cancel
Showing results for 
Search instead for 
Did you mean: 

Unable to restore AD user object

Olivier30
Level 4
Partner

Hi

i have a 5230 appliance version 2.6.0.2

Nebackup 7.6.0.2 on my client

My policy of backup for DC is very simple

dc1, dc2 , already full backup with granalarity activated

backup are worked fine with no error no warning

on my DC , client is 7.6.0.2, nfs client activated, Microsoft patch ok

All prerequisite og admin gui vol1 For windows are set up

 

when i want restore an user account, my job come incomplete with this log:

27/06/2014 11:00:47 - begin Restore
27/06/2014 11:00:48 - requesting resource @aaaaf
27/06/2014 11:00:48 - granted resource MediaID=@aaaaf;DiskVolume=PureDiskVolume;DiskPool=dp_disk_lrcnetbackup;Path=PureDiskVolume;StorageSe...
27/06/2014 11:01:01 - restoring image lrc-ad1.cg2a.org_1403853876
27/06/2014 11:01:01 - requesting resource @aaaaf
27/06/2014 11:01:01 - granted resource MediaID=@aaaaf;DiskVolume=PureDiskVolume;DiskPool=dp_disk_lrcnetbackup;Path=PureDiskVolume;StorageSe...
27/06/2014 11:01:01 - Info bprd(pid=179315) Restoring from copy 1 of image created Fri Jun 27 09:24:36 2014 from policy SLP_AD_LRC
27/06/2014 11:01:01 - Info bprd(pid=179315) Granular restore has started, this may take a while....   
27/06/2014 11:01:02 - Info bpbrm(pid=179358) lrc-ad1.cg2a.org is the host to restore to     
27/06/2014 11:01:02 - Info bpbrm(pid=179358) reading file list for client       
27/06/2014 11:01:03 - connecting
27/06/2014 11:01:03 - Info bpbrm(pid=179358) start nbfsd on client        
27/06/2014 11:01:04 - Info bpbrm(pid=179358) start nbgre on client        
27/06/2014 11:01:04 - Error bpbrm(pid=179358) client lrc-ad1.cg2a.org didn't start        
27/06/2014 11:01:04 - Info tar(pid=0) done. status: 49: client did not start     
27/06/2014 11:01:04 - restored image lrc-ad1.cg2a.org_1403853876 - (client did not start(49)); restore time 0:00:03
27/06/2014 11:01:04 - Error bpbrm(pid=179358) client restore EXIT STATUS 49: client did not start   
27/06/2014 11:01:05 - end Restore; elapsed time: 0:00:18
MS-Windows policy restore error(2808)

 

Any idea please

Thanks for all response

1 ACCEPTED SOLUTION

Accepted Solutions

Olivier30
Level 4
Partner

Hi

 

EEB solution is fine and working in production

In fact, it's an problem with Windows 2008 DC

http://www.symantec.com/business/support/index?page=content&id=TECH199999

 

View solution in original post

24 REPLIES 24

Marianne
Moderator
Moderator
Partner    VIP    Accredited Certified

Have you created log folders on the client?

You wil need ncfgre (the log for nbgre.exe), nbfsd, bpcd and tar logs.

If not, please create these folders on the client under netbackup\logs.

After next failure, copy client logs to .txt files (e.g. tar.txt) and upload as File attachments.

Mark_Solutions
Level 6
Partner Accredited Certified

Are the NFS services running on the client - especially the portmap service

You may need to run: sc config portmap start=auto and then: sc start portmap

 

Olivier30
Level 4
Partner

Hi

Sc portmap is already started

Olivier30
Level 4
Partner

For information, we have 4 dc and restore task failed on more DC

i join all log of client after a restore task failure

thank for your help

 

Olivier30
Level 4
Partner

I have check if information of client is correct on appliance

maintenance-!> bpclntcmd -hn lrc-ad1
host lrc-ad1: lrc-ad1.yyyy.org at 172.28.x.x
aliases:     lrc-ad1.yyyy.org     lrc-ad1     172.28.x.x

 

All informations are correct

 

Mark_Solutions
Level 6
Partner Accredited Certified

Where are you doing this restore from? The log says access denied:

