When adding a new master server into OpsCenter receiving error: OpsCenter-10939

Problem

Error when trying to add a new master server into the OpsCenter UI.

Error Message

OpsCenter-10939:Connection to the specified NetBackup Master Server was not established. Enter the valid NetBackup user name and password. Enter the domain name along with the user name, if applicable. For example: domain1\admin



In this example the username user1 from the veritas domain does not have the appropriate local security policy settings.

From the bpjava-msvc log at VERBOSE = 5

08:28:47.056 [7968.10120] <2> newAuthenticate: domain\username = veritas\user1
08:28:47.056 [7968.10120] <2> EnablePrivilege: AdjustTokenPrivileges of SeTcbPrivilege ok
08:28:47.056 [7968.10120] <16> EnablePrivilege: AdjustTokenPrivileges of SeAssignPrimaryTokenPrivilege failed, result = 1,  errno = 1300 = Not all privileges or groups referenced are assigned to the caller.
08:28:47.056 [7968.10120] <2> revealPrivileges: PRIVILEGE NAME                   DISPLAY NAME
08:28:47.056 [7968.10120] <2> revealPrivileges: --------------                   ------------
08:28:47.056 [7968.10120] <2> revealPrivileges: SeCreateTokenPrivilege           Create a token object
08:28:47.056 [7968.10120] <2> revealPrivileges: SeIncreaseQuotaPrivilege         Adjust memory quotas for a process
08:28:47.056 [7968.10120] <2> revealPrivileges: SeTcbPrivilege                   Act as part of the operating system
08:28:47.056 [7968.10120] <2> revealPrivileges: SeSecurityPrivilege              Manage auditing and security log
************************
08:28:47.071 [7968.10120] <2> revealPrivileges: SeTimeZonePrivilege              Change the time zone
08:28:47.071 [7968.10120] <2> revealPrivileges: SeCreateSymbolicLinkPrivilege    Create symbolic links
08:28:47.071 [7968.10120] <2> writetagEx: tag= BAD_STATUS, sockFd = 488, tagged output = nope
08:28:47.071 [7968.10120] <2> writetagEx: tag character based, and limited to 4 chars
08:28:47.071 [7968.10120] <2> writeCountOrDataStartEx: lines = 1 , sockFd = 488
08:28:47.071 [7968.10120] <2> respond_with_STATUS: line 1 = 503
08:28:47.071 [7968.10120] <2> respond_with_STATUS: line 2 =
08:28:47.071 [7968.10120] <16> command_LOGON_TO_MSERVER: authenticate failed for user veritas\user1 (user not found)


NOTE: The bpjava-msvc log shows what privileges the user has, not what it is missing.

Cause

User does not have the appropriate local security settings within Windows.

Solution

Give the user appropriate rights:

Start --> Administrative Tools --> Local Security Policy --> Local Policies --> User Rights Assignment

Right-Click on " Replace a process level token" and add the user (In this example we would add the user user1)

Note: If all rights are present, check to see if the account is a member of an Administrative group as well as a regular user group. The presence of a user group could cause the same issue. Removing the user group so that the Administrator group is the only group associated with the account should resolve the issue.