NBAC is not working after failover

[kadi]

Hi All,

Can somone advise why my NBAC isn't working after failover? it gives message VXSS authorization failed.

I have NetBackup 6.5 that is clustered using VCS 5.0 MP3, NetBackup is installed on Solaris 10 X86 servers.

NBAC working fine on one node but not working on other after failover. below is bp.conf files on both nodes. note that I use unixpwd authentication.

host1: prod1 , host2: prod2 , NBU virtual name: prodnbu , Authentication server  virtual name:  prod-NBAC1 , Authorization server  virtual name: prod-NBAC2

bp.conf on working node:

AUTHENTICATION_DOMAIN = prod1.localdomain "" PASSWD prod-NBAC1 0

AUTHORIZATION_SERVICE = prod-NBAC2.localdomain 0

USE_VXSS = AUTOMATIC

VXSS_NETWORK = prodnbu.localdomain AUTOMATIC

VXSS_NETWORK = prod1.localdomain AUTOMATIC

VXSS_NETWORK = prod2.localdomain AUTOMATIC

VXSS_NETWORK = .localdomain AUTOMATIC


bp.conf on non-working node:
 

AUTHENTICATION_DOMAIN = prod2.localdomain "" PASSWD prod-NBAC1 0

AUTHORIZATION_SERVICE = prod-NBAC2.localdomain 0

USE_VXSS = AUTOMATIC

VXSS_NETWORK = prodnbu.localdomain AUTOMATIC

VXSS_NETWORK = prod1.localdomain AUTOMATIC

VXSS_NETWORK = prod2.localdomain AUTOMATIC

VXSS_NETWORK = .localdomain AUTOMATIC
 

[Douglas_Snyder]

Hi Kadi,

I suggest looking at ports - specifically any firewalls or IDS/IPS on the systems.  The "VXSS authorization failed" error indicates a communication problem.  The next thing I would check would be DNS - simply make sure that all servers can resolve names and ptr records.  Since the service is working on one node but not failing over it indicates a problem with the VCS setup - I cannot see any issues from what you posted.  I suggest opening a support ticket.

You can find some additional configuration guidance in the new "Product Authentication" Yellow Books located here: http://www.symantec.com/business/theme.jsp?themeid=yellowbooks.  Thanks!