Start a Conversation

Unsolved

This post is more than 5 years old

4062

December 19th, 2011 03:00

VNX 5300 Integration with Symantec Vault for Archival

Hi,

I am trying to integrate and authenticate Symantec Vault to be used for VNX5300 FS archival however receiving following error while running the last step.

Celerra Account for Symantec Vault authentication is "evadmin"

Symantec Domain account "svc-in-evadmin"

Steps and it Output for reference:-

#server_http server_2 -info dhsm

server_2 : done

DHSM FACILITY CONFIGURATION

  Service name       : EMC File Mover service

  Comment            : Service facility for getting DHSM attributes

  Active             : True

  Port               : 5080

  Threads            : 16

  Max requests       : 300

  Timeout            : 60 seconds

  ACCESS CONTROL

    Allowed IPs        : 10.0.25.1

    Authentication     : digest ,Realm : DHSM_Authorization

    Allowed user       : evadmin

  SSL CONFIGURATION

    Mode               : OFF

    Persona            : default

    Protocol           : default

    Cipher             : default

# fs_dhsm -connection Datagrp -info

Datagrp:

state                = enabled

offline attr         = on

popup timeout        = 0

backup               = passthrough

read policy override = passthrough

log file             = on

max log size         = 10MB

Error message while running the last step:-

# fs_dhsm -connection FS1 -create -type http -secondary "http://10.0.25.1/EnterpriseVault" -user svc-in-evadmin@local.com -password 123456 -cgi n

Error 13159628829: The HTTP server failed to respond to an OPTIONS method of the HTTP protocol with a status code 1002 Authentication scheme not supported.

We had successfully installed the same on EMC NS-120 however now facing an issue with VNX 5300. Any quick suggestions would really help...!

Regards,

Swapnil Mistry

December 20th, 2011 02:00

2011-12-19 17:21:44: DHSM: 3: Could not get HTTP response from HTTP server; status code - 1002 Authentication scheme not supported

2011-12-19 17:21:44: DHSM: 3: The HTTP server failed to respond to an OPTIONS method of the HTTP protocol with a status code 1002 Authentication scheme not s

upported.

2011-12-19 17:21:44: MGFS: 3: Mount remote file system failed with status: InternalError.

2011-12-19 17:21:44: ADMIN: 3: Command failed: connect fsid=18 type=HTTP rpolicy=15 wpolicy=1 http=http://evvault.corp.capgemini.com/EnterpriseVault cgi=n a

ccount=svc-in-evadmin@corp.in.capgemini.com passwd=****************

2011-12-19 17:27:24: DHSM: 3: Could not get HTTP response from HTTP server; status code - 1002 Authentication scheme not supported

2011-12-19 17:27:24: DHSM: 3: The HTTP server failed to respond to an OPTIONS method of the HTTP protocol with a status code 1002 Authentication scheme not s

upported.

2011-12-19 17:27:24: MGFS: 3: Mount remote file system failed with status: InternalError.

2011-12-19 17:27:24: ADMIN: 3: Command failed: connect fsid=18 type=HTTP rpolicy=15 wpolicy=1 http=http://evvault.CORP.CAPGEMINI.COM/EnterpriseVault cgi=n a

ccount=svc-in-evadmin@corp.capgemini.com passwd=****************

2011-12-19 17:27:33: SMB: 3: AcceptPushStream failed: Socket is not connected

2011-12-19 17:27:42: CFS: 6:[VDM0] write failed, fsid = 18, inode = 6994717, startOffset = 0x45ff, status = TreeQuotaExceeded

Send Pop up not implemented in SMB2

2011-12-19 17:27:55: DHSM: 3: Could not get HTTP response from HTTP server; status code - 1002 Authentication scheme not supported

2011-12-19 17:27:55: DHSM: 3: The HTTP server failed to respond to an OPTIONS method of the HTTP protocol with a status code 1002 Authentication scheme not s

upported.

2011-12-19 17:27:55: MGFS: 3: Mount remote file system failed with status: InternalError.

