newAuthenticate: bad pam_status 3, Error in service module

[Dimitrios]

Hello Community,

since the weekend cannot connect over the GUI on my Master-Server, i get a timed out error when i try to click under "Host Properties" -> Master Server -> Properties.

i found thies output from cat /usr/openv/netbackup/logs/bpjava-msvc/log.061714

07:08:35.270 [13896] <4> bpjava-msvc: NEW_LOG closing debugFD and seting NB_INVALID
07:08:35.271 [13891] <16> poll_listen: can't find file descriptor in polling table
07:08:35.271 [13891] <4> bpjava-msvc: NEW_LOG closing debugFD and seting NB_INVALID
07:13:35.047 [20738] <2> logparams: bpjava-msvc -transient
07:13:35.249 [20739] <16> newAuthenticate: bad pam_status 3, Error in service module
07:13:35.340 [20739] <16> command_LOGON_TO_MSERVER: putenv(BPJAVA_MASTER_IPC_STRING=) failed
07:13:35.341 [20741] <8> vnet_vxss_java_login: [vnet_vxss_helper.c:2372] Ignoring VxSS USE_VXSS = PROHIBITED
07:13:35.342 [20740] <16> isVxssActive: authentication determination failed, assume none required: (193) VxSS authentication is requested but not allowed
07:13:35.460 [20739] <4> bpjava-msvc: NEW_LOG closing debugFD and seting NB_INVALID
07:13:35.461 [20738] <16> poll_listen: can't find file descriptor in polling table
07:13:35.461 [20738] <4> bpjava-msvc: NEW_LOG closing debugFD and seting NB_INVALID
07:49:57.213 [2053] <2> logparams: bpjava-msvc -transient
07:49:57.414 [2054] <16> newAuthenticate: bad pam_status 3, Error in service module
07:49:57.503 [2054] <16> command_LOGON_TO_MSERVER: putenv(BPJAVA_MASTER_IPC_STRING=) failed
07:49:57.505 [2056] <8> vnet_vxss_java_login: [vnet_vxss_helper.c:2372] Ignoring VxSS USE_VXSS = PROHIBITED
07:49:57.506 [2055] <16> isVxssActive: authentication determination failed, assume none required: (193) VxSS authentication is requested but not allowed
07:49:57.626 [2054] <4> bpjava-msvc: NEW_LOG closing debugFD and seting NB_INVALID
07:49:57.627 [2053] <16> poll_listen: can't find file descriptor in polling table
07:49:57.627 [2053] <4> bpjava-msvc: NEW_LOG closing debugFD and seting NB_INVALID

i check the authorization

bpauthorize -M sbs01nbm -get_vxss_info
1 1 0 0 0 -1 0 193

have someone a idea

best regards

[Nicolai]

What role do you have in NBAC ?

Besides that I see :

Ignoring VxSS USE_VXSS = PROHIBITED 

Meaning NBAC is disabled

authentication determination failed, assume none required: (193) VxSS authentication is requested but not allowed.

Someone still require secure NBAC connections to Netbackup. Any media servers still in NBAC mode ?

http://www.symantec.com/docs/TECH58652

[sri_vani]

Check the bpgetconfig binary file size (/usr/openv/netbackup/bin/admincmd)

if it is zero

Plz verify the link:

http://www.symantec.com/business/support/index?page=content&id=TECH157224

[Dimitrios]

Hello and Thx for answer!

@Nicolai

all Media server use the default value:

/usr/openv/netbackup/bin/admincmd/bpgetconfig | grep PROHIBITED
USE_VXSS = PROHIBITED

How can i enable or rerun NBAC on master?

the only thing that does not work is the gui everything else to create the pl via command line, backup jobs runs, communication betwin master - media - client - storage the function is working.

the media server in the gui are available once and then away, when i try to get to the properties one of the media server thies take a long time betwin 2-3 min, either is an error or (next try) shows the properties of the media.

@sri vani the bp.conf and bpgetconfig have not a 0 byte size.

i get new error on try to connect from win Media server GUI to properties from the same or other media

[Nicolai]

I would first try to ensure NBAC is removed completely before re-enabling NBAC

Symantec has written two Technote of how to ensure NBAC is deactivated.

http://www.symantec.com/docs/TECH190214

http://www.symantec.com/docs/TECH175054

What version of Netbackup are you on. I had a similar problem with opscentre and partial connected media servers. But that was not related to NBAC. The fix was 7.5.0.6

[Nicolai]

Yet another technote:

After enabling NBAC, a Windows Remote Administration Console fails to have full functionality

http://www.symantec.com/docs/TECH218258

[Dimitrios]

Thanks @all.

master and media all on v 7.5.0.6

issue is resolved. i have kill all services on master, though the nbsl daemon cant stop with "bp.kill_all" must be killed with kill -9 bpsl.

i found thies one, the colleague have resolve thies issue with stop and start individual daemons:

http://forum.support.veritas.com/connect/zh-hans/forums/netbackup-76-java-admin-console-0

Thanks Nicolai

best regards

[Dimitrios · Accepted solution]

Hi,

the master and all media have a v 7.5.0.6 and the master is in a cluster, but the cluster doesn't work.

we have resolved thies issue with simply restart nbu daemons on master. that was anything but easy since a nbsl daemon hang and cant stop with bp.kill_all, musst be kill with kill -9 nbsl.

Thank you all so much!

Best regards

[Nicolai]

FYI

Post was caught by the anti-spam system. I have released it and updated the link because it was broken.

[Nicolai]

Thanks for providing the solution to the issue 

[sri_vani]