Forum Discussion

Michael_G_Ander's avatar
Michael_G_Ander
Level 6
8 years ago

wsl_account AD account problem on NBU 8.0 installation on Windows 2012 R2

I have run into a problem with the wsl_account when trying to install NBU 8.0 I keep getting that the domain cannot be resolved to a domain controller. Which is strange as I have no problem doing a...
Not Applicable
  • Michael_G_Ander's avatar
    Michael_G_Ander
    7 years ago

    In the latest update (New Netbackup.msi) only the 20 character limit is still there. 

    I am told that the findings will be put into the 8.1 installer and in the 81350 technote, which hopefully will get an Active Directory user section.

    So I will set this as solved. 

Marianne's avatar
Marianne
Level 6

My understanding is that you need to create a local user called nbwebsvc and local group nbwebgrp  as per  http://www.veritas.com/docs/000081350

If my understanding is incorrect, please let us know what Support says.

 

Michael_G_Ander's avatar
Michael_G_Ander
Level 6
8 years ago

Then it really does not make sense that you can choose an Active Directory account, if you have to create the account locally too.

Hope it is "just" something with secure environment we are running.

 

 

  • Michael_G_Ander's avatar
    Michael_G_Ander
    Level 6
    8 years ago

    Have managed to install Netbackup 8.0 using the NBPREINSTALL_CRITICAL_OVERRIDE YES option as described in http://www.veritas.com/docs/000020600 as suggested by the supporter

    But is not a way I want to install Netbackup 8.0 in the production enviroments, so the case is still open.

    EDIT: The NBPREINSTALL_CRITICAL_OVERRIDE YES option only functions when UAC is disabled it seems.

    Starting to get the feeling that this 8.0 installer has not been properly tested

     

    • Michael_G_Ander's avatar
      Michael_G_Ander
      Level 6
      8 years ago

      No luck so far, would help a lot if Veritas could tell what the preinstall check actually did in regards to the web service account.

      Has aksed for the support case to be escalated as we cannot have a program doing unknown things against our domain controllers.

  • tunix2k's avatar
    tunix2k
    Level 5
    8 years ago

    Hi Michael !

    Your problem makes me worry for future upgrades on customer side.

    As far as I understood both accounttypes are available local and domain.

    From the link Marianne posted:

    Note: In clustered environments, make sure local accounts are defined consistently on all cluster nodes.  For UNIX platforms, the UID must be the same for each local account

    which means for Windows OS:

    Note: You must use domain accounts in clustered environments on Windows.

     

    ciao

    tunix2k

    • Michael_G_Ander's avatar
      Michael_G_Ander
      Level 6
      8 years ago

      Yes in principle both local and domain account is available, but in practice it seems that using a domain account gives some challenges especially if you like us has secured our environment.

      As I see it, the problem is with the way the preinstall check tries to communicate with the domain controller, as it seems to work when you ignore the preinstall check with the override environment variable.

      • quebek's avatar
        quebek
        Moderator
        8 years ago

        Just to share with you mine findings...

        I was recently upgradning windows based NBU 772 master server to 8. All prerequistes describe in this TN were made. Unfortunately upgrade failed... And it failed that NBDB was not up and running... Once I get it working - after copying DB files from staging directory, it turned out that not all binaries, dll were rolled back properly... So I ended up with the NBU uninstall and fresh installation followed by catalog recovery. That was firts attempt.

        On second one attempt scenario was similar - but I had wider window to play with this environment. Installer failed on this step: "Unable to grant the log-on-as-service right to group "nbwebgrp". Please refer E:\Program Files\Veritas\NetBackup\wmc\WEBSERVER\logs\nbwmc_setupWmc.log for more details." I opened a case with VRTS support - thay did suggest this TN https://www.veritas.com/support/en_US/article.000125568 

        It did not help. So I asked my wintel team to grant the logon as a service the local group nbwebgrp. Again the upgrade failed - I was just starting yet another installation wizzard even though the NBU was in this strange state. Then I asked my wintel team to pull out this server from GPO which is managing these local security policies. I added than by using secpol.msc this user to logon as a service right... Started again the installer and this time it finished successfully. 

        So the outcome for me is like that - if GPO do manage the user rights assignmnets the upgrade is failing...

        After upgrade wintel team put back this server to GPO and this WEB server service is running without any issues. 

        Also I found out this one being useful https://www.veritas.com/support/en_US/article.000125106