Search <book_title>...

Veritas NetBackup™ Troubleshooting Guide

Last Published: 2021-01-01

Product(s): NetBackup (9.0.0.1, 9.0)

Troubleshooting issues with the NetBackup Messaging Broker (or nbmqbroker) service

The NetBackup Messaging Broker service is not running

Do the following:

Ensure that the service is configured and started on the master server. To configure the service, run the configureMQ command.
Refer to the NetBackup Commands Reference Guide.

The NetBackup Messaging Broker service is not able to start

Reasons:

Ports that are configured for the service is in use by some other process.
The configuration file is corrupted.

Do the following:

Check the configureMQ command logs for failure.
Check the nbmqbroker service logs for failure.
Run the configureMQ command.
Refer to the NetBackup Commands Reference Guide.

The NetBackup Messaging Broker service is not connected to the NAT client

Reasons:

The port configured for the service is not available for use.
Connection fails with some SSL exception.
The nbmqbroker service is not restarted after the configureWebServerCerts command is run on the master server.

Do the following:

Ensure that the port configured for the nbmqbroker service is available for use and accessible by NetBackup hosts.
Check the connectivity between the master server and the NAT client using the nbcertcmd -ping command.
- If the command is not successfully executed, refer to the troubleshooting section for the NetBackup web service.
- If the command is successfully executed, run configureMQ command to configure the nbmqbroker service.
Restart the nbmqbroker service.

Subscriber or publisher is not able to connect to the NetBackup Messaging Broker service

Reasons:

The JSON web token (JWT) for the NAT client cannot be refreshed.
The security certificate of the NAT client is revoked.
The NetBackup Web Management Console (or nbwmc) service is not running.

Do the following:

Refer to the subscriber troubleshooting steps.
If the client's security certificate is revoked, reissue the certificate.
Start the nbwmc service.

The NetBackup Messaging Broker service is not able to start after disaster recovery

Reasons:

The disaster recovery package is lost.
The configureMQ command is not run after the disaster recovery (DR) installation.

Do the following:

Run the configureMQ or configureMQ -defaultPorts command.
Refer to the NetBackup Commands Reference Guide.

The NetBackup Messaging Broker service fails to start on Windows if the 8dot3 short file name setting is disabled on the volume where NetBackup is installed

To check if the installation root folder has the 8dot3 file name setting enabled, run the following command from your folder:

>dir /x

Example: The 'Program Files' directory has the 8dot3 file name setting enabled, therefore the short name 'PROGRA~1' is generated.

But it differs for the 'not8 Dot3' directory.

C:\>dir /x

The volume in drive C has no label.

The Volume Serial Number is FE21-2F8E

Directory of C:\

-5.6.3

12/06/2019  02:24 PM    <DIR>   	            not8 Dot3

12/02/2019  06:35 AM    <DIR>   PROGRA~1     Program Files

12/02/2019  10:44 AM    <DIR>   PROGRA~2     Program Files (x86)

Do the following to resolve the issue:

Enable 8dot3 name file setting for the NetBackup installation root folder using the fsutil command.
Refer to the following article: Fsutil 8dot3name
If the problem persists, contact Technical Support.

The NetBackup Messaging Broker service behaves incorrectly after restoring the disaster recovery package in case of external CA setup

Consider the following scenario:

NetBackup is configured to use only external CA-singed certificates at the time of catalog backup. Therefore, the disaster recovery package that was created during catalog backup contains the required external certificates. If the host identity is recovered using such disaster recovery package after NetBackup installation, the nbmqbroker service may behave incorrectly because of the NetBackup CA-signed certificates that were issued during installation.

To resolve the issue

Verify if your the NetBackup environment uses only external CA-signed certificates. Run the following command:
nbcertcmd -getSecConfig -caUsage
Check the certificates that the nbmqbroker service uses. Run the following command:
On Unix: cat /usr/openv/var/global/mqbroker/mqbroker.config | grep ssl_options
On windows: type "NetBackup_Install_path\var\global\mqbroker\mqbroker.config" | findstr "ssl_options"
If only external CA-signed certificates are used in your environment, the command shows the path with externalcacreds entry.
If the command shows the path with nbcacreds entry, NetBackup CA-signed certificates are used.
For example:
{ssl_options, [{cacertfile, "/usr/openv/var/global/mqbroker/certstore/nbcacreds/ca.pem"}, {ssl_options, [{cacertfile, "/usr/openv/var/global/mqbroker/certstore/nbcacreds/ca.pem"},
You need to remove the NetBackup certificates so that the nbmqbroker service works appropriately.
Run the following command to remove the NetBackup certificates:
configureWebServerCerts -removeNBCert
Restart the NetBackup Web Management Console (nbwmc) service and the nbqmbroker service to reflect the changes.
Check the certificates that the nbmqbroker service uses. Run the following command:
On Unix: cat /usr/openv/var/global/mqbroker/mqbroker.config | grep ssl_options
On windows: type "NetBackup_Install_path\var\global\mqbroker\mqbroker.config" | findstr "ssl_options"
Expected output for external certificate only mode:
{ssl_options, [{cacertfile, "/usr/openv/var/global/mqbroker/certstore/externalcacreds/ca.pem"}, {ssl_options, [{cacertfile, "/usr/openv/var/global/mqbroker/certstore/externalcacreds/ca.pem"},
See Restoring disaster recovery package on UNIX.
See Restoring disaster recovery package on Windows.