Re: SSL authentication failure

2018-04-12 Thread Rohit Yadav
wastik Mittal <mittal.swas...@gmail.com> Sent: Tuesday, April 3, 2018 12:24:26 PM To: users@cloudstack.apache.org Subject: Re: SSL authentication failure Forget to mention. On issuing an action for out of band management I get: Out-of-band Management action (RESET) on host (b7a92936-1c

Re: SSL authentication failure

2018-04-03 Thread Swastik Mittal
Forget to mention. On issuing an action for out of band management I get: Out-of-band Management action (RESET) on host (b7a92936-1ce9-4c90-aca3-6ea492bf028d) failed with error: Get Auth Capabilities error Error issuing Get Channel Authentication Capabilies request Error: Unable to establish IPMI

Re: SSL authentication failure

2018-04-03 Thread Swastik Mittal
Hey Rohit, (in one-way ssl mode) The host has been added but the power state is disabled as out of band management is disabled. On enabling I get unknown state, but system vm's still show status running and agent state is marked by '-'. Where are the system VM's running if no agent state is

Re: SSL authentication failure

2018-04-02 Thread Swastik Mittal
Hey Rohit, I set my ca.plugin.root.auth.strictness to false and restarted all the services and one way ssl works fine. But how do I solve the bug in case I need to enable two way ssl. regards Swastik On Tue, Apr 3, 2018 at 9:21 AM, Swastik Mittal wrote: > Hey Rohit >

Re: SSL authentication failure

2018-04-02 Thread Swastik Mittal
Hey Rohit I was installing a fresh enviroment. Added the host through command cloudstack-setup-agent, here it mentions everything done correctly but the host doesn't get added. (KVM host) Agent log file gives: 2018-04-03 09:12:14,584 INFO [cloud.agent.Agent] (main:null) (logid:) Connecting to

Re: SSL authentication failure

2018-04-02 Thread Rohit Yadav
Swastik, Did you try to upgrade the env or installed a fresh env? How did you add the host? Was it a kvm host or something else? Instead of localhost, can you use an IP for the mgmt server? Also check and share your ca auth strictness global setting. Setting that to false will enforce legacy