NetBackup™ Snapshot Manager for Data Center Administrator's Guide
- Introduction
- Preparing for NetBackup Snapshot Manager for Data Center installation
- Meeting system requirements
- Deploying NetBackup Snapshot Manager for Data Center using container images
- Upgrading NetBackup Snapshot Manager for Data Center
- Migrating and upgrading NetBackup Snapshot Manager for Data Center
- Uninstalling NetBackup Snapshot Manager for Data Center
- Snapshot Manager for Data Center catalog backup and recovery
- Configure NetBackup Snapshot Manager for Data Center
- Storage array replication
- Storage array plug-ins for Snapshot Manager for Data Center
- Azure NetApp Files plug-in
- Azure Files plug-in
- Dell EMC PowerMax and VMax array
- Dell EMC PowerFlex array
- Dell EMC PowerScale (Isilon)
- Dell EMC PowerStore SAN and NAS plug-in
- Dell EMC XtremIO SAN array
- Dell EMC Unity Array
- Fujitsu Eternus AF/DX SAN array
- Fujitsu Eternus AB/HB SAN array
- Fujitsu AX/HX Series plug-in
- HPE RMC plug-in
- HPE XP plug-in
- HPE Alletra 9000 SAN array
- HPE Alletra 6000 SAN array
- HPE GreenLake for Block Storage array
- HPE GreenLake for File Storage (VAST) array
- Hitachi NAS array
- Hitachi SAN array
- IBM Storwize SAN V7000 plug-in
- IBM FlashSystem plug-in
- IBM SAN Volume Controller plug-in
- InfiniBox SAN array
- InfiniBox NAS array
- Lenovo DM 5000 series array
- NetApp storage array
- NetApp E-Series array
- Nutanix Files array
- Pure Storage FlashArray SAN
- Pure Storage Flash Array files services (NAS)
- Pure Storage FlashBlade plug-in configuration notes
- PowerMax eNAS array
- Qumulo NAS array
- VMware vSAN File Services plug-in
- NetBackup Snapshot Manager logging
- Troubleshooting
(SELinux) Storage array plug-in configuration failure for custom port
Explanation:
NetBackup version 10.4 and later support SELinux on NetBackup Snapshot Manager for Data Center hosts to communicate between the Snapshot Manager for Data Center and the storage arrays.
For successful plug-in configuration, the port used for REST API communication in the plug-in configuration must have an entry in the CIL.
For Custom port configuration, add the Port entry in the CIL before the Storage array plug-in configuration.
Workaround:
To confirm if there any custom ports to be allowed, run:
ausearch --start today -m avc -se VRTSflexsnap.process | audit2allow
Error log:
#============= VRTSflexsnap.process ============== allow VRTSflexsnap.process reserved_port_t:tcp_socket name_connect;
Run the command:
# flexsnap_configure updatecil -i
You can see the following output:
Following SElinux updates detected for Snapshot Manager. allow VRTSflexsnap.process reserved_port_t:tcp_socket name_connect; Do you want to update Snapshot Manager's SELinux policy? (y/n): y Updating runtime SELinux policy ...done
To confirm if all the port denials are allowed, run:
flexsnap_configure updatecil
Permission denials are covered by the runtime policy
For changes to take effect, run:
flexsnap_configure restart