jnbSA error: 526 unable to login

BTW: Is 1556 the only port which is involved? As far as I can read from docs it is.
 

jnbSA requires ports tcp/1556 and tcp/13724, both bi-directional.

The fact that you are allowed to perform traceroute all the way tell me that do don't have a firewall in-between.

I am however wondering of the following:

Non-authoritative answer:
Name:    i68448v1.sbb.ch
Address:  172.28.128.21

Pinging i68448v1.sbb.ch [172.28.32.159] with 32 bytes of data:
Reply from 172.28.32.159: bytes=32 time=1ms TTL=251

Seems there is somthing with the DNS record.

Port 1556 open bi-directional is enough for the GUI to work.

Thanks for your help but the problem has changed. We are some steps further and it looks like the newly installed NBU 7.6.1 Java GUI uses the wrong certificate to authenticate to the Master Server. In the log (/usr/openv/netbackup/logs/bpjava-msvc/root) I can see:

not_ok
15:19:10.863 [66715856] <16> session_dispatch: Request count = 0 tag = 510
15:19:10.864 [66715856] <2> populateCertificatePath: Certificate to be used for SSL [/usr/openv/var/vxss/credentials/i68448e1]
15:19:10.864 [66715856] <4> command_SECURE_CHANNEL_INIT: Using certificate [/usr/openv/var/vxss/credentials/i68448e1] and Responding SECURE_CHANNEL_PROCEED.
15:19:11.098 [66715856] <4> session_secure_lookup: Initiating SSL Accept
15:19:11.098 [66715856] <2> populateCertificatePath: Certificate to be used for SSL [/usr/openv/var/vxss/credentials/i68448e1]
15:19:11.151 [66715856] <16> VssAccept: (../../libVnbat/vss_auth.cpp,2226): vrtsAtSecConnAcceptEx returned FAILURE
15:19:11.152 [66715856] <16> tls_accept: io.c.3291: VssAccept( ) failed
15:19:11.152 [66715856] <16> session_secure_lookup: FAILED!! to accept SSL connection from client.Possibly this could be caused by a network blip, JavaGUI unable to authenticate X509 certificate that was presented OR user of JavaGUI interactively selected __NOT__ to trust X509 certificate presented.
15:19:11.152 [66715856] <16> session_dispatch: session_secure_lookup FAILED!!! fd =  0
15:19:12.153 [50725166] <16> poll_listen: can't find file descriptor in polling table
15:19:12.153 [50725166] <4> bpjava-msvc: NEW_LOG closing debugFD and seting NB_INVALID

Locally started the same Java GUI version looks like this:

ok
15:27:14.596 [50725328] <16> session_dispatch: Request count = 0 tag = 510
15:27:14.597 [50725328] <2> populateCertificatePath: Certificate to be used for SSL [/usr/openv/var/vxss/credentials/i68448v1.sbb.ch]
15:27:14.597 [50725328] <4> command_SECURE_CHANNEL_INIT: Using certificate [/usr/openv/var/vxss/credentials/i68448v1.sbb.ch] and Responding SECURE_CHANNEL_PROCEED.
15:27:14.871 [50725328] <4> session_secure_lookup: Initiating SSL Accept
15:27:14.871 [50725328] <2> populateCertificatePath: Certificate to be used for SSL [/usr/openv/var/vxss/credentials/i68448v1.sbb.ch]
15:27:14.889 [50725328] <4> tls_accept: io.c.3300: SSL Channel established for fd[0]
15:27:14.889 [50725328] <4> session_secure_lookup: SSL Connection Accepted!
15:27:14.948 [50725328] <16> session_dispatch: Request count = 1 tag = 118
15:27:15.383 [50725328] <16> session_dispatch: Request count = 2 tag = 101
15:27:15.435 [50725328] <16> command_LOGON_TO_MSERVER: putenv(BPJAVA_MASTER_IPC_STRING=) failed
15:27:15.459 [65142984] <16> isVxssActive: authentication determination failed, assume none required: (193) VxSS authentication is requested but not allowed

The name I used was i68448v1.sbb.ch in both cases. The error shown is 526 at the Java GUI. I tried different names and IP addresses in the "Host name" field but always the same result.

Question: Where is the (wrong) information stored? How does Java handle the name?

Thanks for a hint!

Matthias

When you attempt to connect you should get an error box the says something to the effect that the master server named i68448e1 does not match i68448e1.mydomain.com or some such. Can you post a snapshot of that error?

1. See if you can telnet to the master server on port 1556
2. Check to see if the PBX process is running on the master server

If the PBX is not running start it (/opt/VRTSpbx/bin/vxpbx_exchanged start). If it is running stop it and then restart it. 

If UAC is enabled on the desktop make sure you right click and use "Run as administrator".

Thanks for your hints!

Telnet to the Master Server on port 1556/13724 is fine, same as traceroute. PBX is surely running which is shown in the log above. A restart of PBX was done many times. UAC is enabled but I have the appropriate rights.

A route from Citrix host where the Java GUI is installed to the Master Server Backup Interface does NOT exist. Therefore we have an entry in the local hosts file:

172.28.32.159        i68448v1.sbb.ch            #Netbackup 7.5 SBB Cluster

This ensures that the Citrix Host is able to communicate with the Master Server BUT somewhere the name resolves to the correct interface which is called i68448e1 which is the first node of the cluster but the wrong host name. This is shown in the Java log above.

Where is the name translated/resolved?

Why the Java GUI 7.6.1 is not behaving like the old 32bit version of Java GUI 7.5.0.6 which was working before?
 

Thanks for all your precious hints

Matthias

Try flush DNS on Citrix host where the JAVA console is installed

and

/usr/opev/nebackup/bin/bpclntcmd -clear_host_cache   at master server

and try to login again

Appropriate rights and "Run as administrator" do not equate in UAC. Right click the icon and select "Run as Administrator".