結構 CA 請求注冊失敗，出現錯誤 [[ { 代碼：71，消息：'授權失敗' } ]]

Question

無法為組織制造商注冊用戶名 NpPharma with::fabric-ca request register failed with errors [[ { code: 71, message: 'Authorization failure' } ]]

連接-manufacturer.js ->

{
"name": "artifacts-test-manufacturer",
"version": "1.0.0",
"client": {
    "organization": "Manufacturer",
    "connection": {
        "timeout": {
            "peer": {
                "endorser": "300"
            }
        }
    }
},
"organizations": {
    "Manufacturer": {
        "mspid": "ManufacturerMSP",
        "peers": [
            "peer0.manufacturer.example.com"
        ],
        "certificateAuthorities": [
            "ca.manufacturer.example.com"
        ]
    }
},
"peers": {
    "peer0.manufacturer.example.com": {
        "url": "grpcs://localhost:7051",
        "tlsCACerts": {
            "pem": "-----BEGIN CERTIFICATE-----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\nFTDhFDO5DzeKVg==\n-----END CERTIFICATE-----\n"
        },
        "grpcOptions": {
            "ssl-target-name-override": "peer0.manufacturer.example.com",
            "hostnameOverride": "peer0.manufacturer.example.com"
        }
    }


},
"certificateAuthorities": {
    "ca.manufacturer.example.com": {
        "url": "https://localhost:7054",
        "caName": "ca.manufacturer.example.com",
        "tlsCACerts": {
            "pem": "-----BEGIN CERTIFICATE-----\nMIICFjCCAb2gAwIBAgIUfSBE3AfoXkd1J2DH099Ph7qDRCswCgYIKoZIzj0EAwIw\naDELMAkGA1UEBhMCVVMxFzAVBgNVBAgTDk5vcnRoIENhcm9saW5hMRQwEgYDVQQK\nEwtIeXBlcmxlZGdlcjEPMA0GA1UECxMGRmFicmljMRkwFwYDVQQDExBmYWJyaWMt\nY2Etc2VydmVyMB4XDTIxMDYyODA1MDcwMFoXDTM2MDYyNDA1MDcwMFowaDELMAkG\nA1UEBhMCVVMxFzAVBgNVBAgTDk5vcnRoIENhcm9saW5hMRQwEgYDVQQKEwtIeXBl\ncmxlZGdlcjEPMA0GA1UECxMGRmFicmljMRkwFwYDVQQDExBmYWJyaWMtY2Etc2Vy\ndmVyMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEYUwcogIc3Ak1dOhOzMckSIjR\ndLKVqTbZ0QWjLkDcOvq+oQh7cs+CyD5s1R3/1ZODwurBK3lCXVlniqLNworKkqNF\nMEMwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQEwHQYDVR0OBBYE\nFOUbZrmE75EWUa81CpKexV8IIDDWMAoGCCqGSM49BAMCA0cAMEQCIGAHQ9ml2+br\n28ccvSIN5wSiKFL7l//Hs9IFOcL9M4YSAiAxnXMCEoakRT3sih16KDTU8FV6ezIa\nFTDhFDO5DzeKVg==\n-----END CERTIFICATE-----\n"
        },
        "httpOptions": {
            "verify": false
        }
    }
}

}

注冊用戶的功能

const ca = new FabricCAServices(caInfo.url, { trustedRoots: caTLSCACerts, verify: false }, caInfo.caName);
const secret = await ca.register({
      affiliation: 'manufacturer.department1',
      enrollmentID: username,
      role: 'client'
    }, adminUser);

Answer 1

首先，您需要確保已創建隸屬關系manufacturer.department1 .department1。 您可以通過將fabric-ca-server-config.yaml文件包含在內來創建從屬關系，也可以在 Fabric CA 初始化並運行后通過 CLI（或其中一個 SDK）創建。

要將它包含在您的配置中，您需要添加一個像

affiliations:
   manufacturer:
      - department1
  

到您的 Fabric CA 服務器配置文件。

要創建與 CLI 的從屬關系：

fabric-ca-client affiliation add manufacturer.department1

您還需要確保管理員用戶將hf.AffiliationMgr屬性設置為 true。 管理員還必須將其從屬關系設置為"" （意味着管理員可以管理所有從屬關系）或特定的從屬關系或其任何父級。 默認管理員用戶可以管理所有從屬關系。