Logging into the Java NetBackup Administrator Console with a non-admin user account generates a NetBackup status code: 518 on Windows 2012 assigned to an Active Directory (AD) domain

Problem

Logging into the Java NetBackup Administrator Console 7.7.1 with a non-admin user account generates a NetBackup status code: 518 on Windows 2012 assigned to an Active Directory (AD) domain.

This problem was successfully recreated in a lab.


 

Error Message

A similar message may be seen in the <install_path>\Veritas]NetBackup\logs\BPJava-msvc log:
11:43:45.177 [12568.13412] <16> session_dispatch: Request count = 1 tag = 118
11:43:45.208 [12568.13412] <16> session_dispatch: Request count = 2 tag = 101
11:43:45.255 [12568.13412] <16> doLoginIntoGUI: LogonUser failed = 1385 = Logon failure: the user has not been granted the requested logon type at this computer.
11:43:45.255 [12568.13412] <16> command_LOGON_TO_MSERVER: Authenticate failed for user VLAB1\user01 (username or password is not valid), authResultStatus:-3
11:43:45.271 [12568.13412] <16> readCharByChar: read failed(?), sockFd = 784, count = 0 (want = 3072),  errno = 10054 = An existing connection was forcibly closed by the remote host.
11:43:45.271 [12568.13412] <16> session_dispatch: recv failed, sockFd = 784, errno = 10054 = An existing connection was forcibly closed by the remote host.
11:43:45.271 [12568.13412] <16> poll_listen: can't find file descriptor 0000000000000310 in polling table

Cause

The non-admin account does not have sufficient permissions to login to NetBackup via the Java Console.  In this situation, the non-admin account was assigned only to the Users group which does not have sufficient permissions to login to NetBackup via the Java Console.
 

Solution

In addition to the group Users, you will need to add the non-admin user account to the Backup Operators group in the user’s properties, Member Of tab as shown below.  Once sufficient permissions are assigned, you will be able to login to NetBackup via the Java Console.