Difference between revisions of "Error: Command sent to the wrong host"

m (Unprotected "Error: Command sent to the wrong host": Certifiable document)
m (Protected "Error: Command sent to the wrong host": Certifiable document [edit=sysop:move=sysop])
(No difference)

Revision as of 19:33, 1 August 2007

Introduction

An error can occur on the admin console when attempting to administer an object stored on another mailbox server that is part of a multiple mailbox server installation:

Command sent to the wrong host
Details:
soap:Sender

This error is accompanied with problems accessing a mailbox stored on another mailbox server using the zmmailbox command line tool:

ERROR: zclient.IO_ERROR (invoke java.security.cert.CertificateException: 
Untrusted Server Certificate Chain) (cause: javax.net.ssl.SSLHandshakeException
java.security.cert.CertificateException: Untrusted Server Certificate Chain)

Running other Zimbra command line tools may results in CertificatException errors as well.

Probable Cause

Trust has not been established across all mailbox servers. Trust is required to perform remote operations on a mailbox server.

Solution

Export each mailbox server's Tomcat certificate and import into each server's Java keystore.

Export Certificates

Export node 1

[zimbra@node1]$ keytool -export -alias tomcat -keystore /opt/zimbra/tomcat/conf/keystore \
-file /tmp/tomcat1.crt -storepass zimbra

Export node 2

[zimbra@node2]$ keytool -export -alias tomcat -keystore /opt/zimbra/tomcat/conf/keystore \
-file /tmp/tomcat2.crt -storepass zimbra

Copy each Tomcat certificate to each server.

Import Certificates

Import node 1

[zimbra@node1]$ keytool -import -keystore /opt/zimbra/java/jre/lib/security/cacerts \
-file /tmp/tomcat2.crt -trustcacerts -storepass changeit

Import node 2

[zimbra@node2]$ keytool -import -keystore /opt/zimbra/java/jre/lib/security/cacerts \
-file /tmp/tomcat1.crt -trustcacerts -storepass changeit

Restart Tomcat

tomcat restart

Related Articles

Commercial_Certificates

SSL_Certificate_Problems



Keywords: ssl , certificates , error, CertificateException

Verified Against: Zimbra Collaboration Suite 4.5.3 Date Created: 8/1/2007
Article ID: https://wiki.zimbra.com/index.php?title=Error:_Command_sent_to_the_wrong_host Date Modified: 2007-08-01



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »

Jump to: navigation, search