05-09-2012 07:39 AM
Hello, Im new working with Veritas Netbackup 7.1. It is installed in a server with Solaris 10. Im planning to use the NBAC. The problem that I have is that the nbazd daemon dont start. If I go to Activity Monitor, Daemons and right click the nbazd daemon and mark start Daemon, it dont do anything. If I select Daemon Details: nbazd the status is Stopped. How I can start this service?
05-09-2012 02:14 PM
Have you run the 'bpnbaz -setupmaster' command yet?
Please read through Chapter 4 (Access control security) in Security and Encryption Guide http://www.symantec.com/docs/TECH127044
05-09-2012 02:53 PM
Hello Marianne thank you for your respond. This is what I did:
# bpnbaz -setupmaster
You will have to restart NetBackup services on this machine after the command completes successfully.
Do you want to continue(y/n)y
Gathering configuration information.
Generating identity for host 'bkpserver'
Setting up basic authorization information. Please be patient.
Unable to contact Netbackup Authorization Service. Check if the Netbackup is properly installed
Unable to contact Authorization server.
06-01-2012 01:24 PM
Hello Marianne thank you for your respond. This is what I did:
# bpnbaz -setupmaster
You will have to restart NetBackup services on this machine after the command completes successfully.
Do you want to continue(y/n)y
Gathering configuration information.
Generating identity for host 'bkpserver'
Setting up basic authorization information. Please be patient.
Unable to contact Netbackup Authorization Service. Check if the Netbackup is properly installed
Unable to contact Authorization server.
06-01-2012 01:26 PM
4/11/12 16:28:02 _authd_config.c(205) Conf file path: /usr/openv/netbackup/sec/
az/bin/VRTSaz.conf
_authd_config.c(860) Debug enable: '4'_authd_config.c(905) _VSSRegGetString of E
nableTaskManager' failed '6016', error ignored
_authd_config.c(1275) _VSSRegGetString of 'ConnectionTimeout' failed '6016'
_authd_config.c(1290) _VSSRegGetString of 'op_uid' failed '6016'
_authd_config.c(1299) _VSSRegGetString of 'op_pwd' failed '6016'
_authd_config.c(470) Using non fully qualified domain name as given:'SERVICES'
_authd_config.c(521) database_path=/objdb/NBAZDB.db
Authorization Configurable Parameters:
Installation:
buildversion=[VARIABLE_NOT_SET]
ServiceIdentity:
ServiceName=[vxazd_vxsvc]
ServiceDomainName=[SERVICES]
ServiceDomainType=[vx]
AuthenticationBrokerHost=[localhost]
AuthenticationBrokerPort=[13783]
AuthenticationBrokerPBXServiceId=[nbatd]
Communication:
VxAT Timeout=[20]
MasterServerHost=[localhost]
PortNumber=[13722]
IsPBXInstalled=[1]
PBXPorttNumber=[1556]
ServiceId=[nbazd]
ClientMaxConnections=[20]
ClientPortLowerBound=[0]
ClientPortUpperBound=[65535]
NetworkInterfaceCard=[VARIABLE_NOT_SET]
Environment:
AZ_AciEnforcement=[on]
AZ_SecurityLevel=[0]
DatabaseDSN=[NBAZDB]
DatabaseName=[bogus]
DatabaseFile=[NBAZDB.db]
DatabaseUser=[DBA]
DatabasePassword=[nbusql]
DatabasePath=[/objdb/NBAZDB.db]
DatabaseClientTimeout=[120]
DatabaseClientIdleTime=[0]
DatabaseConnectionTimeOut=[5]
Environment_:
DatabaseOperatorUser=[vrtsaz_aci_operator]
DatabaseOperatorPassword=[vrtsaz_aci_stop_operator]
identity.c(359) Authenticating service idendity
Name:'vxazd_vxsvc'
Passwd:''
DomainName:'SERVICES'
DomainType:'vx'
Host:'localhost!1556!nbatd'
Port:'0'
identity.c(191) vrtsAtGetCreatePDDomain not on root PDR
identity.c(214) vrtsAtCreatePDDomain:'SERVICES' succeeded
identity.c(135) Principal vxazd_vxsvc created successfully in domain 'SERVICES'
identity.c(420) Account 'vxazd_vxsvc' created in private domain 'SERVICES'
04/11/12 16:28:02 Identity 'vxazd_vxsvc' created in PD 'SERVICES'
identity.c(433) Authenticating service idendity again
Name:'vxazd_vxsvc'
Passwd:'vxazd_vxsvc'
DomainName:'SERVICES'
DomainType:'vx'
Host:'localhost!1556!nbatd'
Port:'0'
