No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

HUAWEI CLOUD Stack 6.5.0 Alarm and Event Reference 04

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
0x210000000200 The CA Certificate For Connecting To The LDAP Server Does Not Exist

0x210000000200 The CA Certificate For Connecting To The LDAP Server Does Not Exist

Description

The CA certificate for connecting to LDAP server (IP address: [IP_Address]) does not exist.

Attribute

Alarm ID

Alarm Level

Manually Cleared

0x210000000200

Warning

No

Parameters

Name

Meaning

IP_Address

IP address of the LDAP server

Impact on the System

The connection to the LDAP server has security risks.

Possible Causes

No CA certificate for connecting to the LDAP server exists in the system or the CA certificate has expired.

Procedure

  1. Possible cause 1: No CA certificate for connecting to the LDAP server exists in the system or the CA certificate has expired.

    1. Contact the administrator to obtain the CA certificate file of the LDAP server that has not expired.
    2. Change the name of the CA certificate file of the LDAP server to LDAP_CACert.crt.
    3. Use WinSCP to copy the LDAP_CACert.crt file to the /home/hcp directory of the backup manager or backup server as user hcp.

      Please refer to Logging In to the eBackup Server for login.

      Default account: hcp. Default password: PXU9@ctuNov17!.

    4. Refer to Logging In to the eBackup Server to log in to eBackup-Manager or backup server.
    5. Run the su root command. Enter the password of user root to switch to user root.

      The default password of user root is Cloud12#$.

    6. Run the mv /home/hcp/LDAP_CACert.crt /opt/huawei-data-protection/ebackup/microservice/ebk_iam/conf command to move the certificate file to the configuration directory of the IAM microservice.
    7. Run the cd /opt/huawei-data-protection/ebackup/microservice/ebk_iam/conf command to go to the directory where the certificate is stored.
    8. Run the chmod 400 LDAP_CACert.crt command to set the permission of the LDAP_CACert.crt file to 400.
    9. Run the chown hcpprocess:hcpmgr LDAP_CACert.crt command to change the owner of the LDAP_CACert.crt file to hcpprocess:hcpmgr.
    10. Run the cd /opt/huawei-data-protection/ebackup/microservice/ebk_iam/script command to go to the directory for storing the script of the microservice.
    11. Run the source ebackup_env.sh command to import environmental variables.
    12. Run the stop command to stop the IAM microservice. Wait for about 1 minute and the IAM microservice will start automatically.
    13. Log in to the backup manager or backup server GUI using as LDAP account to trigger certificate verfication.

      Login address: https://IP address corresponding to the Workflow-Management-Float-IP field or IP address corresponding to the datamover_management_float_ip field:8088

    14. Wait for about 3 minutes and check whether the alarm is cleared on the current alarm page.
      • If yes, no further action is required.
      • If no, contact technical support engineers.

Related Information

None

Translation
Download
Updated: 2019-08-30

Document ID: EDOC1100062365

Views: 49417

Downloads: 33

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next