1. Support
  2. Knowledge base
  3. 100033964

"Error connecting to port 443 of filer . Err: HTTP POST - Authorization failed." appears when attempting to add a clustered netapp filer

Article: 100033964
Last Published: 2023-05-10
Ratings: 7 1
Product(s): Data Insight

Problem

"Error connecting to port 443 of filer <xxx>. Err: HTTP POST - Authorization failed." appears when attempting to add a clustered netapp filer. A pop-up message appears with an error.

Error Message

INFO:    #{24255} [ConfigUtils.doFilerOp] code: AUTHENTICATION_FAILED
message: "Could not connect to the filer with the user creds provided"
detailedMessage: "Error connecting to port 443 of filer <xxx>. Err: HTTP POST - Authorization failed."

Cause

Possible causes include:
  • The Netapp filer authentication via SSL certificates is disabled.
  • The domain name is too long for the filer account used to configure in Data Insight.
  • The Data Insight Collector node and the NetApp filer do not belong to the same domain

Solution

 
  • Ensure the Netapp filer Authentication via SSL certificates is enabled.
Check  if Authentication via SSL certificates is enabled

SAMPLE::> security ssl show -vserver <sample node>
Vserver: <sample node>
Server Certificate Issuing CA: <Issuing CA1 V2 >
Server Certificate Serial Number: <sample serial no>
Server Certificate Common Name: 
nbclnas.corp.standardlife.com
SSL Server Authentication Enabled: false
SSL Client Authentication Enabled: false
 
 
To enable it:
security ssl modify -vserver <sample node> -client-enabled true
  • Verify that the user whose credentials are used to configure the DataInsightFPolicy service belongs to the same domain as the Data Insight Collector node and the NetApp filer. Ensure that this user is a part of the Backup
    Operators group on the filer
  • If the NetApp filer and the Data Insight Collector node are in different domains, ensure that the DataInsightFPolicy service is running as Local System, or there is bidirectional trust between the domains to which the filer and the collector belong.
  • The user account that is used to configure the DataInsightFPolicy needs to be in fully qualified domain name format.
  • Set an entry in the hosts file for the filer, the hosts file entry on the filer and the format of the hosts file entry. The entry should be in this format:  <IP_ADDRESS> <FQDN> <Short_name>
    Example:  10.209.88.190 mycollector.tulip.matrixad.local mycollector

Was this content helpful?

Article Languages