You do not have permission to perform this operation or access this resource is displayed in the Java GUI
Problem
In various places within the Java GUI, NetBackup Administrators may see an error displayed which is stating "Access Denied", when host name resolution is not functioning properly.
Error Message
Access Denied. You do not have permission to perform this operation or access this resource.
Example:
or
Cause
Administrators can review the java log files to determine which interface the updates are attempting to use.
Java logging can be enabled by following the steps outlined in articles:
https://www.veritas.com/content/support/en_US/article.100005318.html (for Windows) or https://www.veritas.com/content/support/en_US/article.100030065.html (for Unix).
See the Related Knowledge Base Articles for additional information.
Once the logging has been set up, the problem should be reproduced. The java log file that is created in the:
UNIX: <install_path>/openv/netbackup/logs/user_ops/nbjlogs
Windows: <install_path>\Veritas\Java\logs
Review the resulting log file will show the IP address and host name returned from the bpclntcmd, and the resulting PBX connection to the master server from remote machine.
Example:
bpclntcmd data returned on IP address 10.1.1.2TO[0]:"/usr/openv/netbackup/bin/bpclntcmd" -hn nbumaster -get_pbx_portnbumaster
FROM[0]: hostnbumaster: nbumaster at 10.1.1.2
FROM[1]: aliases: loghost nbumaster.veritas.com nbumas nbumaster.
The return connection attempt on 10.1.2.2:vrts.nbu.admin.icache.NBGUIORBConfigurator:10.1.2.2:1556:nbsl
vrts.nbu.admin.icache.NBGUIORBConfigurator:nbumaster.veritas.com:1556:nbsl
Then the error occurs.PortalException: Status =0:Access Denied. You do not have permission to perform this operation or access this resource.
Solution
This issue can be resolved in several ways:
- Creating an alias in the hosts file for the affected interface.
- Correcting name resolution.
- Adding the following lines to the setconf.bat on Windows :
SETREQUIRED_INTERFACE = 10.1.2.2
SETREQUIRED_INTERFACE >> "%NBJDIR%"\nbjconf
- Or, the equivalent for UNIX, the nbj.conf:
REQUIRED_INTERFACE = 10.1.2.2