Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

NetWorker: Bootstrap Backup- og Authc-kommandoer mislykkes på klyngede Linux-servere efter opgradering til 19.7.0.3 eller 19.8.0.2 og før

Summary: NetWorker-serveren implementeres på en klynget Linux NetWorker-server. Efter opgradering af NetWorker-versionen til 19.7.0.3 eller 19.8.0.2 og tidligere mislykkes sikkerhedskopieringen af Server Protection-opstarten. Godkendelsesservicekommandoer (nsrlogin, authc_config, authc_mgmt) mislykkes også, den returnerede fejl er, at godkendelsesservicen ikke er tilgængelig med HTTP-fejl 404 (ikke fundet). ...

This article applies to   This article does not apply to 
Check out resources for

Symptoms

NetWorker-serveren implementeres på en Red Hat Pacemaker (pc'er) High Availability-klynge.

NetWorker blev opgraderet til 19.7.0.4.

NetWorker-tjenestestart lykkes, alle klyngeressourcer vises som "startet" på en af klyngenoderne: 
root@NWrhelNodeG:~# pcs resource * Resource Group: NW_group: * fs (ocf::heartbeat:Filesystem): Started NWrhelNodeG.emclab.local * ip (ocf::heartbeat:IPaddr): Started NWrhelNodeG.emclab.local * nws (ocf::EMC_NetWorker:Server): Started NWrhelNodeG.emclab.local
nsrlogin-kommando mislykkes med HTTP-fejl 404 (ikke fundet): 
[admin@NWrhelNodeG linux_x86_64]$ nsrlogin -u Administrator 130136:nsrlogin: Please enter password: 117849:nsrlogin: Authentication library error: GET failed with HTTP-ERROR: 404 Server Message : Could not parse server-response from json string Server Message : Make sure that server is running
"Server Protection" bootstrap backup kan ikke sikkerhedskopiere authcdb:
 
Bootstrap Backup kan ikke sikkerhedskopiere authcdb
Figur 1: Bootstrap Backup kan ikke sikkerhedskopiere authcdb

Cause

Ændringer til authc under opgraderingen blev ikke sendt til klyngedelte authcdb. Under opgraderingsprocessen deaktiveres pc'ens NWS-ressource, eller PCS-klyngeressourcen stoppes fuldstændigt. Hvis NWS ikke kører, er /nsr-mappen symbolisk knyttet (peger) til /nsr. NetWorker.local i stedet for /nsr_share.

/nsr. NetWorker.local er mappen med de fysiske noder /nsr og indeholder kun klientrelaterede mapper. En /nsr. Mappen NetWorker.local/authc findes, men den indeholder ikke nogen af de filer, der er specifikke for NetWorker-serverens authcdb. Mappen er placeret under /nsr_share/nsr/authc. 

Efter NetWorker-opgraderingen forventer authc "version B" af authc-filerne, men ser "version A" af filerne fra før opgraderingen.

Resolution

Opgrader NetWorker til en af følgende udgivelser (eller nyere):
  • 19.8.0.4
  • 19.9.0.2
Hvis du bruger en tidligere version, skal du opgradere til en af de versioner, der anbefales ovenfor. NetWorker-pakker kan downloades fra Dells supportproduktside for NetWorker.

Hvis du bruger 19.8.0.4 eller 19.9.0.2 og nyere, skal du gøre følgende:
  1. På hver node i klyngen skal du omdøbe /opt/nsr/authc-server/conf/h2_db.properties:
mv /opt/nsr/authc-server/conf/h2_db.properties /opt/nsr/authc-server/conf/h2_db.properties.bak
  1. På hver node skal /opt/nsr/authc-server/scripts/authc_configure.sh køre igen for at omkonfigurere Authc. Dette sletter ikke nogen indstillinger eller konfigurationer, der tidligere er udført i authc.
På den aktive node ser det nogenlunde sådan ud: 
root@NWrhelNodeH:~# /opt/nsr/authc-server/scripts/authc_configure.sh 

Specify the directory where the Java Standard Edition Runtime Environment (JRE) software is installed [/opt/nre/java/latest]: 

The installation process will install an Apache Tomcat instance. For optimum security, EMC NetWorker Authentication Service will use a non-root user (nsrtomcat) to start the Apache Tomcat instance. If your system has special user security requirements, ensure that proper operational permissions are granted to this non-root user (nsrtomcat). 
Please refer to NetWorker Installation Guide. 

