Has anyone encountered this error before?
filer> ndmpd password cvbackup Cannot generate NDMP password. filer> Fri Sep 27 17:12:40 PDT [filer:useradmin.unauthorized.user:warning]: User 'cvbackup' denied access - missing required capability: 'login-ndmp'
This used to work, but we recently upgraded ONTAP to 8.1.2 P4 and am wondering if the upgrade may have broken this feature? Nothing has changed on the role, group, or user account "cvbackup" on the filer. I have verified that 'login-ndmp' capability exists on the role that is associated with the group, which is associated with the user. As a test I added the 'cvbackup' user into the default "Backup Operators" group which has the 'login-ndmp' role capability, but got the same results. Even tried running "ndmpd password administrator" and still got the same error message.
Any thoughts?
Thanks,
Eric Peng | Systems Administrator Esri | 380 New York St. | Redlands, CA 92373 | USA T 909 793 2853 x3567 | M 909 557 0259 epeng@esri.commailto:epeng@esri.com | esri.comhttp://esri.com/
I run 8.1.2 P4 and do not have that problem. can you ndmp dump as root? Maybe try creating a new group and add the roles fresh.
really out of ideas, does your /etc/registry contain the line
options.roleadmin.backup.allowed=login-ndmp
(not sure why it wouldnt....really reaching)
________________________________ From: toasters-bounces@teaparty.net [toasters-bounces@teaparty.net] on behalf of Eric Peng [epeng@esri.com] Sent: Friday, September 27, 2013 8:18 PM To: toasters@teaparty.net Subject: ndmpd password error
Has anyone encountered this error before?
filer> ndmpd password cvbackup Cannot generate NDMP password. filer> Fri Sep 27 17:12:40 PDT [filer:useradmin.unauthorized.user:warning]: User 'cvbackup' denied access - missing required capability: 'login-ndmp'
This used to work, but we recently upgraded ONTAP to 8.1.2 P4 and am wondering if the upgrade may have broken this feature? Nothing has changed on the role, group, or user account “cvbackup” on the filer. I have verified that ‘login-ndmp’ capability exists on the role that is associated with the group, which is associated with the user. As a test I added the ‘cvbackup’ user into the default “Backup Operators” group which has the ‘login-ndmp’ role capability, but got the same results. Even tried running “ndmpd password administrator” and still got the same error message.
Any thoughts?
Thanks,
Eric Peng | Systems Administrator Esri | 380 New York St. | Redlands, CA 92373 | USA T 909 793 2853 x3567 | M 909 557 0259 epeng@esri.commailto:epeng@esri.com | esri.comhttp://esri.com/
Hi Eric,
Is cvbackup part of the Backup Operators group?
On Sep 27, 2013, at 8:18 PM, Eric Peng epeng@esri.com wrote:
Has anyone encountered this error before?
filer> ndmpd password cvbackup Cannot generate NDMP password. filer> Fri Sep 27 17:12:40 PDT [filer:useradmin.unauthorized.user:warning]: User 'cvbackup' denied access - missing required capability: 'login-ndmp'
This used to work, but we recently upgraded ONTAP to 8.1.2 P4 and am wondering if the upgrade may have broken this feature? Nothing has changed on the role, group, or user account “cvbackup” on the filer. I have verified that ‘login-ndmp’ capability exists on the role that is associated with the group, which is associated with the user. As a test I added the ‘cvbackup’ user into the default “Backup Operators” group which has the ‘login-ndmp’ role capability, but got the same results. Even tried running “ndmpd password administrator” and still got the same error message.
Any thoughts?
Thanks,
Eric Peng | Systems Administrator Esri | 380 New York St. | Redlands, CA 92373 | USA T 909 793 2853 x3567 | M 909 557 0259 epeng@esri.com | esri.com
Toasters mailing list Toasters@teaparty.net http://www.teaparty.net/mailman/listinfo/toasters
-
Eric Peng -
Jordan Slingerland -
Scott Eno