Backup Active Directory GRT

[Emeric_Berceau]

Hello,

I have a problem with backup an Active Directory with GRT.

Netbackup version: 7.1.0.4

Media Server : Windows 2008 R2 Ent SP1 

Client : Windows 2008 R2 Ent SP1 (domain controler)

Policy type : MS-Windows

First, i don't have any problem with ports, same domain and they are not used by ghost process.

Second, i install Services NFS on both servers (disable the Server for NFS on both, the Client for NFS works properly)

Here's the log of the backup :

13 mai 2013 14:15:33 - Info nbjm (pid=4387) starting backup job (jobid=404889) for client adserver.server.fr, policy cl_sys_DC_w2k8_test, schedule AD

13 mai 2013 14:15:33 - Info nbjm (pid=4387) requesting STANDARD_RESOURCE resources from RB for backup job (jobid=404889, request id:{CF4D05B8-BBC6-11E2-B21A-6A843B38F710})

13 mai 2013 14:15:33 - requesting resource testad

13 mai 2013 14:15:33 - requesting resource obelisk.NBU_CLIENT.MAXJOBS.adserver.server.fr

13 mai 2013 14:15:33 - requesting resource obelisk.NBU_POLICY.MAXJOBS.cl_sys_DC_w2k8_test

13 mai 2013 14:15:33 - granted resource  obelisk.NBU_CLIENT.MAXJOBS.adserver.server.fr

13 mai 2013 14:15:33 - granted resource  obelisk.NBU_POLICY.MAXJOBS.cl_sys_DC_w2k8_test

13 mai 2013 14:15:33 - granted resource  MediaID=@aaabj;Path=E:\TestAD;MediaServer=mediaserver

13 mai 2013 14:15:33 - granted resource  testad

13 mai 2013 14:15:33 - estimated 0 kbytes needed

13 mai 2013 14:15:33 - Info nbjm (pid=4387) started backup job for client adserver.server.fr, policy cl_sys_DC_w2k8_test, schedule AD on storage unit testad

13 mai 2013 14:15:33 - started process bpbrm (pid=4540)

13 mai 2013 14:15:38 - Info bpbrm (pid=4540) adserver.server.fr is the host to backup data from

13 mai 2013 14:15:38 - Info bpbrm (pid=4540) reading file list from client

13 mai 2013 14:15:38 - connecting

13 mai 2013 14:15:41 - Info bpbrm (pid=4540) starting bpbkar32 on client

13 mai 2013 14:15:41 - connected; connect time: 0:00:00

13 mai 2013 14:15:43 - Info bpbkar32 (pid=3892) Backup started

13 mai 2013 14:15:43 - Info bptm (pid=3836) start

13 mai 2013 14:15:43 - Info bptm (pid=3836) using 262144 data buffer size

13 mai 2013 14:15:43 - Info bptm (pid=3836) setting receive network buffer to 1049600 bytes

13 mai 2013 14:15:43 - Info bptm (pid=3836) using 30 data buffers

13 mai 2013 14:15:44 - Info bptm (pid=3836) start backup

13 mai 2013 14:15:44 - Info bptm (pid=3836) backup child process is pid 1636.5940

13 mai 2013 14:15:44 - Info bptm (pid=1636) start

13 mai 2013 14:15:44 - begin writing

13 mai 2013 14:18:21 - Error bpbrm (pid=4540) from client adserver.server.fr: ERR - Unable to initialize nbfsd.

13 mai 2013 14:55:17 - Error bpbrm (pid=4540) from client adserver.server.fr: ERR - Error encountered while attempting to get additional files for System State:\

13 mai 2013 15:12:45 - Info bptm (pid=3836) waited for full buffer 34461 times, delayed 219270 times

13 mai 2013 15:12:46 - Info bptm (pid=3836) EXITING with status 0 <----------

13 mai 2013 15:12:46 - Info bpbrm (pid=4540) validating image for client adserver.server.fr

13 mai 2013 15:12:47 - end writing; write time: 0:57:03

13 mai 2013 15:12:52 - Info bpbkar32 (pid=3892) done. status: 1: the requested operation was partially successful

the requested operation was partially successful  (1)

Then i try to make a restore of an AD object but seems that the GRT didn't works properly.

Thank's for helping me.

[Dyneshia]

This is deinfalty an issue with NFS

To manully test NFS , please review and follow : http://www.symantec.com/docs/TECH124810  - How to manually test NetBackup Granular Restore

Technology (GRT) NFS connections between media server and client

Ports 111 ( port map) ,  and 7394 (nbfsd )  need to be open bi-directional on all servers in the DAG and to the Master and media server..

Client for NFS should be running on all servers in the DAG.

Server for NFS should  be listed but not running on the media server.

[Emeric_Berceau]

Thank you for your answer, i did test and NFS works properly.

Both servers are on the same network, no problem with ports, client for nfs is running on media and server for nfs is set to "manual" on both.

Windows firewall is disable.

I got the same error again :  ERR - Unable to initialize nbfsd

[Dyneshia]

Please upload the \netbackup\logs\nbfsd log for review.

Are there any errors in the event viewer ?

[Emeric_Berceau]

I don't have any errors in event logs

Log joined, thanks.

Hope you will find something ^_^;

[Dyneshia]

FRom your log

15:35:59.629 [4696.1856] <2> cred_decode_and_validate: dec failed
15:35:59.629 [4696.1856] <16> svc_mount3_nbfsd_ops: decode/validate/get cred failed

Please review http://www.symantec.com/docs/TECH181971

[Emeric_Berceau]

It is recommended to run client for NFS on windows 2003 R2 and windows 2008 servers with default Network service account.

Client for NFS does not require domain adminstrator account  for GRT specific tasks

It runs with Network service account on both server. I add my media server address ip in host file and get this error :

14 mai 2013 19:11:13 - Info bpbrm (pid=5680) from client adserver.fr: TRV - Starting granular backup processing for (System State\Active Directory). This may take a while... 

14 mai 2013 19:11:17 - Error bpbrm (pid=5680) from client client adserver.fr: ERR - Unable to obtain image list. Confirm this client has access to images on server 'masterserver.fr' for client 'client adserver.fr'

14 mai 2013 19:11:17 - Error bpbrm (pid=5680) from client client adserver.fr: ERR - Refer to the 'Configuring the hosts for backups that use Granular Recovery Technology (GRT) in virtual environments' section of the Exchange Administrator's Guide for more information

14 mai 2013 19:11:17 - Info bpbrm (pid=5680) from client client adserver.fr: TRV - Granular processing failed! 

The master server is an unix. I think that there is an option to allow access to browse file but i'm not sure.

I find in client attribute (under master server properties) "Browse and Restore ability" set to Use global settings and "Free Browse" set to Permit access.

Global settings permit browse and restore. Or in client settings > Access Control set to Prohibit.

Thanks for your help.

[Emeric_Berceau · Accepted solution]

Hi there,

I try to back Shadow Copy Components (in replacement of System State only) and the backup GRT works properly with status 0.

Thank you for your help, it show me other possibilities in solving problems.