cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

Connection cannot be established because the host validation failed

Hello All,

I am trying to install netbackup client 8.1 on one of our Linux client machine and while proceeding for authorization token it has not accepted the token and the installation failed.

Now i am trying it to degrade to netbackup client version 7.7.3 & installation is getting failed.Posted below bptestbpcd output.Please help me out how to revoke that certificate and how to proceed for 8.1 or even 7.7.3.

<16>bptestbpcd main: Function ConnectToBPCD(10.51.15.129) failed: 7648
<16>bptestbpcd main: Connection cannot be established because the host validation failed
<16>bptestbpcd main: Peer host validation failed for INSECURE connection; Peer host: 10.51.15.129, Error: 8621, Message: Connection is dropped, because the host now appears to be NetBackup 8.0 or earlier..: 7648
Connection cannot be established because the host validation failed

Thanks

Gopi Krishna

GK
Tags (2)
13 Replies
Highlighted

Re: Connection cannot be established because the host validation failed

Do you have insecure communications with NetBackup 8.0 earlier hosts enabled or disabled?

Does that client appear in these places? 

Security Management->Host Management 

Security Management->Certificate Management

If it does, you need to revoke the certificate by right clicking the client name in Security Management->Certificate Management and revoke the cert.

Then you will need to right click the client name in Security Management->Host Management and 'Reset Host Atttributes'

Highlighted

Re: Connection cannot be established because the host validation failed

Actually its a new client installation which came up to our end.

And yes its visible in both the locations of  Security Management->Host Management  & Security Management->Certificate Management.

If once i reset the attributes am i able to install 7.7.3 (or) 8.1,?? If yes, then which token i have to use for cilent authorization.Will it generate any new token for it or it will accept old token.Please suggest.

GK
Highlighted

Re: Connection cannot be established because the host validation failed

Can any one have solution for this.

GK
Tags (2)
Highlighted

Re: Connection cannot be established because the host validation failed

Hello,

 

The NBU 7.7.3 client does not use the secure communication (Certificate) with master.
So no need certificate on client
1. Decommission the client-server and certificate in master.

HowTo:
Article:
https://www.veritas.com/support/en_US/doc/21733320-127424841-0/v120724182-127424841

2. Then uninstall the NBU services on client. If you already uninstalled then skip this step.

3. Make entry of client and IP address in master server.

4. Install NBU 7.7.3 client package.

5. Check the bptestbpcd command output from master.

Regards,

Highlighted

Re: Connection cannot be established because the host validation failed

Hello,

Performed all the steps which you have initiated in the previous post but still getting the same issue.PFB output from bptestbpcd.


<16>bptestbpcd main: Function ConnectToBPCD(10.51.15.129) failed: 7648
<16>bptestbpcd main: Connection cannot be established because the host validation failed
<16>bptestbpcd main: Peer host validation failed for INSECURE connection; Peer host: 10.51.15.129, Error: 8621, Message: Connection is dropped, because the host now appears to be NetBackup 8.0 or earlier..: 7648
Connection cannot be established because the host validation failed

GK
Highlighted

Re: Connection cannot be established because the host validation failed

Did you verify that you have Enable Insecure communication with NetBackup 8.0 and earlier hosts enabled?

Security Management -> Global Security Settings

Highlighted

Re: Connection cannot be established because the host validation failed

Yes the option is already enabled.

GK
Highlighted

Re: Connection cannot be established because the host validation failed

I am unable to reset host attributes under Security Management->Certificate Management.As the option itself is in-active state.

GK
Highlighted

Re: Connection cannot be established because the host validation failed

So what version is the client on right now? After you revoked the certificate and cleared host attributes in the admin console.

Highlighted

Re: Connection cannot be established because the host validation failed

i am trying to install 7.7.3 but the communication is not happening.And i revoked token but unable to reset host attributes the option in hide state.

GK

Re: Connection cannot be established because the host validation failed

If it was my client, I would blow away the old one and reinstall, no real reason to backout/downgrade.

I would make a copy of any client specific stuff, like bp.conf in a safe place, them do pkgremove or linux equivalent and/or remove /opt/openv directory. 

Recreate directory and reinstall 7.7 and upgrade to 7.7.3, recopy bp.conf.

NetBackup 8.1.2 on Solaris 11, writing to DataDomain 9800 6.0.2.50
duplicating via SLP to LTO5 in SL8500 via ACSLS
Tags (2)
Highlighted

Re: Connection cannot be established because the host validation failed

@GopiKrishna208

It seems 'something' went wrong with Security Certificate on the master during initial installation. 
Do you have any logs or actual error message for the initial failure? 
As you have experienced, trying to reinstall an older version is not fixing the problem.
(Connection is dropped, because the host now appears to be NetBackup 8.0 or earlier)

There is just not enough documentation or experience yet w.r.t. security certificates. 

My suggestion is to log a Support call with Veritas. 

Highlighted

Re: Connection cannot be established because the host validation failed

As discussed with our senior support they have added own client entries on /etc/hosts and the communication issue was resolved.

Thanks for the support.

GK