Steps to carry out when you see exit status 5988 during catalog recovery
Use this procedure when you come across exit status 5988 during catalog backup.
To resolve the issue
- Run the following command:
Windows: install_path\NetBackup\bin\nbcertcmd -ping
UNIX: /usr/openv/netbackup/bin/nbcertcmd -ping
If it is executed successfully, proceed to the next step.
If it fails with status 8509 (The specified server name was not found in the web service certificate), follow the steps in this article:
https://www.veritas.com/support/en_US/article.000126751
Proceed to the next step.
- Perform the user logon on the primary server. Use the following command:
install_path\netbackup\bin\bpnbat -login -loginType WEB
For example:
install_path\netbackup\bin\bpnbat -login -loginType WEB
Authentication Broker [abc.example.com is default]: Authentication port [0 is default]: Authentication type (NIS, NISPLUS, WINDOWS, vx, unixpwd, ldap) [WINDOWS is default]: Domain [abc.example.com is default]: Login Name [administrator is default]: Password: Operation completed successfully.
- Note the value of key Client_Name for the primary server. For a clustered primary server, note the value of key Cluster_Name.
This value can be found at:
Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Veritas\NetBackup\CurrentVersion\Config
UNIX: /usr/openv/netbackup/bp.conf
This value can be either a FQDN or a short name.
For example:
abc.example.com
- Note the host ID of the primary server. You can obtain its value by running the following command:
install_path\netbackup\bin\nbcertcmd -listCertDetails
For a clustered primary server, run the following command:
install_path\netbackup\bin\nbcertcmd -listCertDetails -cluster
This command can return multiple records (if only one record is returned, select the host ID provided in that record).
Example:
install_path\netbackup\bin\nbcertcmd -listCertDetails
Master Server : abc Host ID : 78f9eed4-xxxx-4c6a-bb40-xxxxxxxxx Issued By : /CN=broker/OU=root@abc/O=vx Serial Number : 0x62e108c90000000c Expiry Date : Aug 21 08:42:54 2018 GMT SHA1 Fingerprint : 50:89:AE:66:12:9A:29:4A:66:E9:DB:71:37:C7: EA:94:8C:C6:0C:A0 Master Server : xyz Host ID : 5a8dde7b-xxxx-4252-xxxx-d3bedee63e0a Issued By : /CN=broker/OU=root@xyz.example.com/O=vx Serial Number : 0x6ede87a70000000a Expiry Date : Aug 21 09:52:13 2018 GMT SHA1 Fingerprint : FE:08:C2:09:AC:5D:82:57:7A:96:5C:C1:4A:E6: EC:CA:CC:99:09:D2 Operation completed successfully.
Here, two records are fetched.
For the first record, the issuer name in the "Issued By" field matches the short name of the client_name obtained in step 3.
Hence select the host ID that is provided in the record.
- Add host ID-to-host name mapping for the primary server. Map the host ID obtained in step 4 with the host name obtained in step 3.
Use the following command:
install_path\netbackup\bin\admincmd\nbhostmgmt -a -i host ID -hm hostname
install_path\netbackup\bin\admincmd\nbhostmgmt -a -i 78f9eed4-xxxx-4c6a-bb40-xxxxxxxxx -hm abc.example.com abc.example.com is successfully mapped to 78f9eed4-xxxx-4c6a-bb40-xxxxxxxxx.
Alternately, you can also add this host-ID-to-host name mapping in the NetBackup web UI. Open Security > Host mappings.
- Do the following to renew the certificates:
To renew the NetBackup (or host ID-based) certificate of the primary server, use the following command:
install_path\netbackup\bin\nbcertcmd -renewCertificate
For a clustered primary server, run the following command:
install_path\netbackup\bin\nbcertcmd -renewCertificate -cluster