“VDP: 发生意外错误，错误代码为: 30983” ("VDP: An unexpected error occurred with the following error code: 30983")

升级 vCenter Server 后所有 VDP 备份均失败 (2149599)

---

 

• 将 vCenter 升级到 5.5 U3e、6.0 U2a 或 6.5 后，所有备份均失败。
• 您会看到以下错误：
  
  “VDP: 发生意外错误，错误代码为: 30983” ("VDP: An unexpected error occurred with the following error code: 30983")
  
  
• 在 /space/avamar/var/mc/server_log/mcserver.out 文件中，您会看到类似以下内容的 java 堆栈跟踪：
  
  Warning: org.apache.xerces.jaxp.SAXParserImpl$JAXPSAXParser: Property 'http://www.oracle.com/xml/jaxp/properties/entityExpansionLimit' is not recognized.
  Compiler warnings:
  WARNING: 'org.apache.xerces.jaxp.SAXParserImpl: Property 'http://javax.xml.XMLConstants/property/accessExternalDTD' is not recognized.'
  Started
  Caught Exception : Exception : org.apache.axis.AxisFault Message : ; nested exception is:
  javax.net.ssl.SSLHandshakeException: Unsupported curve: 1.2.840.10045.3.1.7 StackTrace :
  AxisFault
  faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
  faultSubcode:
  faultString: javax.net.ssl.SSLHandshakeException: Unsupported curve: 1.2.840.10045.3.1.7
  faultActor:
  faultNode:
  faultDetail:
  {http://xml.apache.org/axis/}stackTrace:javax.net.ssl.SSLHandshakeException: Unsupported curve: 1.2.840.10045.3.1.7

 

 Cause

出现此问题的原因是 java 库 JSAFE/BSAFE 5.0 和某些 vCenter Server SSL 密码设置之间存在互操作性问题。

 

 Resolution

该问题在 VMware vSphere Data Protection 6.1.3（可从 VMware Downloads 获取）中已解决。

要在不升级的情况下临时解决此问题，请将 Java JCE 提供程序库的优先级设置为高于 RSA BSAFE java 库。

 

要将 Java JCE 提供程序库设置为更高的优先级，请执行以下操作：

1. 通过 SSH 登录设备，备份mcsutils.pm文件：
   
   su - root
   cp -p /usr/local/avamar/lib/mcsutils.pm /usr/local/avamar/lib/mcsutils-backup
   
   
2. 编辑mcsutils.pm文件，并将此行添加到$prefs变量（注意句首的 . 以及结尾引号前的空格）：
   
   ."-Dsecurity.provider.rsa.JsafeJCE.position=last "
   
   编辑前：
   
   my $prefs = "-Djava.util.logging.config.file=$mcsvar::lib_dir/mcserver_logging.properties "
   ."-Djava.security.egd=file:/dev/./urandom "
   ."-Djava.io.tmpdir=$mcsvar::tmp_dir "
   ."-Djava.util.prefs.PreferencesFactory=com.avamar.mc.util.MCServerPreferencesFactory "
   ."-Djavax.xml.parsers.DocumentBuilderFactory=org.apache.xerces.jaxp.DocumentBuilderFactoryImpl "
   ."-Djavax.net.ssl.keyStore=" .MCServer::get( "rmi_ssl_keystore" ) .""
   ."-Djavax.net.ssl.trustStore=" .MCServer::get( "rmi_ssl_keystore" ) .""
   ."-Dfile.encoding=UTF-8 "
   ."-Dlog4j.configuration=file://$mcsvar::lib_dir/log4j.properties "; # vmware/axis
   
   编辑后：
   
   my $prefs = "-Djava.util.logging.config.file=$mcsvar::lib_dir/mcserver_logging.properties "
   ."-Djava.security.egd=file:/dev/./urandom "
   ."-Djava.io.tmpdir=$mcsvar::tmp_dir "
   ."-Djava.util.prefs.PreferencesFactory=com.avamar.mc.util.MCServerPreferencesFactory "
   ."-Djavax.xml.parsers.DocumentBuilderFactory=org.apache.xerces.jaxp.DocumentBuilderFactoryImpl "
   ."-Djavax.net.ssl.keyStore=" .MCServer::get( "rmi_ssl_keystore" ) .""
   ."-Djavax.net.ssl.trustStore=" .MCServer::get( "rmi_ssl_keystore" ) .""
   ."-Dfile.encoding=UTF-8 "
   ."-Dsecurity.provider.rsa.JsafeJCE.position=last "
   ."-Dlog4j.configuration=file://$mcsvar::lib_dir/log4j.properties "; # vmware/axis
   
   
3. 重新启动 mcs 服务和备份调度程序：
   
   su - admin
   mcserver.sh --restart
   dpnctl start sched