cancel
Showing results for 
Search instead for 
Did you mean: 

NBU Cluster + Windows Authentication (AD) issue

Rodrigo_Lima
Not applicable
Hi Guys,

I have a scenario like this:

A clustered Netbackup 6.5.4 in SunCluster 3.2 - Solaris 10 Sparc, working with VxAT (Root Broker + Authentication Broker);
A windows NBU client, working as a authentication broker for AD users.

After set the config using this technote (http://seer.entsupport.symantec.com/docs/319708.htm), I got a basicaly error: I can't authenticate an AD user in NBU environment.
All of commands specified in technote runs good, but when i open the NBU Administration console, none of AD users can authenticate in NBU

Some configs of my lab:

bp.conf
AUTHENTICATION_DOMAIN = unixhost "Root Broker" PASSWD unixhost.xxx.com.br 0
AUTHENTICATION_DOMAIN = gogogo "Windows Broker" WINDOWS winhost.gogogo.xxx.com.br 0
AUTHORIZATION_SERVICE = unixhost.xxx.com.br 0
USE_VXSS = AUTOMATIC

I have some strange entries in NBU logs:
bprd
19:58:40.331 [20726] <16> VssAccept: (vss_auth.cpp,1553): vrtsAtSecConnAccept returned FAILURE
19:58:40.332 [20726] <2> VssAccept: (vss_auth.cpp,1562): VxStatus = -1 (0xffffffff): Status = 17 : "Unable to contact Authentication server."

bpcd
19:32:29.467 [16975] <16> VssImportCredential: (vss_auth.cpp,2596): Cred file open FAILED
19:32:29.469 [16975] <2> vnet_vxss_import_credential: vnet_vxss_helper.c.1715: VssImportCredential failed: 14 0x0000000e

I have both client-master/master-client communication works fine before and after the VxSS config.

What points do you think i can check to verify the config problem and/or issue? Network ports? config files? OS?

Any help is very appreciated!

Rodrigo
1 REPLY 1

Douglas_Snyder
Level 5
Employee Accredited Certified
Hi Rodrigo,

I suggest looking at ports - specifically the firewall on the AD server(s).  The "Unable to contact Authentication server" error indicates a communication problem.  The next thing I would check would be DNS - simply make sure that all servers can resolve names and ptr records.

You can find some additional configuration guidance in the new "Product Authentication" Yellow Books located here: http://www.symantec.com/business/theme.jsp?themeid=yellowbooks.  Thanks!