Fail to use certificate authentication against data vserver
Applies to
- ONTAP 9
- Trident
Issue
Fail to use certificate-based authentication against data server with error: 401 Unauthorized
########## nfs_svm level test for vsadmin user ##########
* About to connect() to nfs-svm-mgmt.demo.netapp.com port 443 (#0)
* Trying 192.168.0.135...
* Connected to nfs-svm-mgmt.demo.netapp.com (192.168.0.135) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* skipping SSL peer certificate verification
* NSS: client certificate from file
* subject: CN=admin,O=NetApp,L=RTP,ST=NC,C=US
* start date: Sep 26 03:56:48 2022 GMT
* expire date: Sep 25 03:56:48 2025 GMT
* common name: admin
* issuer: CN=admin,O=NetApp,L=RTP,ST=NC,C=US
* SSL connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
* Server certificate:
* subject: CN=nfs-svm-mgmt.demo.netapp.com,O=NetApp Lab on Demand,L=Research Triangle Park,ST=North Carolina,C=US
* start date: Apr 01 05:16:12 2021 GMT
* expire date: Dec 17 05:16:12 2040 GMT
* common name: nfs-svm-mgmt.demo.netapp.com
* issuer: CN=demo.netapp.com,O=NetApp Lab on Demand,L=Research Triangle Park,ST=North Carolina,C=US
> POST /servlets/netapp.servlets.admin.XMLrequest_filer HTTP/1.1
> User-Agent: curl/7.29.0
> Host: nfs-svm-mgmt.demo.netapp.com
> Accept: */*
> Content-Length: 156
> Content-Type: application/x-www-form-urlencoded
>
* upload completely sent off: 156 out of 156 bytes
< HTTP/1.1 401 Unauthorized
< Date: Tue, 27 Sep 2022 05:26:32 GMT
< Server: Apache
< X-Content-Type-Options: nosniff
< Cache-Control: no-cache, no-store, must-revalidate
< WWW-Authenticate: Basic realm="ONTAP"
< Content-Length: 381
< Content-Type: text/html; charset=iso-8859-1
<
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>401 Unauthorized</title>
</head><body>
<h1>Unauthorized</h1>
<p>This server could not verify that you
are authorized to access the document
requested. Either you supplied the wrong
credentials (e.g., bad password), or your
browser doesn't understand how to supply
the credentials required.</p>
</body></html>
* Connection #0 to host nfs-svm-mgmt.demo.netapp.com left intact