Error: Command sent to the wrong host: Difference between revisions
No edit summary |
No edit summary |
||
Line 40: | Line 40: | ||
== Restart Tomcat == | == Restart Tomcat == | ||
tomcat restart | On each mailbox server: | ||
$ tomcat restart | |||
= Related Articles = | = Related Articles = | ||
[[Commercial_Certificates]] | [[Commercial_Certificates]] |
Revision as of 19:46, 1 August 2007
Introduction
An error can occur on the admin console when attempting to administer an object stored on another mailbox server that is part of a multiple mailbox server installation:
Command sent to the wrong host
Details:
soap:Sender
This error is accompanied with problems accessing a mailbox stored on another mailbox server using the zmmailbox command line tool:
ERROR: zclient.IO_ERROR (invoke java.security.cert.CertificateException: Untrusted Server Certificate Chain) (cause: javax.net.ssl.SSLHandshakeException java.security.cert.CertificateException: Untrusted Server Certificate Chain)
Running other Zimbra command line tools may results in CertificatException errors as well.
Probable Cause
Trust has not been established across all mailbox servers. Trust is required to perform remote operations on a mailbox server.
Solution
Export each mailbox server's Tomcat certificate and import into each server's Java keystore.
Export Certificates
Export node 1
[zimbra@node1]$ keytool -export -alias tomcat -keystore /opt/zimbra/tomcat/conf/keystore \ -file /tmp/tomcat1.crt -storepass zimbra
Export node 2
[zimbra@node2]$ keytool -export -alias tomcat -keystore /opt/zimbra/tomcat/conf/keystore \ -file /tmp/tomcat2.crt -storepass zimbra
Copy each Tomcat certificate to each server.
Import Certificates
Import node 1
[zimbra@node1]$ keytool -import -keystore /opt/zimbra/java/jre/lib/security/cacerts \ -file /tmp/tomcat2.crt -trustcacerts -storepass changeit
Import node 2
[zimbra@node2]$ keytool -import -keystore /opt/zimbra/java/jre/lib/security/cacerts \ -file /tmp/tomcat1.crt -trustcacerts -storepass changeit
Restart Tomcat
On each mailbox server:
$ tomcat restart
Related Articles
Keywords: ssl , certificates , error, CertificateException