Forum Discussion

inooo's avatar
inooo
Level 3
3 years ago

NetBackup Web Management Console not started.

Hi

When I start nbwmc on my netbackup5240,it occurs "NetBackup Web Management Console not started."

The logs of nbwmc list:

The target server 10.1.0.200 could not be authenticated.
The server name does not match any of the host names listed in the server's certificate.
Names listed in the server's certificate are:
DNS:jxgs5240

nbcertcmd: The -ping operation failed.
EXIT STATUS 8509: The specified server name was not found in the web service certificate

 

Then I try the solution of this:

  UNIX/Linux:

   1) /usr/openv/netbackup/bin/nbwmc -terminate
   2) /usr/openv/netbackup/bin/admincmd/nbcertconfig -u -i
   3) /usr/openv/netbackup/bin/admincmd/nbcertconfig -m
   4) On 8.0 and 8.1: /usr/openv/netbackup/bin/admincmd/nbcertconfig -t      

   6) /usr/openv/wmc/bin/install/configureWmc
   7) /usr/openv/wmc/bin/install/configureCerts
   8) /usr/openv/wmc/bin/install/setupWmc
   9) /usr/openv/netbackup/bin/nbwmc -start
  10) /usr/openv/netbackup/bin/nbcertcmd -getCACertificate
  11) /usr/openv/netbackup/bin/nbcertcmd -getCertificate -force
      If the operation fails, perform the steps at "Create a token" section then return to this step.
  11) Remove the /usr/openv/var/global/vxss/nbcertservice/install_token file

on the step 10,it also occur :

The target server 10.1.0.200 could not be authenticated.
The server name does not match any of the host names listed in the server's certificate.
Names listed in the server's certificate are:
DNS:jxgs5240
nbcertcmd: The -getCACertificate operation failed for server 10.1.0.200.
EXIT STATUS 8509: The specified server name was not found in the web service certificate

what can i do?

Thanks

Other
  • Hamza_H's avatar
    Hamza_H
    3 years ago
    Hello,
    This is exactly what the problem is, in your bp.conf file in the first SERVER entry you have the ip address,
    Try to edit the file and put the name instead of the ip address.
    And then go through that famous technote.
    And put back results.
    • inooo's avatar
      inooo
      Level 3
      3 years ago

      Thank for your reply

      I had tried it,but the result never changed

      • davidmoline's avatar
        davidmoline
        Level 6
        3 years ago

        Hi inooo 

        There seems to be a problem resolving the hostname of the appliance - is DNS setup correctly (both forward and reverse)? 

        You could try adding a static host file entry on the appliance that matches the IP address 10.1.0.200 to the (apparent) hostname of the appliance jxgs5240.

        Cheers
        David

  • Hamza_H's avatar
    Hamza_H
    Moderator
    3 years ago

    Hello,

    Please do as follows:

     

    - run the commands below and share the output:

    # bptestnetconn -frapv -s 

    # bptestnetconn -frapv -H

    # bpclntcmd -self

    also share the bp.conf command using the command cat -A /usr/openv/netbackup/bp.conf

    then try again the command nbcertcmd  -getCACertificate -server servers_name and share the output

    • inooo's avatar
      inooo
      Level 3
      3 years ago

      output of bptestnetconn -frapv -s

       

      output of bptestnetconn -frapv -H

      output of bpclntcmd -self

       

      bp.conf

      output of nbcertcmd  -getCACertificate -server

       

      Today I find a possible cause of this problem

      When I run the command "/usr/openv/netbackup/bin/admincmd/nbcertconfig -t"

      The cert file under /usr/openv/var/global/vxss/tomcatcreds/nbwebsvc/.VRTSat/profile/certstore only renew the ebbdf5b5-10.1.0.200!1556!nbatd!1556.0

      The file named f65dd416-jxgs5240!1556!nbatd!1556.0 would not be renewed

      Maybe if renew it can solve this problem?

      I don't know how to renew it

       

       

    • Hamza_H's avatar
      Hamza_H
      Moderator
      3 years ago
      Hello,
      This is exactly what the problem is, in your bp.conf file in the first SERVER entry you have the ip address,
      Try to edit the file and put the name instead of the ip address.
      And then go through that famous technote.
      And put back results.
      • davidmoline's avatar
        davidmoline
        Level 6
        3 years ago

        Additionally, the hostname is defined as the IP address as per the output from "bpclntcmd -self". 

        Does this appliance have valid backups on it? It may be prudent to perform a factory reset and start again (you are unable to change the hostname once set). 

        David