How to uninstall NBAC from NetBackup 7.x Windows environments

Article:TECH190214  |  Created: 2012-06-01  |  Updated: 2014-03-05  |  Article URL http://www.symantec.com/docs/TECH190214
Article Type
Technical Solution


Issue



How to remove NBAC either because it is no longer needed, or because it has become corrupt and needs to be reconfigured.


Environment



Windows Master Server, Windows Media Servers, and Windows Clients

NetBackup 7.x


Solution



NOTE: NBAC is case sensitive.  For instance, the name "MYMASTER" does not equal "MyMaster".   Within a NetBackup environment, mixed case of the same server hostname appearing in different locations can cause NBAC to deny requests.   Before configuring NBAC, it is best to choose a case (all upper or all lower) and adjust all names to match across all hosts.  (aka. SERVER= lists on each host, client names in policies, hostnames in registry keys, host files, etc....) 

 

==========================================
MASTER SERVER
Below are the steps to reset NBAC on standard non-clustered Master server.
==========================================
1. Run the below command to stop NetBackup services
bpdown.exe -v -f 

 

2. Clean up AT data 
a. delete ...\VERITAS\NetBackup\var\global\vxss\eab\data\systemprofile\*
b. delete ...\VERITAS\NetBackup\var\VxSS\*

       

NOTE: We do not have a template of VRTSatlocal.conf file.
The "VRTSatlocal.conf.lastknowngoodcopy" file is present which is created after broker is configured.
If something went wrong during configuration itself then this file can't be trusted.  

 

3. Clean up AZ data
a. rename ...\VERITAS\NetBackupDB\data\NBAZDB.db to NBAZDB_old.db
b. rename ...\VERITAS\NetBackupDB\data\NBAZDB.log to NBAZDB_old.log
c. copy from ...\VERITAS\NetBackupDB\data\NBAZDB.db.template to ...\VERITAS\NetBackupDB\data\NBAZDB.db
d. delete the AZ_DB_PASSWORD row from ...\VERITAS\NetBackupDB\data\vxdbms.conf

      ====NOTE====

In certain scenarios it may be needed for  ...\VERITAS\NetBackupDB\data\vrtsaz_db.log to be renamed as  well to vrtsaz_dbold.log since when running the repair may hang in updating nbdb.

4. Update registry
HKEY_LOCAL_MACHINE\SOFTWARE\VERITAS\NetBackup\CurrentVersion\Config

a. remove AUTHENTICATION_DOMAIN
b. remove AUTHORIZATION_SERVICE
c. update USE_VXSS to PROHIBITED
d. add/update/check VXSS_SERVICE_TYPE to INTEGRITYANDCONFIDENTIALITY

 

5. Stop and Disable the Services named "NetBackup Authentication" and "NetBackup Authorization"

 

6. Run the NBU 7.x GA installer with Repair option (this will copy VRTSatlocal.conf file under ...\VERITAS\NetBackup\var\global\vxss\eab\data\systemprofile folder, work around to template file) 

NOTE: If the starting NBU Version is increments above 7.x (such as 7.x.0.4) you must also run a repair install of the most current patch. Please review TECH202917 (see Related Articles below for link) for additional information when running a Repair Install from the NetBackup 7.5 x64 Windows ISO.

 

7. Check/Modify config files  - 2 steps:

Step 1: In the following 3 files, replace as needed "INSTALLDIR" string with appropriate installation directory value (like C:\Program Files\Veritas)

I. ...\VERITAS\NetBackup\var\global\vxss\eab\data\systemprofile\VRTSatlocal.conf
II. ...\VERITAS\NetBackup\sec\az\bin\VRTSaz.conf 
III. ...\VERITAS\NetBackup\sec\az\bin\eazs.loc

Step 2: In the following file, verify the value of "AZDBPasswordFilePath" points to the correct and accurate location of vxdbms.conf:
...\VERITAS\NetBackup\sec\az\bin\VRTSaz.conf

Example: "AZDBPasswordFilePath"="C:\Program Files\Veritas\NetBackupDB\data\vxdbms.conf"

 

8. Generate new Database and Change Log
NOTE: NBU Services need to be stopped for this step to succeed
NOTE: Omit the -q switch to see the success or failure of the command on-screen

cd into ...\VERITAS\NetBackup\bin and run: "C:\Program Files\VERITAS\NetBackupDB\Win64\dblog.exe" -q -t NBAZDB.log "C:\Program Files\VERITAS\NetBackupDB\data\NBAZDB.db" (Change "C:\Program Files" to the correct path for your environment)

 

