STATUS 5986: Certificate request for host was rejected
Hello
I have the following configuration
Master: NetBackup 8.1.1 on RHEL 7.6
Master hostname: master1
Master FQDN: master1.int.com
Master name configured for NetBackup: master1 (without FQDN)
Client: NetBackup 7.7.3 on RHEL 7.2, to be upgraded to NetBackup 8.1.1
When pushing the client with install_client_files, or upgrading it with update_clients, both fails with the below error:
nbcertcmdtool: The -getCertificate operation failed for server master1.
EXIT STATUS 5986: Certificate request for host was rejected as the host could not be validated as a master server.
After troubleshooting I found that the client is trying to execute "-getCertificate" using the short name "master1"
In fact whent I try getCertificate with short name it fails.
client1 # nbcertcmd -getCertificate -server master1
nbcertcmd: The -getCertificate operation failed for server master1.
While getting certificate using master's FQDN works just fine.
client1 # nbcertcmd -getCertificate -server master1.int.com
Host certificate and certificate revocation list received successfully from server master1.int.com.
Anyway I could manage to update my client by forcing "master_name" variable inside install script "client_config" to master's FQDN.
However I wonder if there is a more orthodox way(s) to get it work? ideally is to have -getCertificate work with master's short name.
Your help would be appreciated.
Additional information:
From master's /etc/hosts:
10.100.10.10 master1.int.com master1
From client's /etc/hosts:
10.100.10.10 master1.int.com master1