 |
25.07.2020 8:00:43 fd574627-b1a8-4a78-9ed2-381392fb1cdc@master-srv(192.168.1.57) MODIFY CERT Certificate renew request for host 'master-srv ' was rejected |
Дальше будут видны ошибки подключения хостов включая доступ к админке:
|
1 2 |
25.07.2020 18:28:55 <anonymous>@master-srv ACCESS CONNECTION Host '192.168.1.57' is trying to connect to host 'master-srv'. The connection is dropped, because there was a problem with the certificate validation. The revocation status of the peer host certificate cannot be verified using the Certificate Revocation List (CRL), because the CRL is not up-to-date. It is older than seven days. 25.07.2020 19:26:29 <anonymous>@192.168.1.21 ACCESS CONNECTION Host '192.168.1.21' is trying to connect to host 'master-srv'. The connection is dropped, because there was a problem with the certificate validation. VxUL oid = 486, id = 94 |
Если красивая джава админка уже не доступна, то можно посмотреть в CMD
|
1 2 3 4 5 6 7 8 |
C:\Program Files\Veritas\veritas\NetBackup\bin> nbcertcmd -getCRL Failed to fetch certificate revocation list for master-srv. 5982: The certificate revocation list is unavailable. Successfully refreshed security level for master-srv. EXIT STATUS 9305: CRL retrieval operation was partially successful. C:\Program Files\Veritas\veritas\NetBackup\bin> nbcertcmd -getcertificate -force nbcertcmd: The -getCertificate operation failed for server master-srv. EXIT STATUS 5982: The certificate revocation list is unavailable. |
Чинилка
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 |
cd /d C:\Program Files\Veritas\veritas\NetBackup\bin\ bptestnetconn -wnbwmc/security -T 5 -e 2 -H master-srv -v bpdown -e "NetBackup Web Management Console" -f –v bpup -e "NetBackup Web Management Console" -f –v cd /d C:\Program Files\veritas\NetBackup\bin\admincmd nbcertconfig –u Enter the password of the NetBackup Web Services account:******** NetBackup AT service configuration for web service user completed successfully. cd /d C:\Program Files\veritas\NetBackup\bin\ bpdown /f /v bpup /f /v nbcertcmd -getCrl Successfully refreshed certificate revocation list for master-srv. Successfully refreshed security level for master-srv. |
Что бы восстановить подключение хостов к мастер серверу на хостах выполнить:
Для Windows
|
1 2 3 |
cd /d C:\Program Files\veritas\NetBackup\bin\ bpdown /f /v bpup /f /v |
Для Linux
|
1 2 3 4 5 6 |
[root@client spec]# cd /usr/openv/netbackup/bin/ [root@client bin]# ./nbcertcmd -getCrl Successfully refreshed certificate revocation list for master-srv. Successfully refreshed security level for master-srv. [root@client bin]# /etc/init.d/vxpbx_exchanged restart Restarted Veritas Private Branch Exchange |
Используемые ссылки:
https://www.veritas.com/support/en_US/article.100045673
https://www.veritas.com/support/en_US/article.100039736
… [Trackback]
[…] Informations on that Topic: specnix.ru/netbackup/netbackup-sm-unable-to-login-status-7656/ […]
… [Trackback]
[…] There you will find 29781 additional Information on that Topic: specnix.ru/netbackup/netbackup-sm-unable-to-login-status-7656/ […]
… [Trackback]
[…] Read More here to that Topic: specnix.ru/netbackup/netbackup-sm-unable-to-login-status-7656/ […]
… [Trackback]
[…] Information to that Topic: specnix.ru/netbackup/netbackup-sm-unable-to-login-status-7656/ […]
… [Trackback]
[…] Information to that Topic: specnix.ru/netbackup/netbackup-sm-unable-to-login-status-7656/ […]
… [Trackback]
[…] Read More here on that Topic: specnix.ru/netbackup/netbackup-sm-unable-to-login-status-7656/ […]
… [Trackback]
[…] Read More here on that Topic: specnix.ru/netbackup/netbackup-sm-unable-to-login-status-7656/ […]