在Hyperledger Fabric的现有联盟中添加新组织时遇到错误 [英] Getting error while add new organizations in existing Consortium in hyperledger fabric

问题描述

在超级账本结构中的现有运行网络联盟中添加新组织时出现错误.我已经完成了此链接中提到的所有步骤
但是当我到达最后一步时，我得到了错误

I am getting error while add new organizations in existing running network Consortium in hyperledger fabric. I have completed all the step mentioned on this link
however when I reached to last step I am getting error as

Error: got unexpected status: BAD_REQUEST -- error applying config update to existing channel 'syschannel': error authorizing update: error validating DeltaSet: policy for [Group]  /Channel/Consortiums not satisfied: implicit policy evaluation failed - 0 sub-policies were satisfied, but this policy requires 1 of the 'Admins' sub-policies to be satisfied

请提出解决方案或给出提示.

Please suggest how can solve it or give some hint.

HLF网络规范

3 raft-orderer with CA
2 org with 2 peer each with CA 

谢谢

推荐答案

我认为问题在于您的订购者管理员证书没有正确的"ou".

I think the problem is that your orderer admin cert doesn't have a correct 'ou'.

首先，您应该检查管理员"是否证书具有正确的"ou".尝试 openssl x509 -text -in crypto-config/ordererOrganizations/example.com/users/Admin @ example.com/msp/signcerts/Admin @ example.com-cert.pem 中的详细信息管理员证书.

First, you should check if the "Admins" cert has a correct 'ou'. try openssl x509 -text -in crypto-config/ordererOrganizations/example.com/users/[e-mail]/msp/signcerts/[e-mail] to get the details of the admins cert.

如果您获得这样的详细信息:

if you get the details like this:

    Issuer: C=US, ST=California, L=San Francisco, O=example.com, CN=ca.example.com
    Validity
        Not Before: Feb  9 08:53:00 2021 GMT
        Not After : Feb  7 08:53:00 2031 GMT
    Subject: C=US, ST=California, L=San Francisco, OU=client, CN=[e-mail]

OU女巫应该是管理员，但此处是客户端.

The OU witch should be admins but client here.

此问题发生在v1.4.3及更低版本中，并已在此链接.

This problem happens in v1.4.3 and before and it was fixed in this link.

解决此问题的一种方法是删除 crypto-config.yaml:OrdererOrgs 中的 EnableNodeOUs:true ，然后重试所有步骤.另一个解决方案是使用 cryptogen v1.4.4及更高版本.

One solution to solve this problem is to delete the EnableNodeOUs: true in crypto-config.yaml: OrdererOrgs, and try all step again. Another solution is to use cryptogen v1.4.4 and above.

这篇关于在Hyperledger Fabric的现有联盟中添加新组织时遇到错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！