Error: Command sent to the wrong host: Difference between revisions
m (Protected "Error: Command sent to the wrong host": Certifiable document [edit=sysop:move=sysop]) |
No edit summary |
||
| (7 intermediate revisions by 3 users not shown) | |||
| Line 1: | Line 1: | ||
= Introduction = | {{Archive}}{{Article Infobox|{{admin}}|||{{ZCS 4.5}}}}= Introduction = | ||
An error can occur on the admin console when attempting to administer an object stored on another mailbox server that is part of a multiple mailbox server installation: | An error can occur on the admin console when attempting to administer an object stored on another mailbox server that is part of a multiple mailbox server installation: | ||
| Line 11: | Line 11: | ||
java.security.cert.CertificateException: Untrusted Server Certificate Chain) | java.security.cert.CertificateException: Untrusted Server Certificate Chain) | ||
Running other Zimbra command line tools may results in | Running other Zimbra command line tools may results in CertificateException errors as well. | ||
= Probable Cause = | = Probable Cause = | ||
| Line 40: | Line 40: | ||
== Restart Tomcat == | == Restart Tomcat == | ||
tomcat restart | On each mailbox server: | ||
$ tomcat restart | |||
= Related Articles = | = Related Articles = | ||
[[ | [[4.x_Commercial_Certificates_Guide|4.x Commercial Certificates Guide]] | ||
[[SSL_Certificate_Problems]] | [[SSL_Certificate_Problems|SSL Certificate Problems]] | ||
---- | ---- | ||
| Line 51: | Line 53: | ||
{{Article Footer|Zimbra Collaboration Suite 4.5.3|8/1/2007}} | {{Article Footer|Zimbra Collaboration Suite 4.5.3|8/1/2007}} | ||
[[Category:Troubleshooting]] | [[Category: Troubleshooting Mailbox]] | ||
[[Category: Troubleshooting Certificates]] | |||
[[Category: ZCS 4.5]] | |||
[[Category: Pending Certification]] | |||
Latest revision as of 17:13, 24 March 2015
 Article Information |
|---|
| This article applies to the following ZCS versions. |
Introduction
An error can occur on the admin console when attempting to administer an object stored on another mailbox server that is part of a multiple mailbox server installation:
Command sent to the wrong host
Details:
soap:Sender
This error is accompanied with problems accessing a mailbox stored on another mailbox server using the zmmailbox command line tool:
ERROR: zclient.IO_ERROR (invoke java.security.cert.CertificateException: Untrusted Server Certificate Chain) (cause: javax.net.ssl.SSLHandshakeException java.security.cert.CertificateException: Untrusted Server Certificate Chain)
Running other Zimbra command line tools may results in CertificateException errors as well.
Probable Cause
Trust has not been established across all mailbox servers. Trust is required to perform remote operations on a mailbox server.
Solution
Export each mailbox server's Tomcat certificate and import into each server's Java keystore.
Export Certificates
Export node 1
[zimbra@node1]$ keytool -export -alias tomcat -keystore /opt/zimbra/tomcat/conf/keystore \ -file /tmp/tomcat1.crt -storepass zimbra
Export node 2
[zimbra@node2]$ keytool -export -alias tomcat -keystore /opt/zimbra/tomcat/conf/keystore \ -file /tmp/tomcat2.crt -storepass zimbra
Copy each Tomcat certificate to each server.
Import Certificates
Import node 1
[zimbra@node1]$ keytool -import -keystore /opt/zimbra/java/jre/lib/security/cacerts \ -file /tmp/tomcat2.crt -trustcacerts -storepass changeit
Import node 2
[zimbra@node2]$ keytool -import -keystore /opt/zimbra/java/jre/lib/security/cacerts \ -file /tmp/tomcat1.crt -trustcacerts -storepass changeit
Restart Tomcat
On each mailbox server:
$ tomcat restart
Related Articles
4.x Commercial Certificates Guide
Keywords: ssl , certificates , error, CertificateException
