The NetBackup PREINSTALL CHECK says the NetBackup Web Services user does not belong to the group

Article: 100033550
Last Published: 2017-01-26
Ratings: 4 3
Product(s): NetBackup

Problem

When installing NetBackup 8.0, a pre-existing account and group must be created, configured, and available for use by the NetBackup Installer sequence and subsequent "NetBackup Web Management Console" service.

Please refer to http://www.veritas.com/docs/000081350 for more information on how to create and configure the required accounts.

If the account and group are not configured properly, this can prevent the NetBackup Install sequence from progressing past the pre-install check routine.
Example:
User-added image

The messages read:
Critical error found during pre-install check, please review output from preinstall check in NetBackup Installation Summary screen and resolve issue before restarting install.

user [nbwebsvc] does not belong to group [nbwebgrp]. A user [nbwebsvc] in group [nbwebgrp] does not exist on the Master Server.  This is needed to enable web services, and will be a requirement of Master Server installation in NetBackup 8.0 and beyond. See http://www.veritas.com/docs/000081350 for more information.

Solution

There are two sorts of groups on a Domain Controller –  Domain Local (a simple local group) vs Global (a group in the domain).  If you intend to use a Domain based user and group, both the user and group must be resident in Active Directory.  It is possible for someone to create a local group on the Domain Controller then add the Domain user to it.  If this is done, it is incorrect.

If you are attempting to use Domain user and group account objects for the NetBackup Install sequence, you may need to login to a domain controller and reference "Active Directory Users and Computers" to validate group membership has been properly configured.

If you do not have login permissions on the Domain Controller directly, there are still commands which can be run from the would-be master server, which might be able to reveal the associated user and group membership information.

Note: Run all commands from the Master Server while logged in with a Domain Admin account at an Administrator CMD prompt.

This command will list all Domain Level Global groups: (within active directory)
NET GROUP /DOMAIN > C:\ListOfDomainGroups.txt

This command will list all Domain Local groups on the DC: (if the group appears on this list, it is a local group not inside of active directory)
NET LOCALGROUP /DOMAIN > C:\ListOfLocalGroups

This command will list all Domain Level users: (within active directory)
NET USER /DOMAIN > C:\ListOfDomainUsers.txt

This command will list members of a named Global group: (if the user appears on this list, the user is a member of a group within active directory)
NET GROUP <groupname> /DOMAIN  > C:\MembersOfGlobalGroup.txt
Example: NET GROUP nbwebgrp /DOMAIN > C:\MembersOfGlobalGroup.txt



If you are attempting to use Local user and group objects for the NetBackup Install sequence, these commands can reveal if the proper accounts exist.
Note: Run all commands from the Master Server while logged in with a Domain Admin account at an Administrator CMD prompt.

This command will list all Local users:
NET USER > C:\ListOfLocalUsers.txt

This command will list all Local groups:
NET LOCALGROUP > C:\ListOfLocalGroups.txt

This command will list members of a named Local group:
NET LOCALGROUP <groupname> > C:\MembersOfLocalGroup.txt
Example: NET LOCALGROUP nbwebgrp > C:\MembersOfLocalGroup.txt


Please reference TN https://www.veritas.com/docs/000125106 for command line instructions on how to identify if the account has the proper " Log on as a service" permission.

Was this content helpful?