Project

General

Profile

Actions

Bug #20025

open

First inventory after server root install is refused

Added by Vincent MEMBRÉ about 3 years ago. Updated 5 months ago.

Status:
New
Priority:
N/A
Assignee:
-
Category:
System integration
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:

Description

After install of rudder 7.0 beta2 latest snapshot (as of 30/09), first inventory is refused with the following message

[2021-09-30 15:38:13+0200] INFO  inventory-processing - Watch new inventory file 'rudder-snapshot-root.ocs' with signature available: process.
[2021-09-30 15:38:15+0200] ERROR inventory-processing - Error when trying to process inventory 'rudder-snapshot-root.ocs'; cause was: SecurityToken: Certificate subject doesn't contain same node ID in 'UID' attribute as inventory node ID: 2.5.4.3=29892140-b29b-4967-802a-4865c313cd9a,0.9.2342.19200300.100.1.1=29892140-b29b-4967-802a-4865c313cd9a

this is because rudder-agent is installed before rudder-server-root and creates a certificate with the former id, before replacing the id by root and not replacing it with new certifcate

rudder agent check fix this issue, but in my case it never ran automatically

Actions

Also available in: Atom PDF