Cisco Cisco Identity Services Engine 1.2 产品宣传页

安全访问操作指南

故障排除

本节介绍一些故障排除提示：

•

通过验证 pxGrid 客户端主机名和 ISE pxGrid 节点是否可通过 DNS 进行可解析，避免出现 pxGrid 脚本

错误消息。

•

如果信任库有更改，并且收到类似的错误消息，请从 ISE VM 停止并重新启动 ISE 应用。

./register.sh -keystoreFilename pxGridClient.jks -keysrePassword cisco123 -truststoreFilename root3.jks -

truststorePassword cisco123 -username pxGridclient -hostname 10.0.0.96 -group Session -description test1

------- properties -------

version=1.0.0

hostnames=10.0.0.96

username=pxGridclient

descriptipon=test1

keystoreFilename=pxGridClient.jks

keystorePassword=cisco123

truststoreFilename=root3.jks

truststorePassword=cisco123

--------------------------

registering...

connecting...

javax.net.ssl.SSLHandshakeException: Received fatal alert: unknown_ca

at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)

at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)

at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1991)

at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1104)

at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1343)

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1371)

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1355)

at org.jivesoftware.smack.XMPPConnection.proceedTLSReceived(XMPPConnection.java:806)

at org.jivesoftware.smack.PacketReader.parsePackets(PacketReader.java:267)

at org.jivesoftware.smack.PacketReader.access$000(PacketReader.java:43)

at org.jivesoftware.smack.PacketReader$1.run(PacketReader.java:70)

Exception in thread "main" com.cisco.pxgrid.GCLException: SASL authentication failed:

at com.cisco.pxgrid.GridConnection.connect(GridConnection.java:197)

at com.cisco.pxgrid.samples.ise.Register.main(Register.java:99)

Caused by: SASL authentication failed:

at org.jivesoftware.smack.SASLAuthentication.authenticate(SASLAuthentication.java:281)

at org.jivesoftware.smack.XMPPConnection.login(XMPPConnection.java:206)

at com.cisco.pxgrid.Configuration.connect(Configuration.java:194)

at com.cisco.pxgrid.GridConnection.connect(GridConnection.java:134)

... 1 more

•

重新启动 ISE 服务。

application stop ise

application start ise

第

21 页