Unable to connect to master via Java Admin Console

Problem

Java Admin Console is unable to connect to the master failing with the below error:

Error Message

The host nbu-master to which you are trying to connect does not have a NetBackup security certificate installed. The security certificate is mandatory to establish a secure connection.

 

Cause

Checking the below directory:

/usr/openv/var/vxss/certificates  ( Linux/Unix)

install-path\NetBackup\var\vxss\credentials     ( Windows )

shows the certificates are already created and exist in the above directory.

Check the bpjava-msvc log files found in:

/usr/openv/netbackup/logs/bpjava-msvc   ( Linux/Unix )

install-path\netbackup\logs\bpjava-msvc   ( Windows )

Note: If the above folder does not currently exist, create it and attempt to login again so error can be logged

The log file shows the following error messages:

09:04:14.578 [63749] <2> session_dispatch: fd = 0, currentObj.currSocket = 0
09:04:14.578 [63749] <2> session_dispatch: tag = 510 = SECURE_CHANNEL_INIT, lines = 0
09:04:14.578 [63749] <2> session_dispatch: Request count = 0
09:04:14.578 [63749] <16> session_dispatch: Request count = 0 tag = 510
09:04:14.578 [63749] <2> command_exec: tag = 510 = SECURE_CHANNEL_INIT, lines = 0 , expectXML = 0
09:04:14.578 [63749] <2> readAndToss: lines = 0
09:04:14.579 [63749] <2> vnet_pcache_init_table: [vnet_private.c:214] starting cache size 200 0xc8
09:04:14.580 [63749] <8> retry_getnameinfo: [vnet_addrinfo.c:1262] getnameinfo() failed -2 0xfffffffffffffffe
09:04:14.580 [63749] <8> vnet_cached_getnameinfo: [vnet_addrinfo.c:2033] retry_getnameinfo() failed RV=-2 IPSTR=172.30.135.212 PORT=0
09:04:14.580 [63749] <8> gethostent_force: [vnet_addrinfo.c:2698] vnet_cached_getnameinfo() failed STAT=6 RV=-2, NAME=172.30.135.212
09:04:14.580 [63749] <2> host_file_match: [vnet_vxss.c:2934] no match for addr 172.30.135.212
09:04:14.580 [63749] <2> populateCertificatePath: auth.c.1718: vnet_get_machine_credential_path( ) failed
09:04:14.580 [63749] <4> populateCertificatePath: bpjava-msvc unable to find Machine Certificate.
09:04:14.580 [63749] <4> command_SECURE_CHANNEL_INIT: Could __not__ find certificate that could be used for SSL handshake. You must deploy NetBackup Machine certificate on this host.
09:04:14.580 [63749] <2> writetagEx: tag= <Unknown Protocol>, sockFd = 0, tagged output = nope
 

Solution

From the above error, it likely indicates that the reverse name lookup of  172.30.135.212 is not resolvable:

bpclntcmd -ip 172.30.135.212
host 172.30.135.212: 172.30.135.212 at 172.30.135.212
aliases:     172.30.135.212

Either update the local hosts file or the DNS record so the reverse lookup of IP address shows the master server hostname:

bpclntcmd -ip 172.30.135.212
host 172.30.135.212: nbu-master.myvlan.local at 172.30.135.212
aliases:     nbu-master.myvlan.local     172.30.135.212

To match up the named certificate files at:

/usr/openv/var/vxss/certificates/nbu-master  ( Linux/Unix)
/usr/openv/var/vxss/certificates/nbu-master.myvlan.local  ( Linux/Unix)

install-path\NetBackup\var\vxss\credentials\nbu-master     ( Windows )
install-path\NetBackup\var\vxss\credentials\nbu-master.myvlan.local     ( Windows )

Re-try the login again, and the Java Admin Console should now connect.