OpsCenter Capacity License or Traditional License report fails to generate due to Agent Exception.

Problem

When attempting to generate the Capacity License or Traditional License report via the OpsCenter GUI, the process fails due to a login issue.
 

Error Message

OpsCenter Console Error:

A33: Agent Exception: Unable to login into NBU Master Server. Login credentials might be incorrect.

Error in OpsCenter agent log (OID 146) for agent that could be on master server:

0,58330,146,146,62,1414421236290,8028,27,0:,59:NetBackupAgentModule checkBPJavaLogin entering for agent -1,64:com.symantec.nbu.nom.agent.module.netbackup.NetBackupAgentModule,1

0,58330,146,146,63,1414421236337,8028,27,0:,108:NbuCliExecUtility getLoggedInServerRequest : log-in to:<domain>\<account>, to:<master-hostname>,61:com.symantec.nbu.nom.agent.module.netbackup.NbuCliExecUtility,1

2,58330,146,146,64,1414421236399,8028,27,0:,41:ServerInterface login status code is :503,0,(0|)

2,58330,146,146,65,1414421236399,8028,27,0:,58:ServerInterface login status code error :Invalid username.,0,(0|)

2,58330,146,146,66,1414421236399,8028,27,0:,132:NbuCliExecUtility getLoggedInServerRequest Authentication failed for user:<domain>\<account>, on host:<master-hostname>,2,(0|)

2,58330,146,146,67,1414421236399,8028,27,0:,1089:com.symantec.nbu.nom.agent.module.netbackup.NetBackupAgentModule checkBPJavaLogin - com.symantec.nbu.nom.agent.common.exception.AgentException: A10019: BPJava login failed: Unable to login into NBU Master server. Login credentials might be incorrect. at com.symantec.nbu.nom.agent.common.exception.AgentException.createAgentException(AgentException.java:260) at com.symantec.nbu.nom.agent.module.netbackup.NetBackupAgentModule.checkBPJavaLogin(NetBackupAgentModule.java:880) at com.symantec.nbu.nom.agent.module.netbackup.NetBackupAgentModule.locateAgentModule(NetBackupAgentModule.java:857) at com.symantec.nbu.nom.agent.core.AgentModuleManager.locateAgentModule(AgentModuleManager.java:125) at com.symantec.nbu.nom.agent.core.corba.AgentManagerImpl.locateAgentModule(AgentManagerImpl.java:345) at com.symantec.nbu.nom.agent.AgentManagerPOA._invoke(AgentManagerPOA.java:304) at org.jacorb.poa.RequestProcessor.invokeOperation(RequestProcessor.java:299) at org.jacorb.poa.RequestProcessor.process(RequestProcessor.java:602) at org.jacorb.poa.RequestProcessor.run(RequestProcessor.java:745),2,(0|)

.

Error in NetBackup bpjava-msvc log on master where OpsCenter agent is installed gives the best information:

16:08:25.264 [3172.7756] <2> peerconnect: peer hostname is <master-hostname>, peer address is <master-IP>

16:08:25.264 [3172.7756] <2> newAuthenticate: domain\username = <domain>\<account>

16:08:25.264 [3172.7756] <16> EnablePrivilege: AdjustTokenPrivileges of SeAssignPrimaryTokenPrivilege failed, result = 1,  errno = 1300 = Not all privileges or groups referenced are assigned to the caller. 

16:08:25.264 [3172.7756] <16> command_LOGON_TO_MSERVER: authenticate failed for user <domain>\<account> (user not found)

16:08:25.264 [3172.7756] <2> readCharByChar: socket closed gracefully

16:08:25.264 [3172.7756] <16> poll_listen: can't find file descriptor 0000000000000180 in polling table

Cause

With the release of OpsCenter 7.5.0.5, the Capacity License and Traditional License reports now require a username and password to be configured against the Master server within OpsCeenter.

Solution

Scenario 1 (NetBackup Master services hosted by local system account):

Within OpsCenter configure a user name and password that has Administrator rights on the NetBackup Master. This may be done by selecting Settings > Configuration > Selecting the NetBackup Master along with the edit option.

Scenario 2 (NetBackup Master services hosted by a domain account):

Within OpsCenter configure a domain user name (nblab.com\bkupadmin) and password that has Administrator rights on the NetBackup Master. This may be done by selecting Settings > Configuration > Selecting the NetBackup Master along with the edit option.

The NetBackup Master server must also have these user right assignments set for the domain account.

SE_TCB_NAME = Act as part of the operating system
SE_ASSIGNPRIMARYTOKEN_NAME = Replace a process level token
SE_INCREASE_QUOTA_NAME = Adjust memory quotas for a process

These may be configured on the NetBackup Master by selecting,

Start>Administrative Tools>Local Security Policy>Expand Local Policies>User Right Assignment

Applies To

OpsCenter 7.5.0.5 and later