Search <book_title>...

NetBackup™ Troubleshooting Guide

Last Published: 2023-10-23

Product(s): NetBackup (10.3.0.1, 10.3)

Troubleshooting issues with multi-person authorization

This topic provides information on how to troubleshoot issues that are specific to multi-person authorization process in NetBackup.

For more information on the multi-person authorization, see the NetBackup Security and Encryption Guide.

Table:

Sr. No.	Issue	Possible reason	Resolution
1.	After enabling multi-person authorization, NetBackup Vault creation or modification operation fails in the NetBackup Administration Console with the following error: Intermittent connectivity lost with the server.	Multi-person authorization is enabled for the image expiration operation.	Contact the NetBackup Security Administrator to exempt the user from the multi-person authorization process.
2.	After enabling multi-person authorization, the nbholdutil -delete command fails with the following error: Permission Denied by Hold Service	Multi-person authorization is enabled for the image expiration operation.	Contact the NetBackup Security Administrator to exempt the user from the multi-person authorization process.
3.	On NetBackup hosts earlier than 10.3 (invoking host), when command-line interface or NetBackup Administration Console is used for image expiration operation for which multi-person authorization is configured, the error with error code 117 is displayed.	Multi-person authorization is enabled for the image expiration operation.	If the invoking host is earlier than NetBackup 10.0, image expiry operation is blocked for such hosts, even if the user is exempted from the multi-person authorization process. If the invoking host is NetBackup 10.0 or later, contact the NetBackup Security Administrator to exempt the user from the multi-person authorization process. Sign into the web UI again and retry the operation.
4.	A user that is exempted from the multi-person authorization process is not able to perform the multi-person authorization enabled operation using CLIs and the error with 9382 error code is displayed.	The user is not authenticated. The bpnbat -login -logintype WEB command is not run after adding the user to the exempted list.	Run the bpnbat -login -logintype WEB command to successfully load the current permission set and perform the multi-person authorization enabled operation using one of the following interfaces: Using CLIs Using the NetBackup Administration Console Using the NetBackup web UI
5.	U user is removed from the exempted users' list, however is able to run a multi-person authorization enabled operation without a second approval.	Removal of a user from the exempted user list creates a multi-person authorization ticket. However, the associated ticket is not yet approved.	Check if a ticket for multi-person authorization configuration is created. Request the multi-person authorization approver to approve the ticket. After the approval, the user is removed from the exempted list.
6.	An exempted user failed to expire an image (failed to perform a multi-person authorization enabled operation)	The user is not authorized to perform the operation. A multi-person authorization ticket for an exempted user's request is not created. The issue may not be related to the multi-person authorization process.	Refer to the respective documentation.
7.	A multi-person authorization enabled operation is successful using the NetBackup Administration Console or CLIs.	The user must be in the exempted users' list.	If you want a multi-person authorization ticket to be created for this user, remove the user from the exempted users' list.
8.	Unable to add user groups to the exempted list.	Adding user groups to the exempted list is not allowed.	Add individual users to the exempted list.
9.	When trying to configure multi-person authorization from the NetBackup web UI, the following error is displayed: The date is not within the allowed range that is between 01/01/1970 and the current date	System date must not be set correctly.	Check the system date and specify a valid date that is between 01/01/1970 and the current date. Correct the date and restart the NetBackup services.
10.	Multi-person authorization tickets do not get expired even after the scheduled expiration period.	The NetBackup Web Management Console (nbwmc) service or daemon is down. NetBackup postgres database services or daemons are down.	Start the NetBackup Web Management Console (nbwmc) and the NetBackup postgres database services or daemons.
11.	Multi-person authorization tickets do not get purged even after the scheduled purge period.	The NetBackup Web Management Console (nbwmc) service or daemon is down. NetBackup postgres database services or daemons are down. There are no tickets in the Expired, Done, Rejected, and Canceled states that have reached the purge period.	Start the NetBackup Web Management Console (nbwmc) and the NetBackup postgres database services or daemons.
12.	NetBackup image expiry operation execution failed using CLIs after enabling multi-person authorization.	If multi-person authorization is enabled for an operation on the primary server, that operation is allowed only using the web UI and APIs. If user tries to perform the operation using the NetBackup Administration Console or the command-line interface, the operation fails.	Perform the operation using the NetBackup web UI. Contact the NetBackup Security Administrator to exempt the user from the multi-person authorization process.
13.	Not able to fetch a multi-person authorization ticket.	The specified ticket ID may not be valid. NetBackup Postgres database services or daemons are down.	Specify a valid ticket ID. Ensure that Check all the required services are up and running.
14.	Unable to update the state of the multi-person authorization ticket.	The multi-person authorization ticket cannot be updated, because the current state of the ticket cannot be changed to the proposed state.	Check the current state of the multi-person ticket and ensure that you are performing the operation based on the following state transitions that are allowed: Current state - Pending, Expired Proposed state - Approved, Rejected, Canceled, Pending
15.	Unable to update the multi-person authorization ticket.	If you are not the requester of the ticket or the multi-person authorization approver, you cannot approve, reject, cancel, or renew the ticket or add a comment.	Contact the NetBackup Administrator for the required permissions.
16.	While configuring multi-person authorization or performing any associated operations on a ticket, the following error is displayed: Unable to connect to server	The NetBackup Web Management Console service may be down.	Ensure that all the required NetBackup services are up and running.