NBAC 7.1 Solaris - root being denied
Hello everyone,
I currently have a case opened (for any Symantec rep, its case #: 415-215-656) to figure out why the root user id and password on the Solaris 10 netbackup master is being denied during bpnbat login. The Netbackup master server has existed for a long time and has been recently upgraded from version 6.5.6 to 7.1.0.1. During the setup of NBAC on the master, we were being denied for the unixpwd account of root and its password (we verified we were typing it correct by sshing into the box with the same credentials) so we had to use another local admin on the box. The account we used for the local admin does not have permissions to create another fsa or add users to a particular group. When you try to login with root, it is still being denied access. We do not use NIS or NISPLUS in the environment, and we verified the local root account on the box.
I still have some files under /opt/VRTSaz, but no /opt/VRTSat exists. The new directories for this under 7.1 exist under /usr/openv/netbackup/sec/at and /usr/openv/netbackup/sec/az respectively.
bp.conf entries exist below:
AUTHENTICATION_DOMAIN = masterservernamehere "ADDED AUTOMATICALLY" PASSWD masterservernamehere 0 exists in the bp.conf file (i've edited out the master server name for the sake of this post)
AUTHORIZATION_SERVICE = masterservernamehere 0
USE_VXSS = AUTOMATIC
VXSS_SERVICE_TYPE = INTEGRITYANDCONFIDENTIALITY
If this was 6.5 i would just simply uninstall the ICS packages and install them back, but since this is 7.1 and they integrated the packages, I have no idea how to do this anymore. Even my current support engineer is scratching his head at this time.
Does anyone out there have any idea?
After backline support, and building a secondary master server to test NBAC on that (which worked beautifully and took only 30 seconds to perform), there seems to be particular binaries missing. Unfortunately since they do not have any switch integration to their installs and removed the installics as a separate install, we will be forced to rebuild the master server and restore the catalog. I've put in a request that individual packages also have some uninstall and install command line switches to the packages for future "repair" situations.