Cannot login to admin console using jnbSA

Question

Hi,Needed help with connection to the admin console.Netbackup version 8.0Master server: RHEL 6.2I am attempting to open the admin console by directly connecting a display to the master server.On attempting to open Netbackup admin console using /usr/open/java/jnbSA, I was getting the below error."NetBackup could not initiate a trust relationship with host hostname. Ensure that your Domain Name Service (DNS) resolves the hostname to the correct IP address and check network connectivity".&nbsp;Found this article which stated it is due to nbatd service not running.https://www.veritas.com/support/en_US/article.100014059&nbsp;On checking the running services using ./bpps -x, I found that nbatd service is not found to be running. (Attachment- bpps output_1)Tried restarting the services as mentioned in the article, 'If nbatd is not mentioned as running on the system, restarting NetBackup would solve the problem', it was not of any help as nbatd did not come up.Tried a /usr/openv/netbackup/bin/nbatd as well, but no use.Also, in the attachment (bpps output_1), we can see the nbwmc service running. However, on running bpps within the next 5 seconds, that service seems to be missing.Then, tried the steps as mentioned in the marked solution in the discussionhttps://vox.veritas.com/t5/NetBackup/Netbackup-could-not-initiate-a-trust-relationship-with-host/td-p/773792Deleted the folder with the master server name, restarted services, and tried /usr/openv/netbackup/bin/jnbSA.New error pops up"The host does not have Netbackup Hostname based security certificate installed. The certificate is mandatory to establish a secure connection"Reverted the changes from the backup copy of the files.&nbsp;Tried the steps as mentioned in the marked solution of the discussion,https://vox.veritas.com/t5/NetBackup/nbatd-is-failing-to-start/m-p/689744&nbsp;Error:[root@prdspnbapp01 bin]# /usr/openv/netbackup/bin/admincmd/bpnbaz -ConfigureAuthYou will have to restart NetBackup services on this machine after the command completes successfully.Do you want to continue(y/n)yGathering configuration information.ERROR: Failed to start security services - /usr/openv/netbackup/bin/nbatd -fUnable to fork child process.On searching some more, I stumbled upon this. (Attachment- nbcertcmd)I found out that a certificate has expired on March 27, 2019. I tried steps to renew it, but to no avail.I changed the system date to February, and the console started up, however with an error message stating that the Netbackup Web Management service is not running.&nbsp;Could I have some help with getting nbatd and nbwmc up and running, and the admin console running without having to change the system date to some old date?Regards,Ajo

marianne · Answer

My knowledge about NBU 8.x security is unfortunately non-existent...I was hoping that&nbsp;Amol_Nair&nbsp;could assist here.
Please read through this discussion that seems to be more relevant than the NBU 7.6 discussion:https://vox.veritas.com/t5/NetBackup/How-to-renew-NBU-812-Master-Server-security-certificate/td-p/857979

amol_nair · Answer

You really shouldn't be running bpnbaz configureAuth and other commands without really understanding what things it affects. With the new certificates in place, just running any such random command would eventually end up breaking everything.

In your case the 1st thing that we need to concentrate on is getting nbatd running on the master server, without nbatd running the bpnbaz command failing is pretty understandable.

Could you check if there are any files with .0 in the below path. You could directly run the below command to validate this information.

ls -la /usr/openv/var/global/vxss/eab/data/root/.VRTSat/profile/certstore/*.0

If you see a couple of such files kindly move them to say /tmp. *** Only the .0 files. Please do not move or touch anything else.

Once you move it try to restart NetBackup services including pbx and check whether nbatd starts. If it still fails to start then I would say reviewing nbatd logs would give us the correct path to proceed ahead.

amol_nair · Answer

CA certificate would not really expire.. Its issued until 2038. In your case I believe it would either have been the tomcat certificate or the host id certficate that may have expired.. And I guess when you raised a support case the complete reconfiguration of nbwmc was done..Out here since nbatd itself is not running trying to reconfigure nbwmc would not really help. But yes logging a support call is definitely recommended in such scenarios rather than running random command which may eventually complicate things further and we may need to go with a complete catalog recovery with fresh installation to get things back in place.

