[Symptom]
In versions earlier than FusionCompute 8.0, the backup service page cannot be opened. However, you can view other services (such as EVS disks) and then view the backup service.
[Cause]
The IAM certificate is incorrectly configured.
[Solution]
To replace the IAM certificate, perform the following steps:
1. Log in to the MO 03 node in SSH mode and copy the trust.cer certificate in the /opt/oss/Product/etc/ssl/er directory to the /home/cbs_admin directory on all Console-CSBS nodes.
2. Log in to all Console-CSBS nodes using SSH and switch to user root. The default passwords are cbs_admin/Huawei12#$ and root/Cloud12#$. (You need to switch to user root in sudo mode.)
3. Run the following command to replace the certificate:
1) cd /home/cbs_admin
2) cp trust.cer /opt/huawei/console/tomcat/webapps/cbs/WEB-INF/classes/config/
3) cd /opt/huawei/console/tomcat/webapps/cbs/WEB-INF/classes/config/
4) rm -rf iamKeyStore.jks
5) /usr/bin/jre/bin/keytool -import -file trust.cer -keystore iamKeyStore.jks (When running this command, enter the password Changeme_123 and then enter yes.)
6) chown cbs:cbs iamKeyStore.jks
7) chmod -f 600 iamKeyStore.jks
[Symptom]
In versions earlier than FusionCompute 8.0, the backup service page cannot be opened. When you view other services (such as EVS disks) and then the backup service, the backup service page cannot be opened.
[Cause]
Possible causes:
1. The DNS configuration is incorrect, and the domain name fails to be resolved.
2. Port 11211 of the Memcache is unavailable, and the trustlist is not registered.
[Solution]
DNS configuration check and solution:
1. Log in to all Console-CSBS nodes using SSH and switch to user root. The default passwords are cbs_admin/Huawei12#$ and root/Cloud12#$. (You need to switch to user root in sudo mode.)
2. Run the cat /etc/resolv.conf command to check whether the DNS configuration is correct.
3. If the configuration is incorrect, run vim /etc/resolv.conf to modify the correct IP address and delete the incorrect IP address.
4. Run the sh /etc/console/control.sh restart command to restart the console service.
Trustlist check and solution:
1. Log in to the MO 03 and MO 04 nodes in SSH mode and switch to the root user.
2. Run the iptables –L command to check whether all IP addresses of CSBS-Console exist.
3. If no, run the following command to add the whitelist: (The CSBS-Console has two nodes and needs to be added to both nodes.)
sh /opt/oss/Product/apps/MOConsoleFrameworkWebsite/init/Regist_Trust_Ip.sh IP address (the IP address is the IP address of the CSBS-Console node.)