Extracted credential info. adf_debug = 4
spp.c(67) Extracted credential details
spp.c(68) Username is vxazd_vxsvc
spp.c(69) Domainname is SERVICES@bhmsvnb.cardinalhealth.net
spp.c(70) Domaintype is vx
spp.c(71) Number of groups: 0
spp.c(77) Issued by /CN=broker/OU=root@bhmsvnb.cardinalhealth.net/O=vx
spp.c(78) Issued to /CN=vxazd_vxsvc/OU=SERVICES@bhmsvnb.cardinalhealth.net/O=vx
spp.c(79) Expiry time Apr 11 20:28:02 2014 GMT
spp.c(80) Friendly name
spp.c(81) Serial Number 0x1b
spp.c(83) isRoot 0, isTrusted 0
group_member.c(1236) initialize group_membership cache. size 256
group_member.c(159) group_membership_dir = [/gf]
main.c(1138) Trace URL [file:////usr/openv/netbackup/logs/nbazd//vxazd.trc]
main.c(1145) creating authd APISserver object with port 13722
04/11/12 16:28:02 addrinfo->ai_family = 26 main.c(247)
04/11/12 16:28:02 addrinfo->ai_family = 2 main.c(247)
04/11/12 16:28:02 Netwrok address type. 3 main.c(1154)
04/11/12 16:28:02 Set listener type RMMXPT_Listener_IPv6 main.c(1160)
04/11/12 16:28:02 main.c(1188) APIServer attributes [out_avlist] 10 attribute(s)
present
[ 0] auto_start b [0]
[ 1] free_handler * [0]
[ 2] http_listener * [66eea0]
[ 3] max_concurrent_messages u32 [20]
[ 4] method_handler * [492bb0]
[ 5] server_binding s [0x6a4a80] [http://bhmsvnb:13722]
[ 6] trace_enabled b [0]
[ 7] trace_url s [0x660cc0] [file:////usr/openv/netbackup/logs/nb
azd//vxazd.trc]
[ 8] user_data * [0]
[ 9] xml_message_handler * [0]
04/11/12 16:28:02 Creating PBX server object. main.c(1271)
04/11/12 16:28:02 main.c(1293) PBX APIServer attributes [pbx_out_avlist] 10 attr
ibute(s) present
[ 0] auto_start b [0]
[ 1] free_handler * [0]
[ 2] http_listener * [66eee0]
[ 3] max_concurrent_messages u32 [20]
[ 4] method_handler * [492bb0]
[ 5] server_binding s [0x6a4960] [http://bhmsvnb:1556]
[ 6] trace_enabled b [0]
[ 7] trace_url s [0x6609a0] [file:////usr/openv/netbackup/logs/nb
azd//vxazd.trc]
[ 8] user_data * [0]
[ 9] xml_message_handler * [0]
04/11/12 16:28:05 db_odbc_check_db_state () failed, rc = 3004
04/11/12 16:28:05 External DB engine hasn't been started
04/11/12 16:28:05 Fatal error encountered: main.c(1366) 3004 3004
06-02-2012 05:03 AM
Check out this technote first to see if it helps: http://www.symantec.com/docs/TECH174289
A lot of times, authorization process can't start because the hostname used does not match the actual master server - FQDN, short names, alias etc. In some cases, bprd log might be helpful to trace it down.
06-04-2012 08:34 PM
Hello watsons, do you know how I can Update the registry value EngineName to the NetBackup configured hostname in Unix? Thank you for your help
06-04-2012 08:50 PM
Oh.. not aware your env. is Unix-based master server, that might be different. What was the log file you copy and paste last time? I will check if I can see the similar log file in my system..
06-05-2012 08:20 AM
Hello in Unix the log is in /usr/openv/netbackup/logs/nbazd/debug. The name of the file is vxazd_debug.log. In Windows it's supposed to be in Windows: %INSTALL_PATH%\VERITAS\netbackup\logs\vxazd.log
06-05-2012 11:46 AM
Its necessary that the hostname match the master server name?
06-05-2012 12:17 PM
Its necesarry to enable the VxSS authentication if I want to use NBAC?
06-05-2012 04:55 PM
When you setup NBAC, that means VXSS authentication is enabled, they're the same thing.
Normally the hostname would have to match. But checking the error:
db_odbc_check_db_state () failed, rc = 3004
in your logs, it seems to match this technote:
http://www.symantec.com/docs/TECH74016
07-05-2012 03:53 AM
I opened a ticket for the same issue (auth. services stopped and could not be enabled .they followed all what you mention above but still didnt solve the problem.the sevice still stopped.i tried these steps in my virtual lab and it was succeed. please help!!