ajojoy91 · Answer

bpps output_1:[root@prdspnbapp01 bin]# ./bpps -aNB Processes------------root 15585 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/vnetd -standaloneroot 15590 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/bpcd -standaloneroot 15607 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/nbdiscoroot 15725 1 42 11:50 ? 00:02:21 /usr/openv/db//bin/NB_dbsrv @/usr/openv/var/global/server.conf @/usr/openv/var/global/databases.conf -hn 5root 15796 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/nbevtmgrroot 15803 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/nbauditroot 15927 1 0 11:50 ? 00:00:01 /usr/openv/netbackup/bin/nbemmroot 15933 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/nbrbroot 15964 1 0 11:50 pts/3 00:00:00 /usr/openv/netbackup/bin/bprdroot 15983 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/bpcompatdroot 15988 1 0 11:50 pts/3 00:00:00 /usr/openv/netbackup/bin/bpdbmroot 15996 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/nbjmroot 16001 15988 0 11:50 pts/3 00:00:00 /usr/openv/netbackup/bin/bpjobdroot 16013 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/nbpemroot 16034 16013 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/nbproxy dblib nbpemroot 16044 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/nbstservroot 16083 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/nbrmmsroot 16168 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/nbslroot 16218 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/nbimroot 16248 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/nbarsroot 16449 15988 0 11:50 pts/3 00:00:00 /usr/openv/netbackup/bin/bpdbmroot 16450 15996 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/nbproxy dblib nbjmroot 16526 1 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/nbsvcmonroot 16797 16083 0 11:50 ? 00:00:00 /usr/openv/netbackup/bin/admincmd/bpstsinfo -DPSPROXYroot 17138 16013 0 11:51 ? 00:00:00 /usr/openv/netbackup/bin/nbproxy dblib nbpem_cleanupnbwebsvc 18138 1 99 11:55 ? 00:02:40 /usr/openv/java/jre/bin/java -Dnop -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Dnbwmc -Xrs -d64 -Xms512m -Xmx1024m -Djava.library.path=/usr/openv/lib -DNB_HOSTNAME=prdspnbapp01 -DNB_INSTALL_DIR=/usr/openv -DVAR_GLOBAL=/usr/openv/var/global -Djava.util.logging.config.file=/usr/openv/wmc/config/tomcat.logging.properties -Dvrts.NBJAVA_CONF=/usr/openv/wmc/config/nbj.conf -Dvrts.common.utilities.DEBUG_PROPERTIES=/usr/openv/wmc/config/Debug.properties -Dlog.conf.path=/usr/openv/netbackup/nblog.conf -Dvrtsat.home=/usr/openv/netbackup/sec/at -Dvrtsat.datadir=/usr/openv/var/vxss -Djdk.tls.ephemeralDHKeySize=2048 -Djdk.tls.rejectClientInitiatedRenegotiation=true -XX:ErrorFile=/usr/openv/wmc/webserver/logs/hs_err_pid%p.log -Djava.endorsed.dirs=/usr/openv/wmc/webserver/endorsed -classpath /usr/openv/wmc/webserver/bin/bootstrap.jar:/usr/openv/wmc/webserver/bin/tomcat-juli.jar -Dcatalina.base=/usr/openv/wmc/webserver -Dcatalina.home=/usr/openv/wmc/webserver -Djava.io.tmpdir=/usr/openv/wmc/webserver/temp org.apache.catalina.startup.Bootstrap startMM Processes------------root 15944 1 0 11:50 pts/3 00:00:00 /usr/openv/volmgr/bin/ltidroot 15951 1 0 11:50 pts/3 00:00:00 vmd -vroot 16454 15944 0 11:50 pts/3 00:00:00 tldd -vroot 16455 15951 0 11:50 pts/3 00:00:00 rdevmi -sockfd 14 -p 50 -rroot 16471 15944 0 11:50 pts/3 00:00:00 avrd -vroot 16481 1 0 11:50 pts/3 00:00:00 tldcd -v&nbsp;&nbsp;nbcertcmd:[root@prdspnbapp01 bin]# ./nbcertcmd -getCAcertificatenbcertcmd: The -getCACertificate operation failed for server prdspnbapp01.EXIT STATUS 8506: The certificate has expired.[root@prdspnbapp01 bin]# ./nbcertcmd -getCAcertificatenbcertcmd: The -getCACertificate operation failed for server prdspnbapp01.EXIT STATUS 8506: The certificate has expired.[root@prdspnbapp01 bin]# ./nbcertcmd -getCAcertificatenbcertcmd: The -getCACertificate operation failed for server prdspnbapp01.EXIT STATUS 26: client/server handshaking failed[root@prdspnbapp01 bin]# ./nbcertcmd -getcertificateEXIT STATUS 5950: Certificate already exists.[root@prdspnbapp01 bin]# ./nbcertcmd -listcacertdetailsSubject Name : /CN=nbatd/OU=root@prdspnbapp01/O=vxStart Date : Jan 28 09:29:48 2014 GMTExpiry Date : Jan 23 10:44:48 2034 GMTSHA1 Fingerprint : AB:E5:C9:48:78:0C:2A:CF:69:2A:C7:9B:CC:93:A4:8A:39:06:4A:31Operation completed successfully.[root@prdspnbapp01 bin]# ./nbcertcmd -listcertdetailsMaster Server : prdspnbapp01Host ID : be819324-0697-43a6-9f92-957b74409288Issued By : /CN=broker/OU=root@prdspnbapp01/O=vxSerial Number : 0x6abadd960000000aExpiry Date : Mar 27 09:53:05 2019 GMTSHA1 Fingerprint : 58:AB:F0:07:F5:C4:59:9A:6C:F0:D0:24:5E:93:44:F5:58:F7:78:2FOperation completed successfully.&nbsp;

mike_gavrilov · Answer

Try to start nbatd manually:
# export LD_LIBRARY_PATH=/usr/openv/netbackup/sec/at/lib/
# /usr/openv/netbackup/bin/private/nbatd -c /usr/openv/var/global/vxss/eab/data
and after that try to start WMC:
# /usr/openv/netbackup/bin/nbwmc
&nbsp;

Forum Discussion

Cannot login to admin console using jnbSA

7 Replies

Related Content

Netbackup Administrator Console

NBU java admin console Unable to login status

NB-Java Console Login issue

NBU java admin console Unable to login status

Java Console

Recent Discussions

"failed, status 6" error after increasing datastore (LUN) capacity

command: bperror

MS-SharePoint policy restore error (2804) .

How to restore a backup

How to configure RBAC