><StatusMsg NBUStatus="46" Severity="2" VXULoid="137" VXULtid="114"><P pos="0">LRC-AD1.cg2a.org</P><P pos="1">172.28.3.243</P><P pos="2">LRC-AD1.cg2a.org</P><P pos="3">172.28.3.243</P><MsgString>Request&#32;from&#32;host&#32;LRC-AD1.cg2a.org&#32;(172.28.3.243)&#32;to&#32;host&#32;LRC-AD1.cg2a.org&#32;(172.28.3.243)&#32;is&#32;not&#32;allowed&#32;access.</MsgString><StatusMsg NBUStatus="46" Severity="0" VXULoid="137" VXULtid="115"><P pos="0">LRC-AD1.cg2a.org</P><P pos="1">172.28.3.243</P><P pos="2">lrc-ad1.cg2a.org</P><MsgString>Host&#32;LRC-AD1.cg2a.org&#32;(172.28.3.243)&#32;is&#32;not&#32;an&#32;authorized&#32;server&#32;for&#32;host&#32;lrc-ad1.cg2a.org.</MsgString></StatusMsg></StatusMsg></StatusMsgDoc>

14:02:26.550 [4508.5984] <16> process_requests: Server access denied

Do the restore from the Master or the client itself

Olivier30
Level 4
Partner

Rstore operation are lauch from client itself

Mark_Solutions
Level 6
Partner Accredited Certified

Try it from the Master then as something is refusing permission here - i have seen the same with exchange GRT where the client needs itself in its own server list for it to work

Olivier30
Level 4
Partner
My master is an appliance How to launch it Console java ?

Mark_Solutions
Level 6
Partner Accredited Certified

OK - If you have a remote admin console then add that PC / Server to the servers list on the AD server and try it from there

Otherwise on the client add itself to its own server list and try it again from the client - also add the AD Server to the Master Servers Host Properties - client attributes section and ensure on the general tab it has "Allow Both" and "Permit Access" selected.

I dont know all of your IP addresses so i am unsure from the section i pasted above which server is denying which other server

It may even be a case sensitivity issue as the log includes LRC-AD1.cg2a.org and lrc-ad1.cg2a.org

 

Olivier30
Level 4
Partner

My tests:

on local client with LRC-AD1.cg2a.org nok

with LRC-AD1.CG2A.ORG nok too

with lrc-ad1.cg2a.org nok

with lrc-ad1 nok, the netbackup server don't have any backup

I have tested all typology

Another idea ?

Thank for your help

 

Olivier30
Level 4
Partner

I have tested to with java console

server is named lrc-ad1.cg2a.org in minus

but impossible to restore anything

always same error.

Mark_Solutions
Level 6
Partner Accredited Certified

Did you add it to its own server list as i suggested?

On the clients BAR GUI - File - Specify NetBackup Machines and Policy Type - Edit Server List - add lrc-ad1.cg2a.org - OK

 

Olivier30
Level 4
Partner

Hi

I have tested all configurations on local BAR GUI :

 

Bu always same error.

Any ideas ?

Thank

 

 

Marianne
Moderator
Moderator
Partner    VIP    Accredited Certified

Compare the size and timestamp of the tar32.exe binary with other clients on the same NBU version and OS.

Binary is in <install-path>Veritas\NetBackup\bin

Confirm that UAC is disabled on the client.

The only other suggestion from my side is to log a Support call with Symantec.

(PS: your screenshot cannot be opened.)

 

Mark_Solutions
Level 6
Partner Accredited Certified

We may have already covered it but on the client do you have the NetBackup Client Service and NetBackup Legacy Network Service running as a full domain administrator?

Are you also using a full domain admin account to initiate this restore and if UAC is enabled did you right click and use "Run as administrator" when opening the BAR GUI?

Olivier30
Level 4
Partner

HI Mark

Yes and Yes

Netbackup services are running with account as full domain administrator (i have used this account to restore email and it's fully fonctionnal)

UAC is desactivated but i have tested with run as too.

I have opend a case to support.

I post solution ASAP

Thank Mark and Marianne :)

Robert_Neves
Level 2

Did you resolve this issue? I am experiencing the same problem and I am looking for a solution.


Regards,


Robert

Olivier30
Level 4
Partner

Hi Robert

An call is open to support.

I publish solution ASAP

 

Olivier