After NetBackup upgrade to 9.1/10.0 (or NetBackup Appliance 4.1/5.0), catalog backup cannot write dr pkg/drinfo "The service user account does not have the write permissions on the specified path (9202)"

Problem

After NetBackup upgrade to 10.0  (or NetBackup Appliance 5.0), catalog backup cannot write dr pkg/drinfo to the Disaster Recovery path "The service user account does not have the write permissions on the specified path"

Error Message

Detailed Status for the catalog backup reports:

"Unable to create disaster recovery package at <DR_path>. The service user account does not have the write permissions on the specified path"
 

Cause

Beginning with NetBackup 9.1, NetBackup can run most of the master server services as a non-root 'service user' user account. If the disaster recovery path specified in the catalog backup policy Disaster Recovery tab is not owned by the service user account, the error in this article may occur.

Solution

To confirm the name of the NetBackup service user account, execute:

bpgetconfig | grep SERVICE_USER

     ...or:
ps axo user:20,pid,comm | grep nbpem

Change ownership of the DR path using 'chown -R <service_user> <DR_path>'.and set permissions to 755 with chmod. Example where the service user account is nbsvcuser and the DR path is /mnt/remotedr:

chown -R nbsvcusr /mnt/remotedr

chmod -R 755 /mnt/remotedr

Note: in some environments, it becomes necessary to grant ownership permission to the nbsvcusr account for the parent directory of the DR path target directory.

Another scenario where we may face this issue is if the DR Path is located in the home directory of the root user: /root

To resolve this issue, simply change the location of the DR Path to any directory outside /root