STATUS CODE: 525, occurs when trying to log into a Solaris 10 NetBackup server using a NetBackup Java Administration console

Article:TECH47228  |  Created: 2008-01-28  |  Updated: 2008-01-28  |  Article URL http://www.symantec.com/docs/TECH47228
Article Type
Technical Solution


Environment

Issue



STATUS CODE: 525, occurs when trying to log into a Solaris 10 NetBackup server using a NetBackup Java Administration console

Error



Can not connect to the NB-Java authentication service via VNETD on port 13724.

Solution



Overview:
For Solaris 10 NetBackup server, it may be necessary to convert the format of the inetd.conf file before connecting to it via the NetBackup Java Administration console.  This problem may also occur if the vnetd daemon is in a maintenance state on the server.

Until the NetBackup entries are converted and online, any connections to the server will fail with an error 525 (Can not connect to the NB-Java authentication service via VNETD on <host> on port 13724).  

Troubleshooting:
Check to see there are no problems resolving the host name of the server that the console will connect to (likely the Master Server).  Run the following commands and compare the output:
# cd /usr/openv/netbackup/bin
# ./bpclntcmd -hn <hostname_of_server>
This should return the proper host name and IP address information for the server.
# ./bpclntcmd -ip <IP_address_of_server>
This should return the same host name and IP address information for the server.
If these commands do not return the same output, then check the Domain Name Server (DNS) records and the local /etc/hosts file.  Correct any invalid entries and try the commands again.

If the host name and IP address information is correct, then telnet to the vnetd port on the server to test the connection.  If the vnetd service is not registered with inetd, then the connection will be refused.
# telnet <hostname> 13724
Trying x.x.x.x...
telnet: Unable to connect to remote host: Connection refused.

Log Files: N/A

Resolution:
Multiple causes for this error message have been seen and are listed below.  Review each of these to determine which one is appropriate for the system.

I. The NetBackup services listed in inetd.conf on the Solaris 10 server may need to be converted to Service Manifest (SMF) entries. .  
In Solaris 10, inetd services are controlled via SMF.  Once these entries are converted, it will be possible to connect to the Solaris 10 system via the NetBackup Java Administration console.

1. Convert the inetd.conf entries.
# inetconv -i /etc/inet/inetd.conf

2. Find the Process ID (PID) for inetd.
# ps -ef |grep inetd
root  181  1  0  Jan 16 ? 0:46 /usr/sbin/inetd -s

3. Restart the inetd daemon.  This will simply return to the prompt if successful.
# kill -HUP <PID>

4. Try to connect to the server again using the NetBackup Java Administration console.

II. This can also be caused if the vnetd daemon is in a maintenance state on the server.

1. Check the status of the vnetd service.  The state should show as online.  The following example shows that vnetd is in maintenance mode.
# svcs |grep -i vnetd
maintenance  13:04:01 svc:/network/vnetd/tcp:default

2. Disable and then enable the vnetd daemon.
# svcadm disable svc:/network/vnetd/tcp:default
# svcadm enable svc:/network/vnetd/tcp:default

3. Verify the state of the vnetd service.
# svcs |grep vnetd
online  13:04:09 svc:/network/vnetd/tcp:default

4. Try to connect to the server again using the NetBackup Java Administration console.

III. This can also be caused if TCP wrappers have been enabled for vnetd.
The /usr/openv/netbackup/logs/user_ops/nbjlogs/jbp.root.jpbSA.<pid>.log file may show the error "java.net.ConnectException: Incompatible VNETD version:"

1. Check to see if TCP wrappers have been enabled for vnetd.
inetadm -l /network/vnetd/tcp:default
...
default  tcp_wrappers=TRUE

2. Disable TCP wrappers for vnetd using command:
inetadm -m /network/vnetd/tcp:default tcp_wrappers=FALSE

If none of the above steps resolve the problem then contact Symantec Enterprise Technical Services for additional assistance.

Supplemental Materials

SourceError Code
Value525
DescriptionNetBackup Error 525: Can not connect to the NB-Java authentication service via VNETD on (host) on port (vnetd_configured_port_number). Check the log file for more details.


Legacy ID



282709


Article URL http://www.symantec.com/docs/TECH47228


Terms of use for this information are found in Legal Notices