Forum Discussion

Raek's avatar
Raek
Level 3
5 years ago

STATUS 5986: Certificate request for host was rejected

Hello

I have the following configuration

Master: NetBackup 8.1.1 on RHEL 7.6
Master hostname: master1
Master FQDN: master1.int.com
Master name configured for NetBackup: master1 (without FQDN)
Client: NetBackup 7.7.3 on RHEL 7.2, to be upgraded to NetBackup 8.1.1

When pushing the client with install_client_files, or upgrading it with update_clients, both fails with the below error:

nbcertcmdtool: The -getCertificate operation failed for server master1.
EXIT STATUS 5986: Certificate request for host was rejected as the host could not be validated as a master server.

After troubleshooting I found that the client is trying to execute "-getCertificate" using the short name "master1"

In fact whent I try getCertificate with short name it fails.

client1 # nbcertcmd -getCertificate -server master1
nbcertcmd: The -getCertificate operation failed for server master1.

While getting certificate using master's FQDN works just fine.

client1 # nbcertcmd -getCertificate -server master1.int.com
Host certificate and certificate revocation list received successfully from server master1.int.com.

Anyway I could manage to update my client by forcing "master_name" variable inside install script "client_config" to master's FQDN.
However I wonder if there is a more orthodox way(s) to get it work? ideally is to have -getCertificate work with master's short name.

Your help would be appreciated.

Additional information:

From master's /etc/hosts:
10.100.10.10    master1.int.com    master1

From client's /etc/hosts:
10.100.10.10    master1.int.com    master1