HOWTO: Re-install Symantec Authentication Service on PureDisk 6.6 and NetBackup 50x0 Appliances

Article:TECH171447  |  Created: 2011-10-10  |  Updated: 2014-04-08  |  Article URL http://www.symantec.com/docs/TECH171447
Article Type
Technical Solution

Product(s)

Environment

Issue



The NetBackup appliance web GUI cannot be launched as the Login page is not rendered. Instead an error message like the following may be observed in the web browser.

???en_US.error.generic.exception.message???  
For more help contact Netbackup PureDisk Support.


Error



------------------------------------------------
Error in the /Storage/log/guilogs/catalina.out
------------------------------------------------
log4j:WARN No appenders could be found for logger (org.apache.struts.util.PropertyMessageResources).
log4j:WARN Please initialize the log4j system properly.
This is called with name:: com.symantec.nbu.puredisk.common.plugin.PureDiskPlugIn
After This is called with name:: com.symantec.nbu.puredisk.common.plugin.PureDiskPlugIn
java.util.logging.ErrorManager: 0: Product ID not defined.
>>> PureDisk web service IP: myPD5020app.hro.spt.symantec.com
This is called with name:: com.symantec.nbu.puredisk.util.PureDiskEditionDetector
After This is called with name:: com.symantec.nbu.puredisk.util.PureDiskEditionDetector
This is called with name:: com.symantec.nbu.paf.portal.puredisk.LicenseManagementPortal
After This is called with name:: com.symantec.nbu.paf.portal.puredisk.LicenseManagementPortal
This is called with name:: com.symantec.nbu.paf.agent.puredisk.LicenseManagementAgent
After This is called with name:: com.symantec.nbu.paf.agent.puredisk.LicenseManagementAgent
com.symantec.nbu.paf.exception.PAFCommunicationException: (403)Forbidden
 at com.symantec.nbu.paf.agent.puredisk.converters.ExceptionConverter.convertToPAFException(ExceptionConverter.java:356)
 at com.symantec.nbu.paf.agent.puredisk.LicenseManagementAgent.retrieveStoragePoolEdition(LicenseManagementAgent.java:205)
 at com.symantec.nbu.paf.portal.puredisk.LicenseManagementPortal.retrieveStoragePoolEdition(LicenseManagementPortal.java:98)
 at com.symantec.nbu.puredisk.model.LicenseManagementDelegate.retrieveStoragePoolEdition(LicenseManagementDelegate.java:67)
 at com.symantec.nbu.puredisk.util.PureDiskEditionDetector.getPureDiskEditionType(PureDiskEditionDetector.java:108)
 at com.symantec.nbu.puredisk.util.PureDiskEditionDetector.setPureDiskEditionType(PureDiskEditionDetector.java:57)
 at com.symantec.nbu.puredisk.common.plugin.PureDiskPlugIn.init(PureDiskPlugIn.java:95)
 at org.apache.struts.action.ActionServlet.initModulePlugIns(ActionServlet.java:871)
 at org.apache.struts.action.ActionServlet.init(ActionServlet.java:359)
 at javax.servlet.GenericServlet.init(GenericServlet.java:212)
 at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1172)
 at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:992)
 at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4058)
 at org.apache.catalina.core.StandardContext.start(StandardContext.java:4371)
 at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791)
 at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771)
 at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:525)
 at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:926)
 at org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:889)
 at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:492)
 at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1149)
 at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:311)
 at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:117)
 at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053)
 at org.apache.catalina.core.StandardHost.start(StandardHost.java:719)
 at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045)
 at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443)
 at org.apache.catalina.core.StandardService.start(StandardService.java:516)
 at org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
 at org.apache.catalina.startup.Catalina.start(Catalina.java:578)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
 at java.lang.reflect.Method.invoke(Unknown Source)
 at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288)
 at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)

 

 

