NetBackup™ Snapshot Manager for Data Center Administrator's Guide
- Introduction
- Preparing for NetBackup Snapshot Manager for Data Center installation
- Deploying NetBackup Snapshot Manager for Data Center using container images
- Upgrading NetBackup Snapshot Manager for Data Center
- Uninstalling NetBackup Snapshot Manager for Data Center
- Snapshot Manager for Data Center catalog backup and recovery
- Configure NetBackup Snapshot Manager for Data Center
- Storage array replication
- Storage array plug-ins for Snapshot Manager for Data Center
- Dell EMC PowerMax and VMax array
- Dell EMC PowerFlex array
- Dell EMC PowerScale (Isilon)
- Dell EMC PowerStore SAN and NAS plug-in
- Dell EMC XtremIO SAN array
- Dell EMC Unity Array
- Fujitsu Eternus AF/DX SAN array
- Fujitsu Eternus AB/HB SAN array
- HPE RMC plug-in
- HPE XP plug-in
- HPE Alletra 9000 SAN array
- HPE Alletra 6000 SAN array
- HPE GreenLake for Block Storage array
- Hitachi NAS array
- Hitachi SAN array
- IBM Storwize SAN V7000 plug-in
- IBM FlashSystem plug-in
- IBM SAN Volume Controller plug-in
- InfiniBox SAN array
- InfiniBox NAS array
- Lenovo DM 5000 series array
- NetApp storage array
- NetApp E-Series array
- Nutanix Files array
- Pure Storage FlashArray SAN
- Pure Storage FlashBlade plug-in configuration notes
- PowerMax eNAS array
- Qumulo NAS array
- Configuring storage lifecycle policies for snapshots and snapshot replication
- Operation types in a storage lifecycle policy
- Retention types for storage lifecycle policy operations
- NetBackup Snapshot Manager logging
- Troubleshooting
(SELinux) Storage array plug-in configuration failure for custom port
Explanation:
NetBackup version 10.4 and later support SELinux on NetBackup Snapshot Manager for Data Center hosts to communicate between the Snapshot Manager and the storage arrays.
For successful plug-in configuration, the port used for REST API communication in the plug-in configuration must have an entry in the CIL.
For Custom port configuration, add the Port entry in the CIL before the Storage array plug-in configuration.
Workaround:
To confirm if there any custom ports to be allowed, run:
ausearch --start today -m avc -se VRTSflexsnap.process | audit2allow
Error log:
#============= VRTSflexsnap.process ============== allow VRTSflexsnap.process reserved_port_t:tcp_socket name_connect;
Run the command:
# flexsnap_configure updatecil -i
You can see the following output:
Following SElinux updates detected for Snapshot Manager. allow VRTSflexsnap.process reserved_port_t:tcp_socket name_connect; Do you want to update Snapshot Manager's SELinux policy? (y/n): y Updating runtime SELinux policy ...done
To confirm if all the port denials are allowed, run:
flexsnap_configure updatecil
Permission denials are covered by the runtime policy
For changes to take effect, run:
flexsnap_configure restart