cancel
Showing results for 
Search instead for 
Did you mean: 

Could not connect to NetBackup Service Layer...with Java Admin Console

Kai2209
Level 4

Hi i am trying to connect with a Java Administration Console to my master server. First i had an issue with an expired certificate but this has been solved now.

My Error is same like "https://www.veritas.com/support/en_US/article.100042035"

----------------

Error Message

NetBackup Administration Console (popup):
Could not connect to NetBackup Service Layer. You may not be able to perform the functions in the Administration Console that depends on connectivity to this service. Please ensure the nbsl service is up and running.

This message is displayed at the bottom of the login screen:

Connecting NetBackup Service Layer...

After clicking on OK from the first message, this second message may be displayed:

Backup Policy Management (popup):
Could not get Class_att_defs information: A connection to <server_hostname> could not be established. Verify services or daemons are up and running.
You will not be allowed to change NetBackup policy attributes for server '<server_hostname>'.

----------

But the solution does not help in my case. I´ve enabled logging on level 4 and have a log file attached. Maybe someone can help.here...

thanks

Kai

30 REPLIES 30

Hamza_H
Moderator
Moderator
   VIP   

I did a test in mylab (same version) and it seems to hang at this point :

vrts.nbu.admin.icache.NBGUIORBConfigurator:lgwnb01:1556:nbsl_secsvc
vrts.nbu.admin.icache.NBGUIORBConfigurator:Endpoints List created with following endpoints:
vrts.nbu.admin.icache.NBGUIORBConfigurator:Endpoint #1=lgwnb01:1556:nbsl_secsvc
vrts.nbu.admin.icache.NBGUIORBConfigurator:selectEndpoint connecting to preferredDestAddress lgwnb01 with preferredLocalAddress : null
vrts.nbu.admin.icache.NBGUIORBConfigurator:Trying with endpoint : lgwnb01:1556:nbsl_secsvc
vrts.nbu.admin.icache.NBGUIORBConfigurator:selectEndpoint exhausted with endpoints
vrts.nbu.admin.icache.NBGUIORBConfigurator:Trying with endpoint : null

please do this on master and share outputs:

add below line to the file bp.conf => /usr/openv/netbackup/bp.conf
ENABLE_NBCURL_VERBOSE = 1

then run this command

nbcertcmd -ping

then clear cache on the master and try again with jnbSA

bpclntcmd -clear_host_cache

 

Hamza_H
Moderator
Moderator
   VIP   

also, share below information on master server:

content of bp.conf:

cat /usr/openv/netbackup/bp.conf 

and auth.conf

cat /usr/openv/java/auth.conf

no this is not working at all, not sure if x11auth is needed on server.

Hamza_H
Moderator
Moderator
   VIP   

"no this is not working at all, not sure if x11auth is needed on server."

 

which tool you used? have you checked my previous replies?

 
 

sorry i have not seen the last replies.

So i did the  "nbcertcmd -ping" , added the line to bp.conf and cleared host cache but still the same.

this is the output...

