Installation Hyperledger Fabric, ran up the whole service, but throwing a mistake, Error: got unexpected status: FORBIDDEN - Failed to reach implicit threshold of 1 sub-policies, required 1 remaining: permission denied
this time to find a lot of resolve Measures to address the idea is that a closer look at the orderer logs, look at it in the end which is a specific part of the problem,
seeing that most of the problems:
1) UTC [cauthdsl] deduplicate -> ERRO 014 Principal deserialization failure (at the supplied identity is not valid: x509: certificate signed by unknown authority (possibly because of "x509: ECDSA verification failure" while trying to verify candidate authority certificate "ca.org1.example.com")) for identity
Cause: due to start over network and update the certificate, start the volume before reuse without deleting clean environment, resulting certificate authentication fails.
Solution: Run the following command to delete the volume
docker-compose -f docker-compose- cli.yaml down --volumes --remove-orphans
docker rm -f $(docker ps -a | grep "hyperledger/*" | awk "{print \$1}")
docker volume prune
2) This is my own problem, deduplicate -> ERRO 2dd Principal deserialization failure (MSP OrdererMSP is unknown) for identity
In fact, this is not the creation of bodies inside the organization, initiated the transaction to create a channel
to view, docker-compose the configuration file - ORDERER_GENERAL_LOCALMSPID = OrdererMSP, organization name and configtx.yaml this value needs to be consistent in the configuration file, otherwise it will report the above error,
solution: keep the two sides agreed to modify