------------------------------------------------
Exception seen in the VxUL log files
  /Storage/log/guilogs/ 51216-500-763404042-110921-0000000000.log
------------------------------------------------
0,51216,500,500,3,1316641633161,0,0,0:,4396:License Management Exception while executing licenseMgr.retrieveStoragePoolEdition - AxisFault faultCode: {http://xml.apache.org/axis/}HTTP faultSubcode: faultString: (403)Forbidden faultActor: faultNode: faultDetail: {}:return code: 403 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>403 Forbidden</title> </head><body> <h1>Forbidden</h1> <p>You don't have permission to access /spa/soap/ws_licensing.php on this server.</p> <p>Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.</p> </body></html> {http://xml.apache.org/axis/}HttpErrorCode:403 (403)Forbidden at
 org.apache.axis.transport.http.HTTPSender.readFromSocket(HTTPSender.java:744) at
 org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:144) at
 org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32) at
 org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118) at
 org.apache.axis.SimpleChain.invoke(SimpleChain.java:83) at
 org.apache.axis.client.AxisClient.invoke(AxisClient.java:165) at
 org.apache.axis.client.Call.invokeEngine(Call.java:2784) at
 org.apache.axis.client.Call.invoke(Call.java:2767) at
 org.apache.axis.client.Call.invoke(Call.java:2443) at
 org.apache.axis.client.Call.invoke(Call.java:2366) at
 org.apache.axis.client.Call.invoke(Call.java:1812) at
 com.symantec.netbackup.puredisk.licensemgmt.LicenseMgrBindingStub.retrieveStoragePoolEdition(LicenseMgrBindingStub.java:336) at
 com.symantec.nbu.paf.agent.puredisk.LicenseManagementAgent.retrieveStoragePoolEdition(LicenseManagementAgent.java:193) at
 com.symantec.nbu.paf.portal.puredisk.LicenseManagementPortal.retrieveStoragePoolEdition(LicenseManagementPortal.java:98) at
 com.symantec.nbu.puredisk.model.LicenseManagementDelegate.retrieveStoragePoolEdition(LicenseManagementDelegate.java:67) at
 com.symantec.nbu.puredisk.util.PureDiskEditionDetector.getPureDiskEditionType(PureDiskEditionDetector.java:108) at
 com.symantec.nbu.puredisk.util.PureDiskEditionDetector.setPureDiskEditionType(PureDiskEditionDetector.java:57) at
 com.symantec.nbu.puredisk.common.plugin.PureDiskPlugIn.init(PureDiskPlugIn.java:95) at
 org.apache.struts.action.ActionServlet.initModulePlugIns(ActionServlet.java:871) at
 org.apache.struts.action.ActionServlet.init(ActionServlet.java:359) at
 javax.servlet.GenericServlet.init(GenericServlet.java:212) at
 org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1172) at
 org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:992) at
 org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4058) at
 org.apache.catalina.core.StandardContext.start(StandardContext.java:4371) at
 org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:791) at
 org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:771) at
 org.apache.catalina.core.StandardHost.addChild(StandardHost.java:525) at
 org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:926) at
 org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:889) at
 org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:492) at
 org.apache.catalina.startup.HostConfig.start(HostConfig.java:1149) at
 org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:311) at
 org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:117) at
 org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1053) at
 org.apache.catalina.core.StandardHost.start(StandardHost.java:719) at
 org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1045) at
 org.apache.catalina.core.StandardEngine.start(StandardEngine.java:443) at
 org.apache.catalina.core.StandardService.start(StandardService.java:516) at
 org.apache.catalina.core.StandardServer.start(StandardServer.java:710) at
 org.apache.catalina.startup.Catalina.start(Catalina.java:578) at
 sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at
 sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) at
 sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) at
 java.lang.reflect.Method.invoke(Unknown Source) at
 org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:288) at
 org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413),58:com.symantec.nbu.paf.agent.puredisk.LicenseManagementAgent,1

 
 

Environment



NetBackup 50x0 Appliance
PureDisk 6.6.x

 


Solution



The folllowing procedure may be used to re-install Symantec Authentication Service (VxAT) and re-configure it for use by PureDisk. The procedure is only applicable to the Storage Pool Authority (SPA) node.

 

 

-------------------------------------------------

START OF PROCEDURE

-------------------------------------------------

 

STEP 1>

Identify the current resource name (is it hostname or IPaddr?) associated with the AT package
myPD5020app:~ # /opt/VRTSat/bin/vssat listpd --pdrtype root

Domain(s) Found 1

****************************

Domain Name root@myPD5020app.hro.spt.symantec.com
Expiry Interval 0

****************************

 

STEP 2>

Capture the output we captured for the configured SPA name
export SPAIP=`/opt/VRTSat/bin/vssat listpd --pdrtype root | grep Name | cut -d' ' -f3 | cut -d'@' -f2`
Echo to view/validate contents

echo $SPAIP

 

STEP 3>

Stop PureDisk (this will terminate any active jobs - ideally cancel jobs and wait for them to exit)

myPD5020app:~ # /etc/init.d/puredisk stop
Checking for CRON daemon                                              running
Stopping CRON daemon: cron                                            done
Checking for PureDisk JAVA GUI                                        running
Stopping PureDisk JAVA GUI: java                                      done
Checking for PureDisk MetabaseEngine                                  running
Stopping PureDisk MetabaseEngine: java .                              done
Checking for PureDisk Workflow Engine                                 running
Stopping PureDisk Workflow Engine: pdwfe ..                           done
Checking for PureDisk ContentRouter                                   running
Stopping PureDisk ContentRouter: spoold                               done
Checking for PureDisk Server Agent                                    running
Stopping PureDisk Server Agent: pdagent ....                          done
Checking for PureDisk Controller Monitor                              running
Stopping PureDisk Controller Monitor: pdctrlmon .                     done
Checking for PureDisk Controller                                      running
Stopping PureDisk Controller: pdctrl                                  done
Checking for PureDisk SPA Authorization Service                       running
Stopping PureDisk SPA Authorization Service: java .                   done
Checking for PureDisk WebServer                                       running
Stopping PureDisk WebServer: apache2 .                                done
Checking for PureDisk Database Server                                 running
Stopping PureDisk Database Server: postmaster                         done
Checking for PureDisk Memory Cache Daemon                             running
Stopping PureDisk Memory Cache Daemon: memcached                      done
Checking for VxATd daemon                                             running
Stopping VxATd daemon: vxatd                                          done
Checking for LDAP-server                                              running
Stopping LDAP-server: ldap                                            done
Stopping PureDisk Services                                            done