* Trying 10.65.1.10...
* Connected to lgwnb01 (10.65.1.10) port 1556 (#0)
* successfully set certificate verify locations:
* CAfile: /usr/openv/var/webtruststore/cacert.pem
CApath: none
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* --- Certificate chain
* 0 Subject: CN=lgwnb01; OU=TOMCAT@lgwnb01.contoso.com; O=vx
* Issuer: CN=broker; OU=root@lgwnb01.contoso.com; O=vx
* Version: 3 (0x2)
* Serial Number:
* Signature Algorithm: sha512WithRSAEncryption
* Start date: 2020-11-03 10:27:21 GMT
* Expire date: 2021-11-03 11:42:21 GMT
* Public Key Algorithm: rsaEncryption
* RSA Public Key (1024 bits)
* rsa(n): c3:5a:ba:bb:8b:56:92:62:03:96:6f:66:ff:07:23:07:3c:3e:16:0b:8f:93:a2:76:9d:e8:36:6d:bf:8c:65:ce:74:b4:d1:00:19:af:09:59:bd:76:ff:09:0f:c0:53:8e:af:92:e5:ed:ef:fa:ae:74:ea:22:6a:b2:56:ce:7f:90:79:f7:df:70:80:e1:f6:f1:19:66:2f:8f:a5:3f:30:cb:a2:66:32:b9:46:54:ef:8d:6f:01:73:e3:40:15:87:51:70:a9:79:c0:7d:4b:72:7b:0e:5d:cd:38:99:2c:0a:6e:df:2f:cf:61:05:b6:8c:b6:40:64:4f:ab:6a:50:9b:7b:
* rsa(e): 01:00:01:
* X509v3 Basic Constraints: (critical)
* CA:FALSE
* 1.2.3.5:
* credential
* 1.2.3.6:
* 00000017
* 1.2.3.8:
* {ecdde3c4-9fc1-11e8-9757-f1e33217db64}
* X509v3 Subject Key Identifier:
* 03:51:A0:78:DB:6E:11:EF:96:91:6E:BA:F4:D3:2E:46:51:B6:42:84
* X509v3 Authority Key Identifier:
* keyid:CC:B3:ED:13:52:61:E6:B2:72:C7:BD:6F:74:29:E9:14:F6:0C:21:7C
* X509v3 Subject Alternative Name:
* DNS:lgwnb01.contoso.com,DNS:lgwnb01
* Signature: 4e:90:06:86:49:f8:fe:d7:e3:d5:bf:ce:0b:86:ee:f0:8b:1d:9c:f8:be:58:3d:0e:ec:f7:ee:f7:2d:93:5a:1e:82:6d:0e:52:b7:82:ff:a0:62:6e:bc:a0:c4:49:f8:0d:90:b6:b6:49:7d:0e:b5:ea:36:ba:de:3b:ef:41:e2:09:89:7b:c4:0d:cd:97:0e:ff:05:c7:61:e6:b1:21:9d:24:71:f9:fd:64:a5:e2:f2:bb:8b:e5:eb:b0:3b:ca:d2:22:6e:48:22:b7:bd:19:29:54:94:0f:26:dc:3a:f6:d0:48:bf:43:85:87:6b:f1:d1:6b:71:21:c2:9e:f9:5d:f0:91:
* 1 Subject: CN=broker; OU=root@lgwnb01.contoso.com; O=vx
* Issuer: CN=nbatd; OU=root@lgwnb01.contoso.com; O=vx
* Version: 3 (0x2)
* Serial Number:
* Signature Algorithm: sha512WithRSAEncryption
* Start date: 2018-08-14 11:44:48 GMT
* Expire date: 2038-08-09 12:59:48 GMT
* Public Key Algorithm: rsaEncryption
* RSA Public Key (1024 bits)
* rsa(n): c6:07:91:ed:fc:32:53:2c:0c:8f:dd:b6:5c:e8:b1:63:1d:cf:8a:a5:f2:9a:51:1d:4c:31:3d:c1:ac:68:4e:2d:a5:b6:36:92:0c:94:8a:aa:3f:1c:a7:74:db:de:cb:d2:33:df:c5:1c:39:0c:09:8d:15:bb:60:6b:02:8e:86:54:49:d8:af:82:01:16:5d:20:f7:a4:14:49:95:0d:0e:0c:d7:eb:ac:20:6b:23:60:71:df:08:e8:a9:06:83:e7:5a:74:12:ee:54:51:1e:50:b9:15:aa:09:c7:b1:12:4c:47:cd:88:e8:b4:04:2a:21:46:88:48:f2:b5:7d:02:d0:ab:
* rsa(e): 01:00:01:
* X509v3 Basic Constraints: (critical)
* CA:TRUE
* 1.2.3.5:
* broker
* 1.2.3.6:
* 00000017
* 1.2.3.8:
* {ecdde3c4-9fc1-11e8-9757-f1e33217db64}
* X509v3 Subject Key Identifier:
* CC:B3:ED:13:52:61:E6:B2:72:C7:BD:6F:74:29:E9:14:F6:0C:21:7C
* X509v3 Authority Key Identifier:
* keyid:D9:C0:5A:9B:D8:5A:55:56:19:DD:CC:E1:E5:5B:CB:C7:5D:9E:D1:DD
* X509v3 Subject Alternative Name:
* DNS:lgwnb01.contoso.com
* Signature: 6c:c2:8b:2d:d3:7f:b6:75:99:f5:c5:15:7f:77:d5:2f:bc:e5:03:c6:10:00:a7:f5:1f:cd:f1:c4:80:16:15:86:ab:d4:9d:1e:7d:fb:2a:89:46:8b:7c:b9:3d:0e:d7:fa:b9:81:1a:91:2c:38:37:04:12:60:40:3f:db:1f:6e:0a:7a:d4:c5:bd:39:ed:84:5b:96:d8:36:7a:1d:3a:9e:b0:23:02:e5:72:97:57:41:b2:1d:1a:58:0d:48:01:13:a2:cf:b5:d3:b3:60:82:9d:19:30:11:3f:68:93:10:b3:42:43:fa:28:c2:a1:7d:f9:bc:e9:2c:d9:9b:81:2d:f6:3b:
* Server certificate:
* subject: CN=lgwnb01; OU=TOMCAT@lgwnb01.contoso.com; O=vx
* start date: 2020-11-03 10:27:21 GMT
* expire date: 2021-11-03 11:42:21 GMT
* issuer: CN=broker; OU=root@lgwnb01.contoso.com; O=vx
* SSL certificate verify ok.
> GET /netbackup/security/ping HTTP/1.1
Host: lgwnb01:1556
Content-Type: application/json
Accept: application/json

