MongoDB Snapcenter backup failure after TLS is enabled on the Database

[Banji]

Hello,

We have a MongoDB database that has been backing up successfully without issues but started failing after TLS was enabled on the MongoDB database. Does anybody know what the workaround for the this is? Version is 4.5

SCC-00164: Application quiesce for the plug-in [MongoDB] failed with exit code [1] and with error :

SC_MSG#INFO#Thu Apr 21 09:22:43 2022#Resources : ['MONGODB,Sharded Cluster']

SC_MSG#INFO#Thu Apr 21 09:22:43 2022#Quiescing application

SC_MSG#INFO#Thu Apr 21 09:22:43 2022#Resource Type is Sharded Cluster

SC_MSG#INFO#Thu Apr 21 09:22:43 2022#Resource Type is Sharded Cluster

SC_MSG#ERROR#Thu Apr 21 09:23:13 2022#Failed to connect to the host mongoserver with error: connection closed

SCC-00161: Application unquiesce for the plug-in [MongoDB] failed with exit code [1] and error :

SC_MSG#INFO#Thu Apr 21 09:23:23 2022#Resources : ['MONGODB,Sharded Cluster']

SC_MSG#INFO#Thu Apr 21 09:23:23 2022#Unquiescing application SC_MSG#INFO#Thu Apr 21 09:23:23 2022#Resource Type is Sharded Cluster

SC_MSG#INFO#Thu Apr 21 09:23:23 2022#Resource Type is Sharded Cluster

SC_MSG#ERROR#Thu Apr 21 09:23:53 2022#Failed to connect to the host mongoserver with error: connection closed

SCC-00185: Cleanup for plug-in [MongoDB] failed with exit code [102] and error:

[aladd]

What version of TLS is being used and was this also enabled on the SC server, as well as the plug-in host?

Additional information:

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Protection_and_Security/SnapCenter/SC_plug-ins_show_unsupported_due_to_TLS_configuration

[Banji]

The TLS version in use is TLS 1.2. The plugin host, and Snapcenter servers have tls 1.2 enabled as well.

[Banji]

Thanks Aladd,

I reviewed the KB you shared. It seems to be a little different from what we are experiencing at the moment. The TLS versions on our ends are the same.

[emre_bcbsa]

Question is how do we determine if the TLS issue is happening at the "SnapCenter Custom Plug-in Framework" layer or at the Custom Plug-in's code written on top of it.  How can that be determined?

[aladd]

Are you able to upload a log bundle from both the SC server and the plug-in server? We can find out where in the process it is having an issue. The SC server side will tell us if there is an issue with most operations, however if there is a problem at the plug-in side the SC server logs will only be able to provide so much detail of the problem.

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Protection_and_Security/SnapCenter/How_to_collect_SnapCenter_logs

[Banji]

Hi Aladd,

If this is attached to the original technical case created, are you going to be able to access it?

[aladd]

Yes, I can access the original case and take a look.