Sun Storage 7410 Unified Storage System
 
Sun Storage 7310 Unified Storage System
 
Sun Storage 7110 Unified Storage System
 
Sun Storage 7210 Unified Storage System
 

PLA-Support>Sun Systems>DISK>NAS>SN-DK: 7xxx NAS
 

In this Document

Goal

Fix

Symptoms

Changes

Cause

Solution

Applies to:

Goal

Trying to configure NetBackup to talk to Sun Storage 7410 Unified Storage System, DMA user_id/password setup.

However, NetBackup unable to authenticate the ZFS appliance using MD5 authentication method.

It seems to require the MD5 encrypted password string rather than the real password.

Fix

Symptoms

Problem

Which user ID and password should be used when authorizing the Network Data Management Protocol Media Servers host name for Remote Network Data Management Protocol?

Error
ndmp_connect_client_auth failed

Changes

Remote Network Data Management Protocol (NDMP) allows data on an NDMP host to be backed up to a drive that is directly connected to a VERITAS NetBackup (tm) media server.

The NDMP host then sends the data over the network to the drive on the NetBackup media server.

NetBackup uses an NDMP Mover Agent service to interpret the NDMP data being sent from the NDMP host to the NetBackup media server.

To install the NDMP Mover Agent Service, run the command InstallNDMPMoverAgent "<path_to_mover_agent>" ' from the <install_dir>\veritas\volmgr\bin directory.

(Example: InstallNDMPMoverAgent "C:\Program Files\Veritas\VolMgr\Bin") This command is going to prompt for a user name and password.

The user name and password used to install the mover agent service will be the same user ID and password used when running the command set_ndmp_attr -auth <NDMP Host> to authorize the media server.

If the logon and password fields are left blank, the NDMP Mover Agent service will accept any user ID and password.

Once the NDMP Mover Agent has been installed, it will be necessary to authorize both the media server as well as the NDMP host using the set_ndmp_attr -auth <NDMP Host> command.

Refer to the example below.

Cause

Symantec TechNote 267773

Authorizing NetBackup access to the NDMP host for NetBackup 5.1 and earlier.
Use the following commands to authorize NetBackup access to the NDMP host (NAS filer):

Where ndmp_server_host identifies the NDMP host that NetBackup will be backing up and username is the username under which NetBackup will access the NDMP host.

If your NDMP host requires a particular username or access level, see the section in this document on that NDMP host.

For more information on authorizing access for NetBackup, refer to the "NetBackup for NDMP Administrator's Guide" for your NetBackup release.

For NetBackup 6.0 or later, use the tpconfig and tpautoconf commands as described under "Example Configuration Sequence" in each of the following sections of this document for particular NDMP hosts.


Example configuration sequence:

1. Enter the following to authorize NetBackup 6.0 or later to access the BlueArc Titan system and its robot. (See "Authorizing NetBackup Access to the NDMP Host" for assistance with earlier NetBackup releases.)

Example output from the -verify option:

Connecting to host "bluearc_host" as user "ndmp"...
Waiting for connect notification message...
Opening session--attempting with NDMP protocol version 4...
Opening session--successful with NDMP protocol version 4
host supports TEXT authentication
host supports MD5 authentication
Getting MD5 challenge from host...
Logging in using MD5 method... <=------------------------------ customer is failing after this... please see document Symantec TechNote 267773 for authentication fix
Host info is:
host name "bluearc_host"
os type "BOS"
os version "3.3"
host id "b313425de63a:1"
Login was successful
Host supports LOCAL backup/restore
Host supports 3-way backup/restore

2.  Using the Media and Device Management utility in the NetBackup Administration Console, define robots, drives, and storage units, then create a backup policy. These procedures are described in the "NetBackup for NDMP Administrator's Guide".

Solution

Combine all files into a single archive and give them a unique name that reflects your company name or other identifying characteristic.

Connecting to host "nsun045a-s" as user "nsrop"...
Waiting for connect notification message...
Opening session--attempting with NDMP protocol version 4...
Opening session--successful with NDMP protocol version 4
host supports TEXT authentication
host supports MD5 authentication
Getting MD5 challenge from host...
Logging in using MD5 method...
ndmp_connect_client_auth failed<--------------------------------MD5 authentication method fails
: host "nsun045a-s" failed
NDMP failed to verify host


Solution:
Issue resides on the Symantec side of the configuration see Article URL https://www.symantec.com/docs/TECH91996

Action Plan:
Authorize both the media server as well as the NDMP host using the following commands:

InstallNDMPMoverAgent "C:\Program Files\Veritas\VolMgr\Bin"
Logon (blank to allow any Logon/Password) > root
Password (blank to allow any Password) > password (The Password used here is the password to use with set_ndmp_attr -auth)
Re-enter password > password

User name for host "Media1": root
Password for host "Media1" user "root": password
Re-enter Password for host "Media1" user "root": password
Updated host "Media1"

User name for host "Media1": root
Password for host "Media1" user "root": <NDMP Host Password>
Re-enter Password for host "Media1" user "root": <HDMP Host Password>
Updated host "NDMP1"

This solution has no attachment