< HTTP/1.1 200 OK
< Cache-Control: private
< Expires: Thu, 01 Jan 1970 01:00:00 CET
< Server: Apache-Coyote/1.1
< Cache-Control: private
< Expires: Thu, 01 Jan 1970 01:00:00 CET
< Date: Thu, 05 Nov 2020 14:58:28 GMT
< Content-Type: application/json;charset=UTF-8
< Content-Length: 13
<
* Connection #0 to host lgwnb01 left intact
Fetched data = 1604588308200.
[root@lgwnb01 java]#

---------------

this is the bp.conf

SERVER = lgwnb01
CLIENT_NAME = lgwnb01
CONNECT_OPTIONS = localhost 1 0 2
USE_VXSS = PROHIBITED
VXSS_SERVICE_TYPE = INTEGRITYANDCONFIDENTIALITY
EMMSERVER = lgwnb01
HOST_CACHE_TTL = 3600
VXDBMS_NB_DATA = /usr/openv/db/data
WEBSVC_GROUP = nbwebgrp
WEBSVC_USER = nbwebsvc
TELEMETRY_UPLOAD = YES
ENABLE_NBCURL_VERBOSE = 1

and auth.conf

root ADMIN=ALL JBP=ALL
* ADMIN=JBP JBP=ENDUSER+BU+ARC

----------------

I used mobaxterm but i guess i have to install x11auth or something on master server.

Hamza_H
Moderator
Moderator
   VIP   

Everything looks good on the master, i think there is a problem on the server on which you are trying to open the console, so yeah, I suggest that you install x11 on master and try to open the console locally via jnbSA command.

also try to telnet that server from the master server on port 1556

from master

telnet windows_server 1556

telnet windows_server 13724

if telnet is not successful, check if FW is enabled on the windows server, if yes, disable it and retry again.

if it is disabled, check network FW, GO, ACL.. that could block the communication

first of all i want to say thanks for your support, appreciate this.

I do not have the Java Console on a Windows Server it´s a client. But i have installed it on 3 different clients to avoid a client issue. There is neither a running firewall on client nor on the master server.

this is btw. the result of jnbSA

[root@lgwnb01 java]# ./jnbSA

Starting administration console version 8.0.
The log file for this execution instance is
/usr/openv/netbackup/logs/user_ops/nbjlogs/jbp.root.jnbSA.42935.log


DISPLAY environment variable is set to: localhost:10.0
Console was started on:
Linux lgwnb01 3.10.0-862.9.1.el7.x86_64 #1 SMP Wed Jun 27 04:30:39 EDT 2018 x86_64 x86_64 x86_64 GNU/Linux

Command line options were:
./jnbSA

Starting administration console version 8.0.

