Home
Troubleshooting
Resolve problems with Teracloud® Streams using the troubleshooting tools provided with the product as well as the resources offered by Teracloud Support.
Known problems and solutions
Use the solutions that are provided to resolve known problems that you might encounter when you work with different components of the product.
Teracloud® Streams problems and solutions
Use the solutions that are provided to resolve the problems that you can encounter when you work with Teracloud® Streams.
Authentication
Use the solutions that are provided to resolve problems with Teracloud® Streams authentication.
Client certificate authentication problems and solutions
If you are using X.509 certificates to authenticate users in an Teracloud® Streams domain, use these tips when troubleshooting certificate authentication problems.
Client certificate is not trusted

Welcome
Learn about the core capabilities of Teracloud® Streams, its architecture, and key concepts.
Installing
Use this information to install, upgrade, and uninstall the Teracloud® Streams product.
Configuring
Create a basic or an enterprise domain which is a single point for configuring and managing common resources, security, and instances.
Administering
Administer the product by using the Teracloud® Streams graphical user interface, APIs, or the streamtool command-line interface.
Developing
Develop stream applications with the Streams Processing Language (SPL), Java, and Python.
Troubleshooting
Resolve problems with Teracloud® Streams using the troubleshooting tools provided with the product as well as the resources offered by Teracloud Support.
- Before contacting Teracloud® Support
  Review this information before you contact Teracloud® Support. These resources might help you to find possible solutions for your issue, or make your support experience more efficient if you need to contact Teracloud Support.
- Troubleshooting techniques
  Troubleshooting is a systematic approach to solving a problem. The goal of troubleshooting is to determine why something does not work as you expect it to work, and then decide how to resolve the problem.
- Known problems and solutions
  Use the solutions that are provided to resolve known problems that you might encounter when you work with different components of the product.
  - Teracloud® Streams problems and solutions
    Use the solutions that are provided to resolve the problems that you can encounter when you work with Teracloud® Streams.
    - Authentication
      Use the solutions that are provided to resolve problems with Teracloud® Streams authentication.
      - Unable to log in to an Teracloud® Streams domain
        You are not able to log in to the domain because of an authentication failure.
      - User authentication errors with the PAM login counter module
        If you are using Pluggable Authentication Module (PAM) to authenticate users in Teracloud® Streams and you install the login counter (tallying) module, there might be authentication problems.
      - Client certificate authentication problems and solutions
        If you are using X.509 certificates to authenticate users in an Teracloud® Streams domain, use these tips when troubleshooting certificate authentication problems.
        Certificate or PKCS #12 file issue causes authentication to fail
        Client certificate is not trusted
        Client certificate is expired
        Client certificate is revoked
        Client certificate revocation status could not be determined
        User is not authorized to view the domain configuration
    - Connectivity
      Use the solutions that are provided to resolve connectivity problems with the product.
    - Domain configuration and administration
      Use the solutions that are provided to resolve the problems that can occur when you work with Teracloud® Streams domains.
    - Installation
      Use the solutions that are provided to resolve the problems that you can encounter when you install Teracloud® Streams.
    - Instance configuration and administration
      Use the solutions that are provided to resolve the problems that can occur when you work with Teracloud® Streams instances.
    - Streams Console
      Use the solutions that are provided to resolve the problems that you might encounter when you work with Streams Console.
    - Stream applications
      Use these solutions to resolve the problems that you might encounter when you develop stream applications.
    - Teracloud® Streams runtime
      Use the solutions that are provided to resolve the problems encountered during the Teracloud® Streams runtime processes.
  - Toolkit problems and solutions
    Use the solutions that are provided to resolve the problems that you can encounter when you work with toolkits in Teracloud® Streams.
  - ZooKeeper problems and solutions
    Use these solutions to resolve the problems that you might encounter with Apache ZooKeeper.
- Troubleshooting services and diagnostic tools
  Teracloud® Streams provides log and trace services and troubleshooting tools that can help you resolve the issues that you encounter when you work with the product.
- Teracloud® Streams messages
  The Teracloud® Streams messages describe the errors and solutions, warnings of potentially problematic conditions, and helpful information that you can use to troubleshoot the problems that can occur when you work with the product. These messages are displayed in the user interfaces and log files.
Reference
Find details on the SPL language, toolkits, APIs, commands, and more.
Glossary
Use this glossary to find terms and definitions for Teracloud® Streams.

Client certificate is not trusted

Teracloud® Streams issues the following error messages:

CDISC5400E Unexpected error while performing certificate authentication. Cause: CDISA5089E An unexpected error occurred. The error message is 'Authentication failed: The certificate issued by certificate-issuer-information is not trusted.'

The certificate authority (CA) that issued the client certificate is not in the Teracloud® Streams web management service (SWS) trust store.

Add the CA certificate to the SWS truststore, for example:

streamtool addcertificate -d domain-id --clientid streamsca -f /streamscertificates/ca_certificate.pem

For more information about this command, enter streamtool man addcertificate.