cancel
Showing results for 
Search instead for 
Did you mean: 

Nbazd don't start

Lopez_Diaz
Level 4

Hello, Im new working with Veritas Netbackup 7.1. It is installed in a server with Solaris 10. Im planning to use the NBAC. The problem that I have is that the nbazd daemon dont start.  If I go to Activity Monitor, Daemons and right click the nbazd daemon and mark start Daemon, it dont do anything. If I select Daemon Details: nbazd the status is Stopped. How I can start this service?

12 REPLIES 12

Marianne
Moderator
Moderator
Partner    VIP    Accredited Certified

Have you run the 'bpnbaz -setupmaster' command yet?

Please read through Chapter 4 (Access control security) in Security and Encryption Guide   http://www.symantec.com/docs/TECH127044

 

Lopez_Diaz
Level 4

Hello Marianne thank you for your respond. This is what I did:

 

# bpnbaz -setupmaster

You will have to restart NetBackup services on this machine after the command completes successfully.

Do you want to continue(y/n)y

Gathering configuration information.

Generating identity for host 'bkpserver'

Setting up basic authorization information. Please be patient.

Unable to contact Netbackup Authorization Service. Check if the Netbackup is properly installed

Unable to contact Authorization server.

 

 

 

 

 

Lopez_Diaz
Level 4

Hello Marianne thank you for

Hello Marianne thank you for your respond. This is what I did:

 

# bpnbaz -setupmaster

You will have to restart NetBackup services on this machine after the command completes successfully.

Do you want to continue(y/n)y

Gathering configuration information.

Generating identity for host 'bkpserver'

Setting up basic authorization information. Please be patient.

Unable to contact Netbackup Authorization Service. Check if the Netbackup is properly installed

Unable to contact Authorization server.

 

Lopez_Diaz
Level 4

4/11/12 16:28:02 _authd_config.c(205) Conf file path: /usr/openv/netbackup/sec/

az/bin/VRTSaz.conf

_authd_config.c(860) Debug enable: '4'_authd_config.c(905) _VSSRegGetString of E

nableTaskManager' failed '6016', error ignored

_authd_config.c(1275) _VSSRegGetString of 'ConnectionTimeout' failed '6016'

_authd_config.c(1290) _VSSRegGetString of 'op_uid' failed '6016'

_authd_config.c(1299) _VSSRegGetString of 'op_pwd' failed '6016'

_authd_config.c(470) Using non fully qualified domain name as given:'SERVICES'

_authd_config.c(521) database_path=/objdb/NBAZDB.db

Authorization Configurable Parameters:

Installation:

        buildversion=[VARIABLE_NOT_SET]

ServiceIdentity:

        ServiceName=[vxazd_vxsvc]

        ServiceDomainName=[SERVICES]

        ServiceDomainType=[vx]

        AuthenticationBrokerHost=[localhost]

        AuthenticationBrokerPort=[13783]

        AuthenticationBrokerPBXServiceId=[nbatd]

Communication:

        VxAT Timeout=[20]

        MasterServerHost=[localhost]

        PortNumber=[13722]

        IsPBXInstalled=[1]

        PBXPorttNumber=[1556]

        ServiceId=[nbazd]

        ClientMaxConnections=[20]

        ClientPortLowerBound=[0]

        ClientPortUpperBound=[65535]

        NetworkInterfaceCard=[VARIABLE_NOT_SET]

Environment:

        AZ_AciEnforcement=[on]

        AZ_SecurityLevel=[0]

        DatabaseDSN=[NBAZDB]

        DatabaseName=[bogus]

        DatabaseFile=[NBAZDB.db]

        DatabaseUser=[DBA]

        DatabasePassword=[nbusql]

        DatabasePath=[/objdb/NBAZDB.db]

        DatabaseClientTimeout=[120]

        DatabaseClientIdleTime=[0]

        DatabaseConnectionTimeOut=[5]

Environment_:

        DatabaseOperatorUser=[vrtsaz_aci_operator]

        DatabaseOperatorPassword=[vrtsaz_aci_stop_operator]

identity.c(359) Authenticating service idendity

        Name:'vxazd_vxsvc'

        Passwd:''

        DomainName:'SERVICES'

        DomainType:'vx'

        Host:'localhost!1556!nbatd'

        Port:'0'

identity.c(191) vrtsAtGetCreatePDDomain not on root PDR

identity.c(214) vrtsAtCreatePDDomain:'SERVICES' succeeded

identity.c(135) Principal vxazd_vxsvc created successfully in domain 'SERVICES'

identity.c(420) Account 'vxazd_vxsvc' created in private domain 'SERVICES'

04/11/12 16:28:02 Identity 'vxazd_vxsvc' created in PD 'SERVICES'

identity.c(433) Authenticating service idendity again

        Name:'vxazd_vxsvc'

        Passwd:'vxazd_vxsvc'

        DomainName:'SERVICES'