LANG=en_US.UTF-8
LC_CTYPE="en_US.UTF-8"
LC_NUMERIC="en_US.UTF-8"
LC_TIME="en_US.UTF-8"
LC_COLLATE="en_US.UTF-8"
LC_MONETARY="en_US.UTF-8"
LC_MESSAGES="en_US.UTF-8"
LC_PAPER="en_US.UTF-8"
LC_NAME="en_US.UTF-8"
LC_ADDRESS="en_US.UTF-8"
LC_TELEPHONE="en_US.UTF-8"
LC_MEASUREMENT="en_US.UTF-8"
LC_IDENTIFICATION="en_US.UTF-8"
LC_ALL=

java version "1.8.0_101"
Java(TM) SE Runtime Environment (build 1.8.0_101-b13)
Java HotSpot(TM) 64-Bit Server VM (build 25.101-b13, mixed mode)

java.runtime.name: Java(TM) SE Runtime Environment
sun.boot.library.path: /usr/openv/java/jre/lib/amd64
java.vm.version: 25.101-b13
vrts.common.server.LCCTYPE: "en_US.UTF-8"
java.vm.vendor: Oracle Corporation
java.vendor.url: http://java.oracle.com/
path.separator: :
java.vm.name: Java HotSpot(TM) 64-Bit Server VM
file.encoding.pkg: sun.io
user.country: US
sun.java.launcher: SUN_STANDARD
sun.os.patch.level: unknown
vrtsat.datadir: /usr/openv/var/vxss/at
java.vm.specification.name: Java Virtual Machine Specification
user.dir: /usr/openv/java
vrts.nbe.INST_REL: 800000
java.runtime.version: 1.8.0_101-b13
vrts.nbe.BUILDNO: 0165
java.awt.graphicsenv: sun.awt.X11GraphicsEnvironment
java.endorsed.dirs: /usr/openv/java/jre/lib/endorsed
os.arch: amd64
java.io.tmpdir: /tmp
line.separator:

