8.3: nbcertcommand -signCertificate fails on solaris with "-noPrompt" not valid when used with ...
Hi, I'm in the middle of upgrading my 8.1.2 Solaris 10 and 11 Sparc clients to v8.3, but because some/most of the clients are behind firewalls or in the DMZ, I can't seem to run the nbcertcmd on them to get a certificate. So now I'm trying to do the dance of: on client: nbcertcmd -createCertRequest -requestFile /tmp/cert-req -server nbu-server then I copy the /tmp/cert-req file to my "nbu-server" and run on the "nbu-server" (which is running: Solaris 11.2 sun4v sparc) the nbcertcmd to sign the request, but the **bleep** thing fails. # /usr/openv/netbackup/bin/nbcertcmd -signCertificate -validFor 2D -requestFile /tmp/cert-req -certificateFile /tmp/cert-signed Option '-noPrompt' is not valid when used with operation '-signCertificate'. Option '-file' or '-validFor' is mandatory to complete operation '-signCertificate'. Usage: nbcertcmd -signCertificate -validFor | -file <authorization_token_file> -requestFile <request_file_name> -certificateFile <certificate_file_name> Description: Reads the certificate signing request from the specified request file and sends it to the master server to get a NetBackup CA-signed certificate. The signed certificate is stored in the specified certificate file. The command must be executed on the NetBackup host that has connectivity with the master server. Options: -certificateFile certificate_file_name Specifies the path of the certificate file. -file authorization_token_file Path of the file containing authorization token on the first line. -requestFile request_file_name Specifies the path of the certificate request file. -token Indicates that an authorization token is used for the request. Prompts the user to securely specify a token. EXIT STATUS 20: invalid command parameter I don't use the "-noPrompt" flag anywhere. And I can't figure out how to make this work. Do I really need to also regenerate a token for this client? I have to say that this entire move to security has been a total pain in the ass, because it's makes things so fragile. I wish I could just turn this off for internal only hosts.Solved1.9KViews0likes5CommentsCannot login to admin console using jnbSA
Hi, Needed help with connection to the admin console. Netbackup version 8.0 Master server: RHEL 6.2 I am attempting to open the admin console by directly connecting a display to the master server. On attempting to open Netbackup admin console using /usr/open/java/jnbSA, I was getting the below error. "NetBackup could not initiate a trust relationship with host hostname. Ensure that your Domain Name Service (DNS) resolves the hostname to the correct IP address and check network connectivity". Found this article which stated it is due to nbatd service not running. https://www.veritas.com/support/en_US/article.100014059 On checking the running services using ./bpps -x, I found that nbatd service is not found to be running. (Attachment- bpps output_1) Tried restarting the services as mentioned in the article, 'If nbatd is not mentioned as running on the system, restarting NetBackup would solve the problem', it was not of any help as nbatd did not come up. Tried a /usr/openv/netbackup/bin/nbatd as well, but no use. Also, in the attachment (bpps output_1), we can see the nbwmc service running. However, on running bpps within the next 5 seconds, that service seems to be missing. Then, tried the steps as mentioned in the marked solution in the discussion https://vox.veritas.com/t5/NetBackup/Netbackup-could-not-initiate-a-trust-relationship-with-host/td-p/773792 Deleted the folder with the master server name, restarted services, and tried /usr/openv/netbackup/bin/jnbSA. New error pops up "The host does not have Netbackup Hostname based security certificate installed. The certificate is mandatory to establish a secure connection" Reverted the changes from the backup copy of the files. Tried the steps as mentioned in the marked solution of the discussion, https://vox.veritas.com/t5/NetBackup/nbatd-is-failing-to-start/m-p/689744 Error: [root@prdspnbapp01 bin]# /usr/openv/netbackup/bin/admincmd/bpnbaz -ConfigureAuth You will have to restart NetBackup services on this machine after the command completes successfully. Do you want to continue(y/n)y Gathering configuration information. ERROR: Failed to start security services - /usr/openv/netbackup/bin/nbatd -f Unable to fork child process. On searching some more, I stumbled upon this. (Attachment- nbcertcmd) I found out that a certificate has expired on March 27, 2019. I tried steps to renew it, but to no avail. I changed the system date to February, and the console started up, however with an error message stating that the Netbackup Web Management service is not running. Could I have some help with getting nbatd and nbwmc up and running, and the admin console running without having to change the system date to some old date? Regards, Ajo5.4KViews0likes7Comments