Symptoms
I DPC-grensesnittet klikker du på Register SSO for a Data Domain (DD)-server.
Når du har klikket på Register SSO (Registrer SSO), kontrollerer du overvåkingsfanen og ser at registreringen mislyktes. Utvid feilen, og du ser følgende feil:
Kontroller elg.log-filen du finner følgende feil:
2020-06-29 13:49:36,424 WARN OkHttp https://
-
:3009/... c.e.c.t.TaskServiceImpl Reregistration of SSO client for
-
failed java.util.concurrent.CompletionException: com.emc.clp.spi.ForbiddenException: Administrator credentials required for the SSO registration at java.util.concurrent.CompletableFuture.encodeThrowable(CompletableFuture.java:273) at java.util.concurrent.CompletableFuture.completeThrowable(CompletableFuture.java:280) at java.util.concurrent.CompletableFuture.uniHandle(CompletableFuture.java:838) at java.util.concurrent.CompletableFuture$UniHandle.tryFire(CompletableFuture.java:811) at java.util.concurrent.CompletableFuture.postComplete(CompletableFuture.java:488) at java.util.concurrent.CompletableFuture.completeExceptionally(CompletableFuture.java:1990) at com.emc.edp.http.OkHttpHttpClient.fail(OkHttpHttpClient.java:677) at com.emc.edp.http.OkHttpHttpClient.access$400(OkHttpHttpClient.java:34) at com.emc.edp.http.OkHttpHttpClient$3.onResponse(OkHttpHttpClient.java:555) at okhttp3.RealCall$AsyncCall.execute(RealCall.java:174) at okhttp3.internal.NamedRunnable.run(NamedRunnable.java:32) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:748) Caused by: com.emc.clp.spi.ForbiddenException: Administrator credentials required for the SSO registration at com.emc.clp.plugin.datadomain.DataDomainElementalHandler.lambda$handleClientRegistration$3(DataDomainElementalHandler.java:281) at com.emc.dpc.common.util.CompletableFutureUtils.lambda$convertException$0(CompletableFutureUtils.java:110) at java.util.concurrent.CompletableFuture.uniHandle(CompletableFuture.java:836) ... 11 common frames omitted Caused by: com.emc.edp.http.HttpException: [500] Internal Server Error at com.emc.edp.http.OkHttpHttpClient.createHttpException(OkHttpHttpClient.java:670) at com.emc.clp.plugin.datadomain.http.DataDomainHttpClient.createHttpException(DataDomainHttpClient.java:314) ... 6 common frames omitted Caused by: com.emc.edp.http.OkHttpHttpClient$OriginalRequest: POST https://
-
:3009/rest/v1.0/trust at com.emc.edp.http.OkHttpHttpClient.startRequest(OkHttpHttpClient.java:502) at com.emc.edp.http.OkHttpHttpClient.startRequest(OkHttpHttpClient.java:474) at com.emc.clp.plugin.datadomain.http.DataDomainHttpClient.post(DataDomainHttpClient.java:155) at com.emc.clp.plugin.datadomain.DataDomainElementalHandler.handleClientRegistration(DataDomainElementalHandler.java:279) at com.emc.clp.security.sso.SsoElementalRegistrationService.sendSsoRegistrationRequestToElemental(SsoElementalRegistrationService.java:333) at com.emc.clp.security.sso.SsoElementalRegistrationService.lambda$getRegisterSubTasks$4(SsoElementalRegistrationService.java:154) at java.util.concurrent.CompletableFuture.uniCompose(CompletableFuture.java:966) at java.util.concurrent.CompletableFuture$UniCompose.tryFire(CompletableFuture.java:940) at java.util.concurrent.CompletableFuture.postComplete(CompletableFuture.java:488) at java.util.concurrent.CompletableFuture.completeExceptionally(CompletableFuture.java:1990) at com.emc.edp.http.OkHttpHttpClient.fail(OkHttpHttpClient.java:677) at com.emc.edp.http.OkHttpHttpClient.access$400(OkHttpHttpClient.java:34) ... 6 common frames omitted
Cause
Sysadmin-kontoen er den eneste kontoen som kan registrere SSO i DD.
I dette tilfellet får vi nødvendige administratorlegitimasjonsfeil. DD ble oppdaget i DPC sammen med en annen bruker enn sysadmin, og det fører til at dette mislykkes.
Resolution
I loggen ser vi følgende legitimasjonsfeil som forårsaker at registreringen mislykkes.
Caused by: com.emc.clp.spi.ForbiddenException: Administrator credentials required for the SSO registration
- Hvis du vil registrere deg med SSO, må du bruke sysadmin-kontoen, siden det er den eneste kontoen som kan registrere SSO. Selv andre administratorkontoer har ikke denne retten.
- Når DD ble oppdaget i DPC, kan det hende at den ikke har fått sysadmin-kontoen. Rediger DD i DPC, systemadministrasjonssiden, og legg inn sysadmin-kontoen og passordet for denne kontoen.
- Prøv å registrere SSO på nytt fra DPC-brukergrensesnittet.
Registreringen skal være vellykket.
Ta kontakt med Dells kundestøtte for ytterligere spørsmål.
Affected Products
Data Protection Central