重庆思庄Oracle、Redhat认证学习论坛

标题: EM13C agent 状态显示不可达 [打印本页]

作者: 郑全    时间: 2024-6-10 18:06
标题: EM13C agent 状态显示不可达
OEM 13c: Agent status showing unreachable in OEM Console with "Availability Evaluation Error" with no Targets (Doc ID 2937110.1)

In this Document
Symptoms
Cause
Solution
References

APPLIES TO:
Enterprise Manager Base Platform - Version 13.5.0.0.0 and later
Information in this document applies to any platform.
SYMPTOMS
emoms_pbs.log

===========

2023-03-06 13:13:50,160 [MonitoringChecksumCheckMgr:MonitoringChecksumChecker-0] WARN checksum.MonitoringChecksumChecker logp.251 - Sleeping. Duration(msec) 960000

2023-03-06 13:14:17,623 [Job Step 140618970 Job Long-System Pool:JobWorker] ERROR target.EntityUtil logp.251 - PromoteTarget for agent: https :// <agent hostaname.domain name>:3872/emd/main/with changeSequence: 713159 got Exception with Message: unable to connect to http server at https :// <agent hostaname.domain name>:3872/emd/main/. [handshake has no peer] isTransientExceptionThrown: 0

oracle.sysman.emSDK.agent.comm.exception.VerifyConnectionException: unable to connect to http server at <https :// <agent hostaname.domain name>:3872/emd/main/. [handshake has no peer]




CAUSE
communication issue with TLSv 1.0/1.1. Agent can allow only TLSv1.2

emctl secdiag openurl -url https :// <agent host name.domain name>:3872/emd/main/ -ssl_protocol TLSv1.1

Oracle Enterprise Manager Cloud Control 13c Release 5

Copyright (c) 1996, 2021 Oracle Corporation. All rights reserved.

Log file: /tmp/OpenPage_2023_03_17_14_01_414159842175493534942.log

Opening page: https:// <agent host name.domain name>:3872/emd/main/

Using non-validating trust manager; all certificates will be blindly accepted.

Proxy server is not set

Using protocol: TLSv1.1

Negotiated protocol: NONE

Getting the certificate chain

Following exception occurred when running OpenPage

javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated




SOLUTION
Follow below steps

1. Secure oms to restrict with "TLSv1.2" only

<OMS_HOME>/bin>./emctl secure oms -console -protocol "TLSv1.2"

2. Follow below steps on Agent

<AGENT_HOME>/bin/emctl secure agent

<AGENT_HOME>/bin/emctl config agent addinternaltargets

<AGENT_HOME>/bin/emctl config agent listtargets

<AGENT_HOME>/bin/emctl upload agent








欢迎光临 重庆思庄Oracle、Redhat认证学习论坛 (http://bbs.cqsztech.com/) Powered by Discuz! X3.2