why can't log in Netbackup java admin console(username invalid)?

Thank you Marianne

Your question in this discussion was about Java Console Login.
If this problem is resolved, please select the post that has helped you most and Mark As Solution.

DD permissions will probably be best addressed in EMC forum. I found this post there:

https://community.emc.com/docs/DOC-11923

HI, Marianne

Thank you . It helps me a lot.

Since our Windows master belongs to ACTIVE domain, so I asked domain administrator help create a ACTIVE domain user account for me.

1) the NBU services are running with ACTIVE domain user account "svc.scbackup"

2) The NBU master itself belongs to ACTIVE domain also

3) I add "srv-backup" to the local administrators......

I can access my Data domain CIFS share from NBU master, but I don't have write permission.....all the backups ended with status code 84.

here is my DD setting. May be I need to seek help from EMC forum for the DD configuration

sysadmin@shadd1# cifs share show
Shares information for: all shares

--------------- share backup ---------------
clients: 10.136.2.23
clients: 10.200.20.66
clients: 10.200.20.67
comment: This share can be accessed by Shanghai NBU master.
enabled: 1
path: /backup
users: ACTIVE\svc.scbackup
writeable: yes

No need for domain admin rights - just local admin rights on master server.

but I still have a question, the account "srv-backup" is only a domain user,not domain admin in active.local domain.

so I am wondering  if "domain admin" role is a MUST even if I configure auth.conf?

I am not sure if it is a MUST to make "srv-backup" a domain admin......

Thanks for all of you.

I at least understand why....

I will talk to domain admin.

yes, it seems

its missing Global Group memberships  for *Server_Service_Accts *Domain Admins

 i believe those are the things you require.. 

unfortunately srv-backup is the only acccount  I have.........

the domain account " srv-backup" has different settings on the two severs....

it has more permission on San jose NBU master. I think that is why I can connect with NBU directly via java console without creating auth.conf....

C:\Documents and Settings\srv-backup>hostname
sjcnbu1
C:\Documents and Settings\srv-backup>net user srv-backup /DOMAIN
The request will be processed at a domain controller for domain starcite.com.
User name                    srv-backup
Full Name                    srv-backup
Comment                      login servers to back them up
User's comment
Country code                 000 (System Default)
Account active               Yes
Account expires              Never
Password last set            10/25/2010 6:47 AM
Password expires             Never
Password changeable          10/26/2010 6:47 AM
Password required            Yes
User may change password     Yes
Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   11/19/2012 12:33 AM
Logon hours allowed          All
Local Group Memberships
Global Group memberships     *Exchange Organization*Exchange Domain Serve
                             *Server_Service_Accts *Domain Users
                             *Domain Admins
The command completed successfully.

C:\Documents and Settings\srv-backup>hostname
phlnbu1
C:\Documents and Settings\srv-backup>net user srv-backup /domain
The request will be processed at a domain controller for domain active.local.
User name                    srv-backup
Full Name                    srv-backup
Comment
User's comment
Country code                 000 (System Default)
Account active               No
Account expires              Never

Password last set            3/28/2012 4:36 PM
Password expires             Never
Password changeable          3/29/2012 4:36 PM
Password required            Yes
User may change password     Yes
Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   Never
Logon hours allowed          All

Local Group Memberships
Global Group memberships     *Domain Users
The command completed successfully.