 

STEP 4>

Capture a backup of the existing configuration (use mv instead of cp command)
myPD5020app:~ # cd /Storage/var
myPD5020app:/Storage/var # mv VRTSat VRTSat.backed-up


myPD5020app:/ # cd /Storage/home_dirs/www-data/
myPD5020app:/Storage/home_dirs/www-data # mv .VRTSat .VRTSat.backed-up
myPD5020app:/Storage/home_dirs/www-data # mkdir .VRTSat
myPD5020app:/Storage/home_dirs/www-data # chown www-data:www-data .VRTSat

myPD5020app:/Storage/home_dirs/www-data # cd

 

 

STEP 5>

Identify the VRTSat packages on the system (my test was done on a 1.3 system, expect the AT packages to be the same)

myPD5020app:~ # rpm -qa | grep VRTSat
VRTSatServer-5.0.31.1-1
VRTSatClient-5.0.31.1-1

 

STEP 6>
Uninstall AT packages

myPD5020app:~ # rpm -e VRTSatClient-5.0.31.1-1
myPD5020app:~ # rpm -e VRTSatServer-5.0.31.1-1
warning: /var/VRTSat/.VRTSat/profile/VRTSatlocal.conf saved as /var/VRTSat/.VRTSat/profile/VRTSatlocal.conf.rpmsave
warning: /opt/VRTSat/bin/runvssatgui.sh saved as /opt/VRTSat/bin/runvssatgui.sh.rpmsave
warning: /etc/vx/vss/VRTSat.conf saved as /etc/vx/vss/VRTSat.conf.rpmsave
Removing directory /opt/VRTSat


STEP 7>

Echo to view/validate contents and set additional variables

myPD5020app:~ # echo $SPAIP

Note:  Should return myPD5020app.  If clustered, should return SPA cluster name.

myPD5020app:~ # export INSTALL_PATH=/opt

 

STEP 8> 

Decrypt the toplogy.ini, if needed

myPD5020app:~ # /opt/pdinstall/enc_topology.sh -d

 
STEP 9>

Re-configuration steps

myPD5020app:~ # cd /opt/pdconfigure/scripts/installers
myPD5020app:/opt/pdconfigure/scripts/installers

# /opt/pdconfigure/scripts/installers/Install.VRTSat.sh
-------------------------------------
- Installing PureDisk VRTSat module -
-------------------------------------
   => Installing VRTSat client and server
   => Installing /opt/pdinstall/var/packages/VRTSatClient-5.0.31.1-1.x86_64.rpm
   => Installing /opt/pdinstall/var/packages/VRTSatServer-5.0.31.1-1.x86_64.rpm
   => Installing jar files and apache modules                                                                                               [done]
   => Configuring apache
   => Configuring VRTSat                                                                                                                    [done]
   => Modifying java.security file
   => Modifying /etc/sudoers file                                                                                                           [done]
   => Writing logrotate for vxatd.log
   => Creating logrotate configuration vrtsat for: /var/VRTSat/log/vxatd.log                                                                [done]
   => Updating AT configuration to allow SSLv2                                                                                              [done]
   => Starting the web server                                                                                                               [done]
-------------------------------------------------
- PureDisk VRTSat module Installation Completed -
-------------------------------------------------

 

STEP 10>

Ensure File permissions are set properly and start PureDisk

myPD5020app:/opt/pdconfigure/scripts/installers

# /opt/pdconfigure/scripts/installers/SetPermissions.sh /opt
Setting permissions on filesystem ...
Done

 

myPD5020app:~ # /etc/init.d/puredisk start

 

  

-------------------------------------------------

 

STEP 11>

 

 

Authenticate the Credentials, ensuring they work
myPD5020app:/opt/pdconfigure/scripts/installers
# /opt/VRTSat/bin/vssat authenticate --domain ldap:PureDisk_Internal --prplname root --password
authenticate
 
----------------------
----------------------

Authenticated User root

----------------------
 
-------------------------------------------------

END OF PROCEDURE

-------------------------------------------------





Article URL http://www.symantec.com/docs/TECH171447


Terms of use for this information are found in Legal Notices