java.vm.specification.vendor: Oracle Corporation
os.name: Linux
vrtsat.home: /usr/openv/netbackup/sec/at
sun.jnu.encoding: UTF-8
vrts.NBJAVA_CONF: /usr/openv/java/nbj.conf
java.library.path: /usr/openv/lib
java.specification.name: Java Platform API Specification
java.class.version: 52.0
sun.management.compiler: HotSpot 64-Bit Tiered Compilers
java.util.prefs.PreferencesFactory: vrts.common.launch.PropertiesPreferencesFactory
os.version: 3.10.0-862.9.1.el7.x86_64
user.home: /root
user.timezone:
java.awt.printerjob: sun.print.PSPrinterJob
file.encoding: UTF-8
vrts.nbe.HOSTNAME:
java.specification.version: 1.8
java.class.path: /usr/openv/java/nbjP.jar:/usr/openv/java/nbCommon.jar:/usr/openv/java/dbext.jar:::/usr/openv/java/allNB.j ar:/usr/openv/java/pvxSpin.jar:/usr/openv/java/pvxDates.jar::/usr/openv/java/jdom.jar:/usr/openv/java/VxHelpViewer.jar:/us r/openv/java/VxHelp_fr_FR.jar:/usr/openv/java/VxHelp_ja_JP.jar:/usr/openv/java/VxHelp_zh_CN.jar::/usr/openv/java/servicela yer.jar:/usr/openv/java/emmidl.jar:/usr/openv/java/jacorb.jar:/usr/openv/java/pbxiop2.jar:/usr/openv/java/logkit-1.2.jar:/ usr/openv/java/avalon-framework-4.1.5.jar:/usr/openv/java/backport-util-concurrent.jar:/usr/openv/java/antlr-2.7.2.jar:/us r/openv/java/vxssiop2.jar:/usr/openv/java/AtWrapper.jar:/usr/openv/java/vxrep-v2.20.jar:/usr/openv/java/mcharts.jar:/usr/o penv/java/crimson.jar:/usr/openv/java/jackson-all.jar:/usr/openv/java/commons-logging.jar:/usr/openv/java/httpclient-4.5.1 .jar:/usr/openv/java/httpcore-4.4.3.jar:/usr/openv/java/jackson-annotations-2.4.2.jar:/usr/openv/java/jackson-core-2.4.2.j ar:/usr/openv/java/jackson-databind-2.4.2.jar:/usr/openv/java/spring-beans-4.2.0.RELEASE.jar:/usr/openv/java/spring-core-4 .2.0.RELEASE.jar:/usr/openv/java/spring-web-4.2.0.RELEASE.jar:.:/usr/openv/java
user.name: root
java.vm.specification.version: 1.8
sun.java.command: vrts.nbe.AdminConsole
java.home: /usr/openv/java/jre
sun.arch.data.model: 64
user.language: en
java.specification.vendor: Oracle Corporation
awt.toolkit: sun.awt.X11.XToolkit
java.vm.info: mixed mode
java.version: 1.8.0_101
java.ext.dirs: /usr/openv/java/jre/lib/ext:/usr/java/packages/lib/ext
sun.boot.class.path: /usr/openv/java/jre/lib/resources.jar:/usr/openv/java/jre/lib/rt.jar:/usr/openv/java/jre/lib/sunrsasi gn.jar:/usr/openv/java/jre/lib/jsse.jar:/usr/openv/java/jre/lib/jce.jar:/usr/openv/java/jre/lib/charsets.jar:/usr/openv/ja va/jre/lib/jfr.jar:/usr/openv/java/jre/classes
vrts.common.utilities.DEBUG_PROPERTIES: /usr/openv/java/Debug.properties
java.vendor: Oracle Corporation
vrts.common.server.LOG_CMDLINES: false
file.separator: /
java.vendor.url.bug: http://bugreport.sun.com/bugreport/
sun.io.unicode.encoding: UnicodeLittle
sun.cpu.endian: little
sun.cpu.isalist:
java.lang.UnsatisfiedLinkError: /usr/openv/java/jre/lib/amd64/libawt_xawt.so: libXtst.so.6: cannot open shared object file : No such file or directory
at java.lang.ClassLoader$NativeLibrary.load(Native Method)
at java.lang.ClassLoader.loadLibrary0(ClassLoader.java:1941)
at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1824)
at java.lang.Runtime.load0(Runtime.java:809)
at java.lang.System.load(System.java:1086)
at java.lang.ClassLoader$NativeLibrary.load(Native Method)
at java.lang.ClassLoader.loadLibrary0(ClassLoader.java:1941)
at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1845)
at java.lang.Runtime.loadLibrary0(Runtime.java:870)
at java.lang.System.loadLibrary(System.java:1122)
at java.awt.Toolkit$3.run(Toolkit.java:1636)
at java.awt.Toolkit$3.run(Toolkit.java:1634)
at java.security.AccessController.doPrivileged(Native Method)
at java.awt.Toolkit.loadLibraries(Toolkit.java:1633)
at java.awt.Toolkit.<clinit>(Toolkit.java:1668)
at java.awt.Color.<clinit>(Color.java:275)
at vrts.common.utilities.SwingUI.<clinit>(SwingUI.java:26)
at vrts.common.utilities.CommonUIFactory.setUIDefaults(CommonUIFactory.java:61)
at vrts.nbe.JavaPresentationLayer.<init>(JavaPresentationLayer.java:100)
at vrts.nbe.AdminConsole.<init>(AdminConsole.java:58)
at vrts.nbe.AdminConsole.main(AdminConsole.java:71)
[root@lgwnb01 java]#

@Hamza_H,

today i was a bit desperated and decided to upgrade from 8.0 to 8.11. After a sucessful upgrade of my master  iwas able to connect with my Java Admin Console :)

Just want to say thank you again for all the time you spend with me on both issues.

Kai

@Kai2209 I've been watching this looking for something to add and wasn't seeing anything obvious, but now I'm curious, as I don't see this asked, what version of the admin console were you running?

Admin console versions are specific to the version being run on the Master.  When you install 8.1.1 on your management system, you'll have an 8.0 version in the folder -- if your Master is at 8.0, you can't run the 8.1.1 or 8.2 console against that Master, you want to fire up the 8.0 version of the console.  Were you perhaps trying to start up the wrong version of the console?

Charles
VCS, NBU & Appliances

Hamza_H
Moderator
Moderator
   VIP   

Hello @Kai2209 , sorry for the delay.

Good news :) ! and no worries, I had a lot of help thanks to this forum (and still of course) so help back other people is the least I can do :).

Just as @vtas_chas mentionned, we didn't check the version of the java console, could you please confirm it?

 

Charles,

i am aware of this. I tried to start the matching console. But thanks for reply.

Kai