Hi,
I testing configure netbackup with cloud storage. My env:
- Netbackup: 8.1.1
- DELL EMC ECS: 3.4 Community Edition
- "Use SSL" - uncheck
When config error happen " Login credentials or certificate verification failed for server master.nbu.dat. Please see tpconfig logs for further details. Login credentials or certificate verification failed for server "master.nbu...". Please see tpconfig logs for further details"
Thanks
hi xthesolarisx
See if any of thebelow 3 articles help resolve your issue.
https://www.veritas.com/support/en_US/article.100046005
https://www.veritas.com/support/en_US/article.100033608
https://www.veritas.com/support/en_US/article.100047501
You may need to set up tpcommand logging (refer https://www.veritas.com/support/en_US/article.100022287 for details on setting this up) to capture the relevant logs.
I suspect you will also need to enable SSL for the connection (any reason for disabling this?). If the above do not help, then you will need to provide more details - in particular the tpcommand logs.
Cheers
David
Thanks davidmoline
I change topology to Netbackup -> LB (HAProxy) -> ECS and use SSL between Netbackup and LB. I try use S3 Browser with SSL/TLS connected successfull to LB (can download, upload file to ECS). But still facing problem with Netbackup.
Some troubleshoot logs:
- tpcommand logging:
AmzResiliency: CommonCurlResiliency::getRetryType entry.. AmzResiliency: CommonCurlResiliency::getRetryType CURL Error : 60 AmzResiliency: CommonCurlResiliency::getRetryType No retry for CURL error 60 AmzResiliency: RetryType : RETRY_NOT_APPLICABLE AmzResiliency: CommonCurlResiliency::getRetryType leave.. AmzResiliency: RetryType : RETRY_NOT_APPLICABLE AmzResiliency: AmzResiliency::getRetryType cURL error: 60, multi cURL error: 0, HTTP status: 0, XML response: None, RetryType: RETRY_NOT_APPLICABLE
- ./vxsslcmd s_client -showcerts -connect ecs.nbu.dat:443
Certificate chain 0 s:/C=XXX/ST=XXX/L=XXX/O=XXX/OU=XXX/CN=XXX/emailAddress=XXX i:/C=XXX/ST=XXX/L=XXX/O=XXX/OU=XXX/CN=XXX/emailAddress=XXX -----BEGIN CERTIFICATE----- MIIEBDCCAuygAwIBAgIJAMY+GM2/+6+bMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYD VQQGEwJWTjELMAkGA1UECAwCVk4xDzANBgNVBAcMBkhhIG5vaTEQMA4GA1UECgwH dmlldHRlbDENMAsGA1UECwwEdmhrdDEUMBIGA1UEAwwLZWNzLm5idS5kYXQxJDAi BgkqhkiG9w0BCQEWFWRhdGFsYWtlQGRhdGFsYWtlLmRhdDAeFw0yMDEwMjAwNTI0 MTNaFw0yMDExMTkwNTI0MTNaMIGIMQswCQYDVQQGEwJWTjELMAkGA1UECAwCVk4x DzANBgNVBAcMBkhhIG5vaTEQMA4GA1UECgwHdmlldHRlbDENMAsGA1UECwwEdmhr dDEUMBIGA1UEAwwLZWNzLm5idS5kYXQxJDAiBgkqhkiG9w0BCQEWFWRhdGFsYWtl QGRhdGFsYWtlLmRhdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO2h jOogU7bXIIeEejdroMYSCWB/mIYxf0n+wq/8zC29MHo4qp96Ur9OeavNPtVeQTqV XzSs97LwdVZtvKCvPoTqJ0A66+BxttD8smz3elCVzc4o33euseZVZxUgzerLbx3n gUVmbeIPbLctFpdHkKho2d6h/MkiPr/dT3HmJGo+2A1dOak2du6oSxm9+WzEiK4f QNoYSguJZ2wouXEGQ5eqPtVr8+/xX5zC+1yDNuThxj0Qo8z+y+Ern1bH5QUwe3Bw tzqXUArXFs8qvxRhR4kX9K2LFjRX1SXUvr29K+u9JdNhphxORdq+0f5f/7wGtGDc VJvhy6gjOMVIZ+MCqp8CAwEAAaNvMG0wHAYDVR0RBBUwE4ILZWNzLm5idS5kYXSH BMCoD3UwCwYDVR0PBAQDAgXgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMB0GA1UdDgQW BBSct0Ar5jw7UgejfBzcuEfWJJk69DAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEB CwUAA4IBAQDFN0cYZqYMPlFscOh3Ld6CltAoCwWGnOsyUt/ElGXbbP8Nu7FTaKLE NbBTY00j+5CmUQcruuE+Ol/+vn9+ymX7zCvJu46OKj70lsbgFbv2yFHlZmKA/IgY 8rdFTmEuw0rqBR0M26KC6E3d2op2sD4TBUJv8Akg1mn58kK2JXirpuTn5sSHKnZA fHBlFhqL+Axk2JtBq1Y7Y1jMwABpGSbOu+NYj+NEssa6/d7llri6kgxkt4BkB4Fd NGAkx8cyWVAomzdUUGWrSXOJw/DGcxwXS1slFZDyWKwkc1rAfkX1aLDsJeG+bJFv VVAWQiQFhJ8W3igf9bDDMxOhsYznWK2Z -----END CERTIFICATE-----
Thanks
Hi xthesolarisx
I suspect you have a CA certificate issue. The error 60 is probably meaning the peer certificate cannot be authenticated with given CA certificates. You could try adding the parameter "ENABLE_NBCURL_VERBOSE=1" to bp.conf to see if more details are forthcoming in the logs.
In the meantime, have a look at this article about how to add a vendor CA certificate to NetBackaup https://www.veritas.com/support/en_US/article.100032993
Cheers
David
