title: Hyperledger Fabric - identity 0 does not satisfy principal: The identity is a member of a different MSP
body: <p>I am trying to update an existing channel in hyperledger fabric using the node sdk. I am simply trying to increase the batchsize from 10 to 11 (as can be found in the official config update example). My config update looks as follows:</p>
  
  <pre><code>{
    "channel_id": "mychannel",
    "read_set": {
      "groups": {
        "Orderer": {}
      }
    },
    "write_set": {
      "groups": {
        "Orderer": {
          "values": {
            "BatchSize": {
              "mod_policy": "Admins",
              "value": {
                "absolute_max_bytes": 102760448,
                "max_message_count": 11,
                "preferred_max_bytes": 524288
              },
              "version": "1"
            }
          }
        }
      }
    }
  }
  </code></pre>
  
  <p>The user enrollment looks as follows:</p>
  
  <pre><code>ORG1_TOKEN=$(curl -s -X POST \
    http://localhost:4000/users \
    -H "content-type: application/x-www-form-urlencoded" \
    -d 'username=jim&amp;orgName=org1')
  </code></pre>
  
  <p>I run the network on Docker containers and use version 1.0.2 of all images and binaries.</p>
  
  <p>I created an update-channel.js function, very similar to the <a href="https://github.com/hyperledger/fabric-samples/blob/release/balance-transfer/app/create-channel.js" rel="nofollow noreferrer">create-channel.js</a> function in the app folder of the balance transfer example. I use the configtxlator to convert the json update into a binary:</p>
  
  <pre><code>superagent.post('http://127.0.0.1:7059/protolator/encode/common.ConfigUpdate',
              configFile)
              .buffer()
              .end((error, res) =&gt; {
                  error ? reject(error) : resolve(res.body);
              });
  </code></pre>
  
  <p>When I sign and push the updated config to the orderer I get the following error message:</p>
  
  <pre><code>0xc42011e558 identity 0 does not satisfy principal: The identity is a
     member of a different MSP (expected OrdererMSP, got Org1MSP)
  principal evaluation fails 
  ... 
  Rejecting CONFIG_UPDATE because: Error
     authorizing update: Error validating DeltaSet: Policy for [Values]
     /Channel/Orderer/BatchSize not satisfied: Failed to reach implicit
     threshold of 1 sub-policies, required 1 remaining
  </code></pre>
  
  <p>I can imagine that the problem is related to the fact that I enrolled a user for Org1. Would my solution be to enroll a user on the OrdererOrg (is that even possible)? Or do I need to change my config update json?</p>