9. Start NBU services 
bpup -v -f

 

10. Reset the database password:
cd into ...\VERITAS\NetBackup\bin and run nbdb_admin.exe -dba <password>  (NBU default password = nbusql)

 

NOTE: You may need to change the Services named "NetBackup Authentication" and "NetBackup Authorization" to Automatic and Started

Troubleshooting Tips:
Tip 1: If the NetBackup Authentication or NetBackup Authorization or NetBackup Enterprise Media Manager services fails to start, check to see if the NetBackup Relational Database Manager service is started.  If it is started, follow these steps:
     * Open ...\Veritas\NetBackupDB\CONF\server.conf
     * Check the name of the server after -n
     * Open ...\Veritas\NetBackupDB\data\vxdbms.conf
     * If VXDBMS_NB_SERVER name is not the same as in server.conf, match it to server.conf's name
     * Open regedit and navigate to HKEY_LOCAL_MACHINE/Software/ODBC/ODBC.INI/NBAZDB/
     * If EngineName name is not the same as in server.conf, match it to server.conf's name 
     * Cycle services
 

Tip 2: If the NetBackup Authorization service fails to start it can be difficult to figure out where to find the log file to identify what the problem is.  Use the following technique to force the service to log to the foreground (screen).
     * Open a CMD prompt and CD into ...\VERITAS\NetBackup\sec\az\bin
     * Execute this command: nbazd.exe -eazs "C:\Program Files\Veritas\netbackup\sec\az\bin\eazs.loc" -fg 9   (Change "C:\Program Files" to the correct path for your environment)

 

NOTE: Skip Step 11 if you do not plan on reconfiguring NBAC 
NOTE:
 Once all services are running successfully, proceed to Step 11.

 

11. To proceed with reconfiguring NBAC run this command:
bpnbaz.exe -setupmaster

 

12. Restart NBU services

 

==========================================
MEDIA SERVER
==========================================
1. Stop NBU services

 

2. Clean up AT data
Remove ...\VERITAS\NetBackup\var\VxSS\at\systemprofile\certstore\*
Remove ...\VERITAS\NetBackup\var\VxSS\at\systemprofile\systruststore\*
Remove ...\VERITAS\NetBackup\var\VxSS\credentials\*

 

3. Registry cleanup under
HKEY_LOCAL_MACHINE\SOFTWARE\VERITAS\NetBackup\CurrentVersion\Config 

      

a. remove AUTHENTICATION_DOMAIN
b. remove AUTHORIZATION_SERVICE
c. update USE_VXSS to PROHIBITED
d. update/check VXSS_SERVICE_TYPE to INTEGRITYANDCONFIDENTIALITY

 

4. Start NBU services
bpup -v -f

 

NOTE: Skip Step 5 if you do not plan on reconfiguring NBAC

5. Run this command on the Master server:
bpnbaz -setupmedia <media-server-name>

 

NOTE: If the above command errors with, "Please make sure you have a credential file/credential to complete your operation", then please first run 'bpnbat -login', respond to the on-screen prompts, and once done, rerun 'bpnbaz -setupmedia'.

 

==========================================
CLIENT 
==========================================
1. Stop NBU services

 

2. Clean up AT data
Remove ...\VERITAS\NetBackup\var\VxSS\at\systemprofile\certstore\*
Remove ...\VERITAS\NetBackup\var\VxSS\at\systemprofile\systruststore\*
Remove ...\VERITAS\NetBackup\var\VxSS\credentials\*

 

3. Registry cleanup under
HKEY_LOCAL_MACHINE\SOFTWARE\VERITAS\NetBackup\CurrentVersion\Config 

a.   remove AUTHENTICATION_DOMAIN
b.   update USE_VXSS to PROHIBITED

 

4. Start NBU services

 

NOTE: Skip Step 5 if you do not plan on reconfiguring NBAC

5. Run this command on the Master server
bpnbaz -setupclient <client-name>

 

NOTE: If the above command errors with, "Please make sure you have a credential file/credential to complete your operation", then please first run 'bpnbat -login', respond to the on-screen prompts, and once done, rerun 'bpnbaz -setupclient'.

 

==========================================
If you need to reset NBAC on a Master server installed in a MSCS setup, please contact Customer Support for additional steps.
==========================================

==========================================
If you need to reset NBAC on a Master server installed on Windows VCS setup, please contact Customer Support for additional steps.
==========================================

 


Supplemental Materials

SourceETrack
Value2558790
Description

Steps to clear existing NBAC environment




Article URL http://www.symantec.com/docs/TECH190214


Terms of use for this information are found in Legal Notices