WARNING: Port 9090 is already in use. 

Do you wish to specify a different port number [y]? n 

The Apache Tomcat will use "NWrhelNodeH.emclab.local" as the host name. The Apache Tomcat will use "9090" as the port number. 

The NetWorker Authentication Service requires a keystore file to configure encryption and to provide SSL support. 

EMC recommends that you specify a keystore password that has a minimum of six characters. 

Do you want to use the existing keystore /nsr/authc/conf/authc.keystore [y]? 

Specify password for the existing keystore: 
The install will use the existing certificate "emcauthctomcat" for Apache Tomcat. 
The install will use the existing certificate "emcauthcsaml" for Authentication Service. 

Creating the installation log in /opt/nsr/authc-server/logs/install.log.

Performing initialization. Please wait... 

The installation completed successfully.

På de passive noder ser det nogenlunde sådan ud:
  
root@NWrhelNodeG:~# /opt/nsr/authc-server/scripts/authc_configure.sh 

Specify the directory where the Java Standard Edition Runtime Environment (JRE) software is installed [/opt/nre/java/latest]: 

The installation process will install an Apache Tomcat instance. For optimum security, EMC NetWorker Authentication Service will use a non-root user (nsrtomcat) to start the Apache Tomcat instance. If your system has special user security requirements, ensure that proper operational permissions are granted to this non-root user (nsrtomcat). 
Please refer to NetWorker Installation Guide. 

The Apache Tomcat will use "NWrhelNodeG.emclab.local" as the host name. The Apache Tomcat will use "9090" as the port number. 

The NetWorker Authentication Service requires a keystore file to configure encryption and to provide SSL support. 

EMC recommends that you specify a keystore password that has a minimum of six characters. 

Do you want to use the existing keystore /nsr/authc/conf/authc.keystore [y]? 

Specify password for the existing keystore: 
The install will use the existing certificate "emcauthctomcat" for Apache Tomcat. 
The install will use the existing certificate "emcauthcsaml" for Authentication Service. 

The NetWorker Authentication Service defines automatically an administrator user account named administrator in the NetWorker Authentication Service local database. This account is specific to the administration of the NetWorker Authentication Service, and is not related to other administrator accounts on this system. 

******************************************************************************************* 
Password criteria: Minimum required characters - 9 and Maximum allowed characters - 126 Minimum [alphabetic - 2, Uppercase - 1, Lowercase - 1, Numeric - 1, Special character - 1] 
******************************************************************************************** 

Specify an initial password for administrator: 
Confirm the password: 

Creating the installation log in /opt/nsr/authc-server/logs/install.log. 

Performing initialization. Please wait... 

The installation completed successfully.
 
BEMÆRK: På den passive node bliver du bedt om at oprette en ny adgangskode til NetWorker Administrator-kontoen. Det betyder ikke, at den eksisterende adgangskode går tabt. Dette sker, fordi den authcdb, der bruges af klyngen, er under /nsr_share/nsr/authc, som kun findes på den aktive node. Når en passiv node bliver den nye aktive node, bruger den den delte authcdb. Scriptet for authc_configure.sh køres på hver node for at gendanne /opt/nsr/authc-server/conf/h2_db.properties, som er lokalt for hver node.
  1. Genstart NWS-ressourcen:
pcs resource restart nws
  1. Bekræft, at NWS-ressourcen er startet:
pcs resource 

root@NWrhelNodeH:~# pcs resource 
   * Resource Group: NW_group: 
      * fs (ocf::heartbeat:Filesystem): Started 
NWrhelNodeH.emclab.local 
      * ip (ocf::heartbeat:IPaddr): Started 
NWrhelNodeH.emclab.local 
      * nws (ocf::EMC_NetWorker:Server): Started 
NWrhelNodeH.emclab.local

Nsrlogin-forsøg og boottrap-sikkerhedskopieringer bør lykkes.

Affected Products

NetWorker

Products

NetWorker Family, NetWorker Series
Article Properties
Article Number: 000212755
Article Type: Solution
Last Modified: 12 Apr 2024
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.