Cannot login to admin console using jnbSA
Hi, Needed help with connection to the admin console. Netbackup version 8.0 Master server: RHEL 6.2 I am attempting to open the admin console by directly connecting a display to the master server. On attempting to open Netbackup admin console using /usr/open/java/jnbSA, I was getting the below error. "NetBackup could not initiate a trust relationship with host hostname. Ensure that your Domain Name Service (DNS) resolves the hostname to the correct IP address and check network connectivity". Found this article which stated it is due to nbatd service not running. https://www.veritas.com/support/en_US/article.100014059 On checking the running services using ./bpps -x, I found that nbatd service is not found to be running. (Attachment- bpps output_1) Tried restarting the services as mentioned in the article, 'If nbatd is not mentioned as running on the system, restarting NetBackup would solve the problem', it was not of any help as nbatd did not come up. Tried a /usr/openv/netbackup/bin/nbatd as well, but no use. Also, in the attachment (bpps output_1), we can see the nbwmc service running. However, on running bpps within the next 5 seconds, that service seems to be missing. Then, tried the steps as mentioned in the marked solution in the discussion https://vox.veritas.com/t5/NetBackup/Netbackup-could-not-initiate-a-trust-relationship-with-host/td-p/773792 Deleted the folder with the master server name, restarted services, and tried /usr/openv/netbackup/bin/jnbSA. New error pops up "The host does not have Netbackup Hostname based security certificate installed. The certificate is mandatory to establish a secure connection" Reverted the changes from the backup copy of the files. Tried the steps as mentioned in the marked solution of the discussion, https://vox.veritas.com/t5/NetBackup/nbatd-is-failing-to-start/m-p/689744 Error: [root@prdspnbapp01 bin]# /usr/openv/netbackup/bin/admincmd/bpnbaz -ConfigureAuth You will have to restart NetBackup services on this machine after the command completes successfully. Do you want to continue(y/n)y Gathering configuration information. ERROR: Failed to start security services - /usr/openv/netbackup/bin/nbatd -f Unable to fork child process. On searching some more, I stumbled upon this. (Attachment- nbcertcmd) I found out that a certificate has expired on March 27, 2019. I tried steps to renew it, but to no avail. I changed the system date to February, and the console started up, however with an error message stating that the Netbackup Web Management service is not running. Could I have some help with getting nbatd and nbwmc up and running, and the admin console running without having to change the system date to some old date? Regards, Ajo
NetBackup 8.1.2 upgrade via SCCM
We’re trying to upgrade NetBackup from 7.5 to 8.1.2. on Windows clients remotely via our Linux Master. Due to significant changes between these two versions we are not able to deploy an upgrade as the certificate authentication tech has changed dramatically. We now need to get this certificate installed on each of the clients before master/client communication can occur. So, we won’t have to touch our hundreds of servers manually we are looking into ways of automating this via SCCM. Is anyone aware of a way to deploy the 8.1.2. client with both cert and client packaged together via SCCM? How to find and package the certificate with the client? What are the best practices - deploy cert alone, combine cert and installer, remove 7.5 first then install 8.1.2? Thanks, MarkSCCM automation using silentclient.cmd 8.1.1
*** I tried to do a search in Vox for silentclient.cmd usage with 8.1.x version but the results were not what I'm looking for (the queries were pre 8.x) *** I configured the silentclient.cmd options file with Master server fingerprint and Authorization token (for fresh installs only) and provided that to our SCCM administrator. He is able to run the silent.cmd and NetBackup 8.1.1 gets installed and configured except for the certificate part. The trust between the client and master is successfully created. However, the certificate does not get deployed. I put the value of Authorization token for AUTHORIZATION_TOKEN variable in addition to other settings and save the file. The one thing that I have noticed is that the commands at the bottom of the files Echo does add the AUTHORIZATION_TOKEN to the %RESPFILENAME%. (adding the variable in %RESPFILENAME% didn't change anything though!) Has anyone got it working using silentclient.cmd along with certificates deployment?
