cancel
Showing results for 
Search instead for 
Did you mean: 

NetBackup Web Management Console not started.

inooo
Level 3

Hi

When I start nbwmc on my netbackup5240,it occurs "NetBackup Web Management Console not started."

The logs of nbwmc list:

The target server 10.1.0.200 could not be authenticated.
The server name does not match any of the host names listed in the server's certificate.
Names listed in the server's certificate are:
DNS:jxgs5240

nbcertcmd: The -ping operation failed.
EXIT STATUS 8509: The specified server name was not found in the web service certificate

 

Then I try the solution of this:

  UNIX/Linux:

   1) /usr/openv/netbackup/bin/nbwmc -terminate
   2) /usr/openv/netbackup/bin/admincmd/nbcertconfig -u -i
   3) /usr/openv/netbackup/bin/admincmd/nbcertconfig -m
   4) On 8.0 and 8.1: /usr/openv/netbackup/bin/admincmd/nbcertconfig -t      

   6) /usr/openv/wmc/bin/install/configureWmc
   7) /usr/openv/wmc/bin/install/configureCerts
   8) /usr/openv/wmc/bin/install/setupWmc
   9) /usr/openv/netbackup/bin/nbwmc -start
  10) /usr/openv/netbackup/bin/nbcertcmd -getCACertificate
  11) /usr/openv/netbackup/bin/nbcertcmd -getCertificate -force
      If the operation fails, perform the steps at "Create a token" section then return to this step.
  11) Remove the /usr/openv/var/global/vxss/nbcertservice/install_token file

on the step 10,it also occur :

The target server 10.1.0.200 could not be authenticated.
The server name does not match any of the host names listed in the server's certificate.
Names listed in the server's certificate are:
DNS:jxgs5240
nbcertcmd: The -getCACertificate operation failed for server 10.1.0.200.
EXIT STATUS 8509: The specified server name was not found in the web service certificate

what can i do?

Thanks

1 ACCEPTED SOLUTION

Accepted Solutions

Hamza_H
Moderator
Moderator
   VIP   
Hello,
This is exactly what the problem is, in your bp.conf file in the first SERVER entry you have the ip address,
Try to edit the file and put the name instead of the ip address.
And then go through that famous technote.
And put back results.

View solution in original post

13 REPLIES 13

StefanosM
Level 6
Partner    VIP    Accredited Certified

had you check this technote?

https://www.veritas.com/support/en_US/article.100034092

I strongly suggest you to open a "server down" case to veritas

Thank for your reply

I had tried it,but the result never changed

Hi @inooo 

There seems to be a problem resolving the hostname of the appliance - is DNS setup correctly (both forward and reverse)? 

You could try adding a static host file entry on the appliance that matches the IP address 10.1.0.200 to the (apparent) hostname of the appliance jxgs5240.

Cheers
David

I had tied it before start nbwmc service

inooo_0-1663639084741.png

inooo_1-1663639252869.png

inooo_2-1663639373675.png

but it also 

inooo_3-1663639570875.png

the nbwmc.log

inooo_4-1663639589790.png

 

 

 

Hi @inooo 

Can you confirm that the reverse IP can be resolved - use the command "getent hosts 10.1.0.200" - this should return the hostname. 

Also - can you also confirm the appliance is operating as a master/media server (the media server does not require nbwmc). 

Other than that, I would follow @StefanosM suggestion and log a support call.

Cheers
David

inooo_0-1663647097559.png

It return the hostname

and I can confirm the appliance is operating as a master server

Anyway, thank you for your help 

 

Hamza_H
Moderator
Moderator
   VIP   

Hello,

Please do as follows:

 

- run the commands below and share the output:

# bptestnetconn -frapv -s 

# bptestnetconn -frapv -H

# bpclntcmd -self

also share the bp.conf command using the command cat -A /usr/openv/netbackup/bp.conf

then try again the command nbcertcmd  -getCACertificate -server servers_name and share the output

output of bptestnetconn -frapv -s

inooo_1-1663683584123.png

 

output of bptestnetconn -frapv -H

inooo_2-1663683743992.png

output of bpclntcmd -self

inooo_3-1663683856635.png

 

bp.conf

inooo_4-1663683906030.png

output of nbcertcmd  -getCACertificate -server

inooo_5-1663684026910.png

 

Today I find a possible cause of this problem

When I run the command "/usr/openv/netbackup/bin/admincmd/nbcertconfig -t"

The cert file under /usr/openv/var/global/vxss/tomcatcreds/nbwebsvc/.VRTSat/profile/certstore only renew the ebbdf5b5-10.1.0.200!1556!nbatd!1556.0

inooo_6-1663684298641.png

The file named f65dd416-jxgs5240!1556!nbatd!1556.0 would not be renewed

Maybe if renew it can solve this problem?

I don't know how to renew it

 

 

inooo
Level 3

inooo_0-1663688072337.png

The TOMCAT certificate file has expired,I have tried the solution article.100044601  ,but it doesn't work

It won't renew

Hamza_H
Moderator
Moderator
   VIP   
Hello,
This is exactly what the problem is, in your bp.conf file in the first SERVER entry you have the ip address,
Try to edit the file and put the name instead of the ip address.
And then go through that famous technote.
And put back results.

Additionally, the hostname is defined as the IP address as per the output from "bpclntcmd -self". 

Does this appliance have valid backups on it? It may be prudent to perform a factory reset and start again (you are unable to change the hostname once set). 

David

It works!

Thank you!

Hamza_H
Moderator
Moderator
   VIP   

Hi @inooo ,

Welcome !

Glad that helped :)