cancel
Showing results forΒ 
Search instead forΒ 
Did you mean:Β 

Configuring NetBackup cloud storage with Amazon Simple Storage Service (S3)

R1234
Level 3

Hi I am trying to configure Netbackup 7.6 cloud storage server with Amazon S3 on my local server. Both my media and master server is my localhost. My license is up to date. All the netbackup services are up and running.

I have completed the following requirements before trying to create the cloud storage server:

-> Set Host Properties > Masterserver > Logging to 5

-> My ost-plugin directory includes the following binaries:

cacert.pem           libstspiatt.so        libstspigatewayMT.so   libstspipd.so           libstspisoapwrapperMT.so  meter
cloudstore.conf      libstspiattMT.so      libstspimetering.so    libstspipdMT.so         libstspithrottling.conf   pd.conf
cssc.crt             libstspiencrypt.so    libstspimeteringMT.so  libstspirackspace.so    libstspithrottling.so     zapi
libstspiamazon.so    libstspiencryptMT.so  libstspinirvanix.so    libstspirackspaceMT.so  libstspithrottlingMT.so
libstspiamazonMT.so  libstspigateway.so    libstspinirvanixMT.so  libstspisoapwrapper.so  libstspizapiMT.so

-> tpcommand log file shows the following errors:

09:52:19.127 [4558] <2> MM_read_master_config: Couldn't stat /usr/openv/volmgr/vm.conf
09:52:19.138 [4558] <4> tpconfig: emmserver_name = localhost
09:52:19.138 [4558] <4> tpconfig:main(): /usr/openv/volmgr/bin/tpconfig -add -storage_server amazon.com -stype amazon_raw -sts_user_id AKIAITAPVZRI47FEHLVA -password ***** -key 96e123932f9937b4726908642780c1d7 -noverbose
09:52:19.139 [4558] <2> mm_getnodename: cached_hostname localhost.localdomain, cached_method 3
09:52:19.158 [4558] <2> mm_ncbp_gethostname: GetNBUName <localhost>
09:52:19.158 [4558] <2> mm_getnodename:  (5) hostname localhost (from mm_ncbp_gethostname)
09:52:19.158 [4558] <4> InitThisHostName: ThisHost is localhost
09:52:19.158 [4558] <4> tpconfig: emmserver_port = 1556
09:52:19.162 [4558] <2> emmlib_initialize: (-) Connection attempt #<0>


..

..

..

09:52:19.173 [4558] <2> ConnectList::search: host 10.0.0.35 not found in cache(ConnectList.cpp:118)
09:52:19.173 [4558] <2> ExternalResolver::set: Resolved host_name 10.0.0.35[10.0.0.35](ExternalResolver.cpp:73)
09:52:19.173 [4558] <2> EndpointSelector_R2::performCallUsingEndpointAndSourceBinding: epsr2: Target: 10.0.0.35, source: ANY(Endpoint_Selector.cpp:1015)
09:52:19.173 [4558] <2> VxssContext::updateOnFailure: epsr2: updateOnFailure?=1 useVxss=2(Endpoint_Selector.cpp:243)
09:52:19.173 [4558] <2> EndpointSelector_R2::performCallUsingEndpoint: epsr2: insecure invocation->perform_call(...) to host 10.0.0.35 SUCCESS(Endpoint_Selector.cpp:1224)
09:52:19.173 [4558] <2> ConnectList::update: added host 10.0.0.35 (2 total) as GOOD(ConnectList.cpp:216)
09:52:19.173 [4558] <2> ConnectList::search: host 192.168.72.1 not found in cache(ConnectList.cpp:118)
09:52:19.173 [4558] <2> ConnectList::search: host 172.16.116.1 not found in cache(ConnectList.cpp:118)
09:52:19.173 [4558] <2> VxssContext::end: epsr2: all done? passes=1 curridx=1(Endpoint_Selector.cpp:193)
09:52:19.174 [4558] <2> Orb::connectToObjectOnce: connection created(Orb.cpp:1149)
09:52:19.175 [4558] <2> EndpointSelector_R2::select_endpoint: epsr2: EPS Honoring Server List(Endpoint_Selector.cpp:535)
09:52:19.175 [4558] <2> EndpointSelector_R2::endpoint_from_profile: epsr2: Evaluating 3 endpoints(Endpoint_Selector.cpp:651)
09:52:19.175 [4558] <2> ConnectList::search: host 10.0.0.35 found GOOD(ConnectList.cpp:91)
09:52:19.175 [4558] <2> EndpointSelector_R2::endpoint_from_profile: epsr2: Reusing endpoint, target: 10.0.0.35, source: ANY(Endpoint_Selector.cpp:713)


..

