Upgrade from NetBackup 8.1 to 8.1.1 is failing

[iot333]

When upgrading from NetBackup 8.1 to 8.1.1, upgrade is failing when trying to upgrade the database. I get the following error:

+ 05-22-2018,13:59:00 : ERROR: NetBackup Database Creation Failed!

+ 05-22-2018,13:59:00 : Review the log file in NetBackup\logs\nbdb for more information.

05-22-2018,13:59:00 : CustomAction Deferred_CreateNBDB returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)

+ 05-22-2018,13:59:00 : Action ended 13:59:00: InstallFinalize. Return value 3.

In the nbdb log:

13:58:56.565 [3004.3008] <4> getUnameInfoData: Windows OS Version - MajorVersion****= 6 - MinorVersion****= 3
13:58:56.862 [3004.3008] <16> nbdb_admin@VssImportCredential: (../../libVnbat/vss_auth.cpp,3451): Cred file open FAILED
13:58:56.862 [3004.3008] <16> check_for_secadmin: failed to import cred: , error:36
13:58:56.862 [3004.3008] <16> nbdb_admin: You must be Security Administrator to execute C:\Program Files\Veritas\NetBackup\bin\nbdb_admin
13:58:56.862 [3004.3008] <4> nbdb_admin: Exiting with rc = 36
13:58:56.877 [5620.5676] <4> NBDBsystem: Command exited with status: 36

Any idea how to resolve this issue?

[Marianne]

Always best to log a Sev 1 Support call when an upgrade fails... 

[Nicolai]

based on the infromation provided it looks like you are not running the update with administration priviliges - did you remember right clikc - "run as" ?

nbdb_admin: You must be Security Administrator to execute C:\Program Files\Veritas\NetBackup\bin\nbdb_admin

[Amol_Nair]

Do you have nbac or enhanced auditing enabled on the master.?

Could you share the complete install log and the nbdb log file.. pretty difficult just with a few lines from the log..

[iot333]

Yes I did. Even if I open command prompt "run as" Administrator and run:

C:\Program Files\Veritas\NetBackup\bin>nbdb_admin.exe -dba testing123

I still get the error: You must be Security Administrator to execute nbdb_admin.exe

I've tried the above command using the local machine administrator, and also domain admin accounts who are administrators on the system, on the domain, and are in the "NBU_Security Admin" group. In all cases I see the above error which is the same I see in the NetBackup upgrade logs. Upgrades in the past have always worked fine, but for some reason I see this issue going from 8.1 to 8.1.1.

[iot333]

Attached are the nbdb logs

[Amol_Nair]

Looking through the logs it seems that there is no NBAC configured on the master server at the moment so not very sure why you or how you were referring to adding the user to NBU security group..

It seems that you upgraded NetBackup directly from 7.6.1 to 8.1.. And now attempting it from 8.1 to 8.1.1 Hope you were aware that you were supposed to first upgrade to 8.0 and not directly to 8.1..


13:58:56.393 [5620.5676] <4> performUpgrade(): Entering, received runVer:8.1.0.0, curVer:8.1.1.0, originalVersion:7.6.1.0.


Did you ensure that nbdb was correctly running at 8.1 prior to moving to 8.1.1
If not that could cause issues

Read through the caution mentioned in the below link
https://www.veritas.com/support/en_US/doc/125240132-127350446-0/v85160419-127350446

Currently if you were to say everything is stable at 8.1 then I would like to know is enhanced auditing enabled.?

[iot333]

Actually we did not upgrade from 7.6.1 to 8.1. We upgraded from 7.6.1, to 7.7.3, to 8.0 a while back, then from 8.0 to 8.1. Now we are trying to upgrade from 8.1 to 8.1.1.

The environment has been stable and running fine since we upgraded it to 8.1. Nbdb hasn't had any issues as far as I'm aware.

I have not enabled enhanced auditing, and to my knowledge this is disabled by default. Is there a command I can use to check this? I could only find commands to enable or disable this.

[Amol_Nair]

@iot333

Yes by default enhanced auditing is disabled.

You could try running bpgetconfig on the master server and look for these outputs.

For NBAC >> look for >> USE_VXSS

For Enhanced Auditing >> look for >> USE_AUTHENTICATION

If use_authentication is set to ON it means that you have enhanced auditing enabled.

In bpgetconfig if you do see any entries for AUTHENTICATION_DOMAIN it means that at some point either NBAC or enhanced auditing was enabled on the machine. 

Did you raise any case with us for this issue? As you mentioned that even while you attempt to run the nbdb_admin commands manually you seem to be getting the same error, lets try to focus on that first and get this sorted out.

My guess would be that NBAC may have been enabled in the environment earlier and is either not correctly setup or not correctly removed. 

[Nick_Morris]

We had this issue and this fixed it: https://www.veritas.com/support/en_US/article.100042241