2011-12-19 17:27:55: ADMIN: 3: Command failed: connect fsid=18 type=HTTP rpolicy=15 wpolicy=1 http=http://evvault.CORP.CAPGEMINI.COM/EnterpriseVault cgi=n a

ccount=svc-in-evadmin@corp.capgemini.com passwd=****************

TCPDUMP Message for reference

401 - Unauthorized: Access is denied due to invalid credentials.

\r\n

You do not have permission to view this directory or page using the credentials that you supplied.

\r\n

Thanks & Regards,

1 Attachment

296 Posts

December 20th, 2011 02:00

try to create the connection again and paste the server logs related to the DHSM

$server_log server_2 | tail -100

Sameer Kulkarni

December 20th, 2011 04:00

Hi Sameer,

Same output

fs_dhsm -connection FS1 -create -type http -secondary "http://evvault.corp.capgemini.com/EnterpriseVault" -cgi n

Error 13159628829: The HTTP server failed to respond to an OPTIONS method of the HTTP protocol with a status code 1002 Authentication scheme not supported.

Thanks & Regards,

1 Attachment

296 Posts

December 20th, 2011 04:00

fs_dhsm -info

296 Posts

December 20th, 2011 04:00

try without specifying the -user option,

you command should look something like this :

fs_dhsm -connection FS1 -create -type http -secondary "http://10.0.25.1/EnterpriseVault" -cgi n

8.6K Posts

December 20th, 2011 06:00

Did you look at knowledgebase emc242722 ?

9 Posts

December 20th, 2011 06:00

Hi Guys

I am seeing the  same issue when trying to configure EV on a Celerra NS-120 - see below..

[nasadmin@hs001nascs01-01 ~]$ fs_dhsm -connection macpoc -create -type http -secondary http://evserver/enterprisevault -user domain/evservice -password evpassword -cgi n

Error 13159628829: The HTTP server failed to respond to an OPTIONS method of the HTTP protocol with a status code 401 Unauthorised.


[nasadmin@hs001nascs01-01 ~]$ fs_dhsm -connection macpoc -create -type http -secondary http://evserver/enterprisevault -user domain\evservice -password evpassword -cgi n

Error 13159628829: The HTTP server failed to respond to an OPTIONS method of the HTTP protocol with a status code 401 Unauthorised.

Any help would be much appreciated....

Thanks

Pete

296 Posts

December 20th, 2011 06:00

Hi...

have you added the Vault Service account to the Administrators group ?

9 Posts

December 20th, 2011 07:00

KB doesn't seem to apply to my error...

Vault Service account is in definately in Administrators group.

296 Posts

December 20th, 2011 07:00

Can we give a try creating it with CGI connection instead of non-CGI ?

296 Posts

December 20th, 2011 08:00

let me do some research on this from my end..

9 Posts

December 20th, 2011 08:00

Hi - tried and get the same error..

9 Posts

December 20th, 2011 09:00

Many Thanks Sameer

December 20th, 2011 20:00

Fs_dhsm –info FS1 //Output as follow

state = enabled

offline attr = on

popup timeout = 0

backup = passthrough

read policy override = none

log file = on

max log size = 10MB

Additionally, both ping from blades & telnet (to port 80) work as well,

- emc242722 doesn’t apply as the server_log output is pasted earlier

- Vault Service account is added to Vault server Administrator group as well as Celerra CIFS server Administrator group to check if it helped however still same output

- Had already tried with both CGI and non-CGI option however no use

- Even I will continue to investigate it further and appreciate your support for this.

December 21st, 2011 02:00

SR is in place well. However considered putting the same over Forum if someone may have come across similar problem and provide quicker resolution. So far the support findings are as follows

Output from TCPDUMP and nothing much helpful from server_log output.

401 - Unauthorized: Access is denied due to invalid credentials.

\r\n

You do not have permission to view this directory or page using the credentials that you supplied.

\r\n

However the Vault user is having all necessary access (i.e addition to administrator group,etc) as per pre-requisites.

No Events found!

Top