nbrmms to spad communication may fail with "SSL initialization failed: could not connect to server[SSL error = 1, errno = 0]" when 3rd party OST-Plugin using openssl 1.0.1 was installed.

Article: 100023670
Last Published: 2017-08-14
Ratings: 0 0
Product(s): NetBackup & Alta Data Protection

Problem

After installing Dell OST-Plugin "DellOSTPlugin-10.1-56091" on Redhat Enterprise Linux (RHEL) 6.5 and Oracle Linux 6.5, communications between nbrmms and spad may fail with "SSL initialization failed: could not connect to server[SSL error = 1, errno = 0]".

 

Error Message

bptm:
11:12:45.603 [30709] <2> 1140357:bptm:30709:media.test: [DEBUG] PDVFS: pdvfs_lib_log: SPA Error: data.description: Could not send replication complete event: get Remote SPAId webservice failed, could not determine whether target is PDDE or PDDO (connection actively refused)
11:12:45.604 [30709] <16> 1140357:bptm:30709:media.test: [ERROR] PDVFS: pdvfs_lib_log: (Storage server: PureDisk:media.test) CACompleteAIRReplicate: Failed to complete completeAIRReplicate webservice (Could not send replication complete event: get Remote SPAId webservice failed, could not determine whether target is PDDE or PDDO (connection actively refused) ) V-454-60


spad:
July 31 03:23:20 ERR [140019635013376]: 25056: Session start request from media.test:47497 could not be honored (ssl initialization failed)
July 31 03:23:20 INFO [140019635013376]: (unknown) Task 500 [thread 140019635013376] for media.test:47497 failed with unknown error.
July 31 03:23:20 ERR [140019635013376]: 25056: SSL initialization failed: could not accept client session[SSL error = 1, errno = 0]
July 31 03:23:20 ERR [140019635013376]: 25056: Session start request from media.test:47498 could not be honored (ssl initialization failed)

 

Cause

The issue is caused by the binding of 3rd party OST-Plugin using varying versions of openssl libraries which may conflict with other OST-Plugin openssl libraries.

 

Solution

The following can be performed to address any issues with MSDP and nbrmms by configuring nbrmms to preload the necessary openssl libraries for MSDP.  

The below command can be used to workaround the issue in 7.6.1.2:

# export LD_PRELOAD=/lib64/libz.so.1.2.3:/usr/openv/pdde/pdopensource/lib/libcrypto.so.0.9.8:/usr/openv/pdde/pdopensource/lib/libssl.so.0.9.8 /usr/openv/netbackup/bin/nbrmms

Fix:
Upgrading to NetBackup 7.7 will upgrade the MSDP openssl packages to openssl version 1.0.1, however, later versions of the Dell plugin could also use conflicting openssl versions.

The final resolution for this issue will be in 8.1 when MSDP uses a NetBackup specific build of openssl named libnbssl.so
 

References

Etrack : 3832240

Was this content helpful?