        DomainType:'vx'

        Host:'localhost!1556!nbatd'

        Port:'0'

Extracted credential info. adf_debug = 4

spp.c(67) Extracted credential details

spp.c(68) Username is vxazd_vxsvc

spp.c(69) Domainname is SERVICES@bhmsvnb.cardinalhealth.net

spp.c(70) Domaintype is vx

spp.c(71) Number of groups: 0

spp.c(77) Issued by /CN=broker/OU=root@bhmsvnb.cardinalhealth.net/O=vx

spp.c(78) Issued to /CN=vxazd_vxsvc/OU=SERVICES@bhmsvnb.cardinalhealth.net/O=vx

spp.c(79) Expiry time Apr 11 20:28:02 2014 GMT

spp.c(80) Friendly name

spp.c(81) Serial Number  0x1b

spp.c(83) isRoot 0, isTrusted 0

group_member.c(1236) initialize group_membership cache. size 256

group_member.c(159) group_membership_dir = [/gf]

main.c(1138) Trace URL [file:////usr/openv/netbackup/logs/nbazd//vxazd.trc]

main.c(1145) creating authd APISserver object with port 13722

04/11/12 16:28:02 addrinfo->ai_family = 26  main.c(247)

04/11/12 16:28:02 addrinfo->ai_family = 2  main.c(247)

04/11/12 16:28:02 Netwrok address type. 3 main.c(1154)

04/11/12 16:28:02 Set listener type RMMXPT_Listener_IPv6 main.c(1160)

04/11/12 16:28:02 main.c(1188) APIServer attributes [out_avlist] 10 attribute(s)

present

  [ 0]           auto_start   b [0]

  [ 1]         free_handler   * [0]

  [ 2]        http_listener   * [66eea0]

  [ 3] max_concurrent_messages u32 [20]

  [ 4]       method_handler   * [492bb0]

  [ 5]       server_binding   s [0x6a4a80] [http://bhmsvnb:13722]

  [ 6]        trace_enabled   b [0]

  [ 7]            trace_url   s [0x660cc0] [file:////usr/openv/netbackup/logs/nb

azd//vxazd.trc]

  [ 8]            user_data   * [0]

  [ 9]  xml_message_handler   * [0]

04/11/12 16:28:02 Creating PBX server object. main.c(1271)

04/11/12 16:28:02 main.c(1293) PBX APIServer attributes [pbx_out_avlist] 10 attr

ibute(s) present

  [ 0]           auto_start   b [0]

  [ 1]         free_handler   * [0]

  [ 2]        http_listener   * [66eee0]

  [ 3] max_concurrent_messages u32 [20]

  [ 4]       method_handler   * [492bb0]

  [ 5]       server_binding   s [0x6a4960] [http://bhmsvnb:1556]

  [ 6]        trace_enabled   b [0]

  [ 7]            trace_url   s [0x6609a0] [file:////usr/openv/netbackup/logs/nb

azd//vxazd.trc]

  [ 8]            user_data   * [0]

  [ 9]  xml_message_handler   * [0]

04/11/12 16:28:05 db_odbc_check_db_state () failed, rc = 3004

04/11/12 16:28:05 External DB engine hasn't been started

04/11/12 16:28:05 Fatal error encountered: main.c(1366) 3004 3004

watsons
Level 6

Check out this technote first to see if it helps: http://www.symantec.com/docs/TECH174289

A lot of times, authorization process can't start because the hostname used does not match the actual master server - FQDN, short names, alias etc. In some cases, bprd log might be helpful to trace it down.

Lopez_Diaz
Level 4

Hello watsons, do you know how I can Update the registry value EngineName to the NetBackup configured hostname in Unix? Thank you for your help

watsons
Level 6

Oh.. not aware your env. is Unix-based master server, that might be different. What was the log file you copy and paste last time? I will check if I can see the similar log file in my system..

Lopez_Diaz
Level 4

Hello in Unix the log is in  /usr/openv/netbackup/logs/nbazd/debug. The name of the file is vxazd_debug.log. In Windows it's supposed to be in Windows: %INSTALL_PATH%\VERITAS\netbackup\logs\vxazd.log

Lopez_Diaz
Level 4

Its necessary that the hostname match the master server name?

Lopez_Diaz
Level 4

Its necesarry to enable the VxSS authentication if I want to use NBAC?

watsons
Level 6

When you setup NBAC, that means VXSS authentication is enabled, they're the same thing.

Normally the hostname would have to match. But checking the error:

             db_odbc_check_db_state () failed, rc = 3004

in your logs, it seems to match this technote:

http://www.symantec.com/docs/TECH74016

Rami_Nasser1
Level 6
Partner Accredited Certified

I opened a ticket for the same issue (auth. services stopped and could not be enabled .they followed all what you mention above but still didnt solve the problem.the sevice still stopped.i tried these steps in my virtual lab and it was succeed. please help!!