Situation:
Linux CS resolves with short names but GUI clients uses FQDN.
Problem:
In case of authentification issues GUI client --> CS like the following
-->>
[ 99] 2016-05-09 13:36:39.073 ("/lib/idbclient/restclient.c $Rev: 50456 $ $Date:: 2015-10-21 04:39:18":740)
[ 99] <<=== (0) } /* restAuthToCell */
[ 99] RetVal: (int) 2
[ 99]
[140] Omniback::AuthenticateToServer: Authentication with default user: 2
[ 10] Omniback::AuthenticateToServer: ERROR in server
[ 5] 2016-05-09 13:36:39.073 ("/NewGUI/Core/omniback.cpp $Rev: 50319 $ $Date:: 2015-10-14 11:27:11":675)
[ 5] [MARK 3] in Omniback::AuthenticateToServer:675
Code: 568
Info:
[ 5] 2016-05-09 13:36:39.073 ("/NewGUI/Core/omniback.cpp $Rev: 50319 $ $Date:: 2015-10-14 11:27:11":405)
[ 5] [CLEAR 3]
Marked: ("/NewGUI/Core/omniback.cpp $Rev: 50319 $ $Date:: 2015-10-14 11:27:11":675)
Code is:568
[ 99] | Omniback::Omniback::AuthenticateToServer: Authentication fails.
it might be necessary to create certificates for short and FQDN.
Regarding certificates:
Bottom line. In case that:
- Only one network is available on CM
- Both CM and client are in the same domain
- CM hostname is resolved to the same ip on both client and CM
- CM ip is resolved to the same FQDN on both client and CM
Than connection should work from beginning.
Any difference in the IP/FQDN needs to be added to certificate generation.
A working certificate for the described environment was created by the following command:
perl /opt/omni/sbin/omnigencert.pl -server_id <cellserver> -user_id hpdp -store_password <store-pw> -server_san dns:<cellserver>,dns:<cellserver>.domain
General procedure is this:
How to change the certificate
-->
- cd to /opt/omni/sbin directory
- regenerate the certificate using the following command:
perl /opt/omni/sbin/omnigencert.pl -server_id <cellserver> -user_id hpdp -store_password <store-pw> -server_san dns:<cellserver>,dns:<cellserver>.domain
(If you need help to identify the store_password please contact the support.)
- Also don’t forget to delete old certificate on GUI client (c:\Users\CURRENT_USER\AppData\Local\Hewlett-Packard\Data Protector\ca\CS_NAME)
- restart services
omnisv stop
omnisv start