Netbackup 8.1.1 with DELL EMC ECS fail

[xthesolarisx]

Hi,

I testing configure netbackup with cloud storage. My env:

- Netbackup: 8.1.1

- DELL EMC ECS: 3.4 Community Edition

- "Use SSL" - uncheck

When config error happen " Login credentials or certificate verification failed for server master.nbu.dat. Please see tpconfig logs for further details. Login credentials or certificate verification failed for server "master.nbu...". Please see tpconfig logs for further details"

Thanks

[davidmoline]

hi @xthesolarisx 

See if any of thebelow 3 articles help resolve your issue.
https://www.veritas.com/support/en_US/article.100046005
https://www.veritas.com/support/en_US/article.100033608
https://www.veritas.com/support/en_US/article.100047501

You may need to set up tpcommand logging (refer https://www.veritas.com/support/en_US/article.100022287 for details on setting this up) to capture the relevant logs. 

I suspect you will also need to enable SSL for the connection (any reason for disabling this?). If the above do not help, then you will need to provide more details - in particular the tpcommand logs.

Cheers
David

[xthesolarisx]

Thanks @davidmoline 

I change topology to Netbackup -> LB (HAProxy) -> ECS and use SSL between Netbackup and LB. I try use S3 Browser with SSL/TLS connected successfull to LB (can download, upload file to ECS). But still facing problem with Netbackup.

Some troubleshoot logs:

- tpcommand logging:

AmzResiliency: CommonCurlResiliency::getRetryType entry..
AmzResiliency: CommonCurlResiliency::getRetryType CURL Error : 60
AmzResiliency: CommonCurlResiliency::getRetryType						No retry for CURL error 60
AmzResiliency: RetryType : RETRY_NOT_APPLICABLE
AmzResiliency: CommonCurlResiliency::getRetryType leave..
AmzResiliency: RetryType : RETRY_NOT_APPLICABLE
AmzResiliency: AmzResiliency::getRetryType cURL error: 60, multi cURL error: 0, HTTP status: 0, XML response: None, RetryType: RETRY_NOT_APPLICABLE

- ./vxsslcmd s_client -showcerts -connect ecs.nbu.dat:443

Certificate chain
 0 s:/C=XXX/ST=XXX/L=XXX/O=XXX/OU=XXX/CN=XXX/emailAddress=XXX
   i:/C=XXX/ST=XXX/L=XXX/O=XXX/OU=XXX/CN=XXX/emailAddress=XXX
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Thanks

[davidmoline]

Hi @xthesolarisx 

I suspect you have a CA certificate issue. The error 60 is probably meaning the peer certificate cannot be authenticated with given CA certificates. You could try adding the parameter "ENABLE_NBCURL_VERBOSE=1" to bp.conf to see if more details are forthcoming in the logs. 

In the meantime, have a look at this article about how to add a vendor CA certificate to NetBackaup https://www.veritas.com/support/en_US/article.100032993

Cheers
David