..

..

Mon, 01 Dec 2014 04:22:19 GMT
/
09:52:29.958 [4558] <2> localhost: amazon: response from Amazon :<?xml version="1.0" encoding="UTF-8"?>
<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>9FCD6CFB6719709B</RequestId><HostId>a3Ncng7GUUk0g7zryAEt+VRhbVY6dDkp9GAb/kSzTTooVBgs6F3kNUYS+SDvw0X8</HostId></Error>
09:52:29.959 [4558] <2> localhost: amazon: CURL Status : 0 , httpcode : 403 ,interr_retry : 6, retryInterval : 2
09:52:29.960 [4558] <16> localhost: amazon: Error checking credential, HTTP code 403, server error code AccessDenied, Access Denied
09:52:29.960 [4558] <16> sts_logmsg: Invalid severity code specified.

09:52:29.960 [4558] <2> localhost: amazon: AmzRestHeaders destructor new
09:52:29.960 [4558] <2> localhost: amazon: leave stspi_open_server
09:52:29.960 [4558] <16> localhost: libsts opensvh() 14/12/01 09:52:29: v11_open_server failed in plugin /usr/openv/lib/ost-plugins/libstspiamazon.so err 2060001
09:52:29.960 [4558] <16> localhost: metering: Failed to open a new session, return: 2060001
09:52:29.960 [4558] <2> localhost: metering: leaving stspi_open_server
09:52:29.960 [4558] <16> localhost: libsts opensvh() 14/12/01 09:52:29: v11_open_server failed in plugin /usr/openv/lib/ost-plugins/libstspimetering.so err 2060001
09:52:29.960 [4558] <16> localhost: [throttling_open_server_v7]fail to open server of the next plugin in stack, return code: 2060001
09:52:29.960 [4558] <2> localhost: [throttling_open_server_v7]leave.
09:52:29.960 [4558] <16> localhost: libsts opensvh() 14/12/01 09:52:29: v11_open_server failed in plugin /usr/openv/lib/ost-plugins/libstspithrottling.so err 2060001
09:52:29.960 [4558] <16> localhost: gateway: Failed to open a new session, return: 2060001
09:52:29.960 [4558] <16> localhost: libsts opensvh() 14/12/01 09:52:29: v11_open_server failed in plugin /usr/openv/lib/ost-plugins/libstspigateway.so err 2060001
09:52:29.960 [4558] <16> Valid_STS_Server: Failed to open server connection to type amazon_raw server amazon.com: Error = 2060001
one or more invalid arguments

 

I have my Amazon.com account credentials with me with the access key and security token but I am still getting the following error:

Screenshot from 2014-12-01 13:03:59.png

 

I am really new to this. Could anyone please guide me if I am missing something out or if I am doing somthing wrong?

 

 

 

 

 

 

 

1 ACCEPTED SOLUTION

Accepted Solutions

SymTerry
Level 6
Employee Accredited

Just from looking at the errors:

09:52:29.960 [4558] <16> sts_logmsg: Invalid severity code specified.

It looks like Amazon doesn't like the credentials given when contacted. Please verify those. 

Also make sure:

  • You have not specified a different Amazon S3 server then the default. 
  • Are allowing outbound connections to s3.amazonaws.com 
  • Have the correct ports open: 5637, 443, and 80.

View solution in original post

4 REPLIES 4

CRZ
Level 6
Employee Accredited Certified

09:52:29.958 [4558] <2> localhost: amazon: response from Amazon :<?xml version="1.0" encoding="UTF-8"?>
<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>9FCD6CFB6719709B</RequestId><HostId>a3Ncng7GUUk0g7zryAEt+VRhbVY6dDkp9GAb/kSzTTooVBgs6F3kNUYS+SDvw0X8</HostId></Error>

It appears that something isn't completely set up over at Amazon for it to allow you to connect.  Can you double check the access/permissions/privileges you've granted (or not granted) to the account from the Amazon side?

SymTerry
Level 6
Employee Accredited

Just from looking at the errors:

09:52:29.960 [4558] <16> sts_logmsg: Invalid severity code specified.

It looks like Amazon doesn't like the credentials given when contacted. Please verify those. 

Also make sure:

  • You have not specified a different Amazon S3 server then the default. 
  • Are allowing outbound connections to s3.amazonaws.com 
  • Have the correct ports open: 5637, 443, and 80.

R1234
Level 3

I generated new credentials (access key and security token) through amazon.com

I tried accessing through root as well as by creating a user and giving it administrator access but nothing worked.

R1234
Level 3

I noticed that port 80 was missing. Thank you for your help. It's working fine now.