Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

why can't log in Netbackup java admin console(username invalid)?

Created: 18 Nov 2012 • Updated: 20 Nov 2012 | 16 comments
This issue has been solved. See solution.

hi, All

I have such a question.

we have  a windows NBU backup environment 6.5.6, it;s very old.

we used the "Netbackup administration console"(the icon below) to do the adminitrative job. no need to input username/password every time.

 

actually I don't like the user interface. So when I upgraded the NBU from 6.5.6 to 7.5.0.3, I installed "Netbackup administration console" 7.5.

It looks like below. but I came accross login issue which not happened in other NBU backup environments.

it always shows as below. All of my NBU services are running with this domain account. We only have 2 Windows NBU backup domains.

it is good in the other one but doesn't work for this one.

I even created a file "C:\Program Files\Veritas\Java\auth.conf", which looks like beow, but still doesn;t work...

STARCITE\srv-backup ADMIN=ALL JBP=ALL

 

so who please help me correct this issue?

Comments 16 CommentsJump to latest comment

RamNagalla's picture

hi,

 

are you able to login (Remote desktop connection )to the Window server using the user name STARCITE\srv-backup.

if not(Not able to RDC)

you need to fix the issue first , why you are not able to login using RDC.

if yes, (able to RDC)

try adding  the entry in auth.conf as below and try to login

srv-backup ADMIN=ALL JBP=ALL

and also in Java console use the user name as srv-backup,

i guess you are opening the java console from the master server it self..

 

Ivy_Yang's picture

hi, Nagalla

I tried but seems not work......

I have another windows backup domain, I also open java console from the master server itself, but i used "STARCITE\srv-backup" as usename and I didn't create auth.conf....but it works.....

 

I even refer to http://www.symantec.com/business/support/index?page=content&id=TECH72342 but doesn;t work either

Ivy_Yang's picture

hi, Nagalla

1) yes, I can log the windows NBU master via STARCITE\srv-backup

 

2) I am trying as your suggestion now

Marianne's picture

You have installed the Java Console instead of the Windows Admin Console. You were using Windows Admin Console before.

The Java Console needs an auth.conf file on the master that assigns rights to the users specified in this file.

See this TN for HOWTO create/modify auth.conf: http://www.symantec.com/docs/HOWTO34639

Supporting Storage Foundation and VCS on Unix and Windows as well as NetBackup on Unix and Windows
Handy NBU Links

Ivy_Yang's picture

yes, Marianne, they are different console. Thank you for pointing out this.

1) I created auth.conf under but doesn't work sad

STARCITE\srv-backup ADMIN=ALL JBP=ALL

2) we have another windows backup domain in San Jose city. I did the same operation last week*(upgrade from 6.5.X to 7.5.0.3, install java console to replace windows admin console......). I installed java console and connect with "STARCITE\srv-backup" directly without creating auth.conf...............

 

 

 

 

Ivy_Yang's picture

the domain account " srv-backup" has different settings on the two severs....

it has more permission on San jose NBU master. I think that is why I can connect with NBU directly via java console without creating auth.conf....

 

C:\Documents and Settings\srv-backup>hostname
sjcnbu1
C:\Documents and Settings\srv-backup>net user srv-backup /DOMAIN
The request will be processed at a domain controller for domain starcite.com.
User name                    srv-backup
Full Name                    srv-backup
Comment                      login servers to back them up
User's comment
Country code                 000 (System Default)
Account active               Yes
Account expires              Never
Password last set            10/25/2010 6:47 AM
Password expires             Never
Password changeable          10/26/2010 6:47 AM
Password required            Yes
User may change password     Yes
Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   11/19/2012 12:33 AM
Logon hours allowed          All
Local Group Memberships
Global Group memberships     *Exchange Organization*Exchange Domain Serve
                             *Server_Service_Accts *Domain Users
                             *Domain Admins
The command completed successfully.

C:\Documents and Settings\srv-backup>hostname
phlnbu1
C:\Documents and Settings\srv-backup>net user srv-backup /domain
The request will be processed at a domain controller for domain active.local.
User name                    srv-backup
Full Name                    srv-backup
Comment
User's comment
Country code                 000 (System Default)
Account active               No
Account expires              Never

Password last set            3/28/2012 4:36 PM
Password expires             Never
Password changeable          3/29/2012 4:36 PM
Password required            Yes
User may change password     Yes
Workstations allowed         All
Logon script
User profile
Home directory
Last logon                   Never
Logon hours allowed          All

Local Group Memberships
Global Group memberships     *Domain Users
The command completed successfully.

RamNagalla's picture

hi  Yang

if that did not help, lets isolate if that is the issue with the user account or netbackup

 

try to login with the local Administrator accout,  to the Java console and see how it works.

if that works its confirms that is not a netbackup issue

may be we need to look in deep about login using domain account..

RamNagalla's picture

yes, it seems

its missing Global Group memberships  for *Server_Service_Accts *Domain Admins

 i believe those are the things you require.. 

sazz.'s picture

Both the account are in different domain as you see from your command

the account that is working is from domain starcite.com and is a domain admin

whereas the other one is from domain active.local and only a domain user.

You are trying to run the NBU console from a different domain all together, make sure you have craoss domain site relationship setup. Better you check with your Admin.

SOLUTION
Ivy_Yang's picture

Thanks for all of you.

I at least understand why....

 

I will talk to domain admin.

Ivy_Yang's picture

but I still have a question, the account "srv-backup" is only a domain user,not domain admin in active.local domain.

so I am wondering  if "domain admin" role is a MUST even if I configure auth.conf?

I am not sure if it is a MUST to make "srv-backup" a domain admin......

Marianne's picture

No need for domain admin rights - just local admin rights on master server.

Supporting Storage Foundation and VCS on Unix and Windows as well as NetBackup on Unix and Windows
Handy NBU Links

Ivy_Yang's picture

HI, Marianne

Thank you . It helps me a lot.

Since our Windows master belongs to ACTIVE domain, so I asked domain administrator help create a ACTIVE domain user account for me.

1) the NBU services are running with ACTIVE domain user account "svc.scbackup"

2) The NBU master itself belongs to ACTIVE domain also

3) I add "srv-backup" to the local administrators......

I can access my Data domain CIFS share from NBU master, but I don't have write permission.....all the backups ended with status code 84.

 

here is my DD setting. May be I need to seek help from EMC forum for the DD configuration cheeky

sysadmin@shadd1# cifs share show
Shares information for: all shares

--------------- share backup ---------------
clients: 10.136.2.23
clients: 10.200.20.66
clients: 10.200.20.67
comment: This share can be accessed by Shanghai NBU master.
enabled: 1
path: /backup
users: ACTIVE\svc.scbackup
writeable: yes

Marianne's picture

Your question in this discussion was about Java Console Login.
If this problem is resolved, please select the post that has helped you most and Mark As Solution.

DD permissions will probably be best addressed in EMC forum. I found this post there:

https://community.emc.com/docs/DOC-11923

 

 

Supporting Storage Foundation and VCS on Unix and Windows as well as NetBackup on Unix and Windows
Handy NBU Links