cancel
Showing results for 
Search instead for 
Did you mean: 

why can't log in Netbackup java admin console(username invalid)?

Ivy_Yang
Level 6

hi, All

I have such a question.

we have  a windows NBU backup environment 6.5.6, it;s very old.

we used the "Netbackup administration console"(the icon below) to do the adminitrative job. no need to input username/password every time.

 

actually I don't like the user interface. So when I upgraded the NBU from 6.5.6 to 7.5.0.3, I installed "Netbackup administration console" 7.5.

It looks like below. but I came accross login issue which not happened in other NBU backup environments.

it always shows as below. All of my NBU services are running with this domain account. We only have 2 Windows NBU backup domains.

it is good in the other one but doesn't work for this one.

I even created a file "C:\Program Files\Veritas\Java\auth.conf", which looks like beow, but still doesn;t work...

STARCITE\srv-backup ADMIN=ALL JBP=ALL

 

so who please help me correct this issue?

1 ACCEPTED SOLUTION

Accepted Solutions

sksujeet
Level 6
Partner Accredited Certified

Both the account are in different domain as you see from your command

the account that is working is from domain starcite.com and is a domain admin

whereas the other one is from domain active.local and only a domain user.

You are trying to run the NBU console from a different domain all together, make sure you have craoss domain site relationship setup. Better you check with your Admin.

View solution in original post

17 REPLIES 17

RamNagalla
Moderator
Moderator
Partner    VIP    Certified

hi,

 

are you able to login (Remote desktop connection )to the Window server using the user name STARCITE\srv-backup.

if not(Not able to RDC)

you need to fix the issue first , why you are not able to login using RDC.

if yes, (able to RDC)

try adding  the entry in auth.conf as below and try to login

srv-backup ADMIN=ALL JBP=ALL

and also in Java console use the user name as srv-backup,

i guess you are opening the java console from the master server it self..

 

Ivy_Yang
Level 6

hi, Nagalla

1) yes, I can log the windows NBU master via STARCITE\srv-backup

 

2) I am trying as your suggestion now

Ivy_Yang
Level 6

hi, Nagalla

I tried but seems not work......

I have another windows backup domain, I also open java console from the master server itself, but i used "STARCITE\srv-backup" as usename and I didn't create auth.conf....but it works.....

 

I even refer to http://www.symantec.com/business/support/index?page=content&id=TECH72342 but doesn;t work either

Marianne
Moderator
Moderator
Partner    VIP    Accredited Certified

You have installed the Java Console instead of the Windows Admin Console. You were using Windows Admin Console before.

The Java Console needs an auth.conf file on the master that assigns rights to the users specified in this file.

See this TN for HOWTO create/modify auth.conf: http://www.symantec.com/docs/HOWTO34639

Ivy_Yang
Level 6

yes, Marianne, they are different console. Thank you for pointing out this.

1) I created auth.conf under but doesn't work sad

STARCITE\srv-backup ADMIN=ALL JBP=ALL

2) we have another windows backup domain in San Jose city. I did the same operation last week*(upgrade from 6.5.X to 7.5.0.3, install java console to replace windows admin console......). I installed java console and connect with "STARCITE\srv-backup" directly without creating auth.conf...............

 

 

 

 

RamNagalla
Moderator
Moderator
Partner    VIP    Certified

hi  Yang

if that did not help, lets isolate if that is the issue with the user account or netbackup

 

try to login with the local Administrator accout,  to the Java console and see how it works.

if that works its confirms that is not a netbackup issue

may be we need to look in deep about login using domain account..

Ivy_Yang
Level 6

the domain account " srv-backup" has different settings on the two severs....

it has more permission on San jose NBU master. I think that is why I can connect with NBU directly via java console without creating auth.conf....

 

C:\Documents and Settings\srv-backup>hostname
sjcnbu1
C:\Documents and Settings\srv-backup>net user srv-backup /DOMAIN
The request will be processed at a domain controller for domain starcite.com.
User name                    srv-backup
Full Name                    srv-backup
Comment                      login servers to back them up
User's comment
Country code                 000 (System Default)
Account active               Yes
Account expires              Never
Password last set            10/25/2010 6:47 AM
Password expires             Never
Password changeable          10/26/2010 6:47 AM
Password required            Yes
User may change password     Yes
Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   11/19/2012 12:33 AM
Logon hours allowed          All
Local Group Memberships
Global Group memberships     *Exchange Organization*Exchange Domain Serve
                             *Server_Service_Accts *Domain Users
                             *Domain Admins
The command completed successfully.


C:\Documents and Settings\srv-backup>hostname
phlnbu1
C:\Documents and Settings\srv-backup>net user srv-backup /domain
The request will be processed at a domain controller for domain active.local.
User name                    srv-backup
Full Name                    srv-backup
Comment
User's comment
Country code                 000 (System Default)
Account active               No
Account expires              Never

Password last set            3/28/2012 4:36 PM
Password expires             Never
Password changeable          3/29/2012 4:36 PM
Password required            Yes
User may change password     Yes
Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   Never
Logon hours allowed          All

Local Group Memberships
Global Group memberships     *Domain Users
The command completed successfully.

Ivy_Yang
Level 6

unfortunately srv-backup is the only acccount  I have.........

RamNagalla
Moderator
Moderator
Partner    VIP    Certified

yes, it seems

its missing Global Group memberships  for *Server_Service_Accts *Domain Admins

 i believe those are the things you require.. 

sksujeet
Level 6
Partner Accredited Certified

Both the account are in different domain as you see from your command

the account that is working is from domain starcite.com and is a domain admin

whereas the other one is from domain active.local and only a domain user.

You are trying to run the NBU console from a different domain all together, make sure you have craoss domain site relationship setup. Better you check with your Admin.

Ivy_Yang
Level 6

Thanks for all of you.

I at least understand why....

 

I will talk to domain admin.

Ivy_Yang
Level 6

but I still have a question, the account "srv-backup" is only a domain user,not domain admin in active.local domain.

so I am wondering  if "domain admin" role is a MUST even if I configure auth.conf?

I am not sure if it is a MUST to make "srv-backup" a domain admin......

Marianne
Moderator
Moderator
Partner    VIP    Accredited Certified

No need for domain admin rights - just local admin rights on master server.

Ivy_Yang
Level 6

HI, Marianne

Thank you . It helps me a lot.

Since our Windows master belongs to ACTIVE domain, so I asked domain administrator help create a ACTIVE domain user account for me.

1) the NBU services are running with ACTIVE domain user account "svc.scbackup"

2) The NBU master itself belongs to ACTIVE domain also

3) I add "srv-backup" to the local administrators......

I can access my Data domain CIFS share from NBU master, but I don't have write permission.....all the backups ended with status code 84.

 

here is my DD setting. May be I need to seek help from EMC forum for the DD configuration cheeky

sysadmin@shadd1# cifs share show
Shares information for: all shares

--------------- share backup ---------------
clients: 10.136.2.23
clients: 10.200.20.66
clients: 10.200.20.67
comment: This share can be accessed by Shanghai NBU master.
enabled: 1
path: /backup
users: ACTIVE\svc.scbackup
writeable: yes

Marianne
Moderator
Moderator
Partner    VIP    Accredited Certified

Your question in this discussion was about Java Console Login.
If this problem is resolved, please select the post that has helped you most and Mark As Solution.

DD permissions will probably be best addressed in EMC forum. I found this post there:

https://community.emc.com/docs/DOC-11923

 

 

Ivy_Yang
Level 6

Thank you Marianne

This helps me a lot. Thanks for it.