Unsolved
This post is more than 5 years old
7 Posts
0
4109
VNX 5300 Integration with Symantec Vault for Archival
Hi,
I am trying to integrate and authenticate Symantec Vault to be used for VNX5300 FS archival however receiving following error while running the last step.
Celerra Account for Symantec Vault authentication is "evadmin"
Symantec Domain account "svc-in-evadmin"
Steps and it Output for reference:-
#server_http server_2 -info dhsm
server_2 : done
DHSM FACILITY CONFIGURATION
Service name : EMC File Mover service
Comment : Service facility for getting DHSM attributes
Active : True
Port : 5080
Threads : 16
Max requests : 300
Timeout : 60 seconds
ACCESS CONTROL
Allowed IPs : 10.0.25.1
Authentication : digest ,Realm : DHSM_Authorization
Allowed user : evadmin
SSL CONFIGURATION
Mode : OFF
Persona : default
Protocol : default
Cipher : default
# fs_dhsm -connection Datagrp -info
Datagrp:
state = enabled
offline attr = on
popup timeout = 0
backup = passthrough
read policy override = passthrough
log file = on
max log size = 10MB
Error message while running the last step:-
# fs_dhsm -connection FS1 -create -type http -secondary "http://10.0.25.1/EnterpriseVault" -user svc-in-evadmin@local.com -password 123456 -cgi n
Error 13159628829: The HTTP server failed to respond to an OPTIONS method of the HTTP protocol with a status code 1002 Authentication scheme not supported.
We had successfully installed the same on EMC NS-120 however now facing an issue with VNX 5300. Any quick suggestions would really help...!
Regards,
Swapnil Mistry
swapnil_mistry
7 Posts
0
December 20th, 2011 02:00
2011-12-19 17:21:44: DHSM: 3: Could not get HTTP response from HTTP server; status code - 1002 Authentication scheme not supported
2011-12-19 17:21:44: DHSM: 3: The HTTP server failed to respond to an OPTIONS method of the HTTP protocol with a status code 1002 Authentication scheme not s
upported.
2011-12-19 17:21:44: MGFS: 3: Mount remote file system failed with status: InternalError.
2011-12-19 17:21:44: ADMIN: 3: Command failed: connect fsid=18 type=HTTP rpolicy=15 wpolicy=1 http=http://evvault.corp.capgemini.com/EnterpriseVault cgi=n a
ccount=svc-in-evadmin@corp.in.capgemini.com passwd=****************
2011-12-19 17:27:24: DHSM: 3: Could not get HTTP response from HTTP server; status code - 1002 Authentication scheme not supported
2011-12-19 17:27:24: DHSM: 3: The HTTP server failed to respond to an OPTIONS method of the HTTP protocol with a status code 1002 Authentication scheme not s
upported.
2011-12-19 17:27:24: MGFS: 3: Mount remote file system failed with status: InternalError.
2011-12-19 17:27:24: ADMIN: 3: Command failed: connect fsid=18 type=HTTP rpolicy=15 wpolicy=1 http=http://evvault.CORP.CAPGEMINI.COM/EnterpriseVault cgi=n a
ccount=svc-in-evadmin@corp.capgemini.com passwd=****************
2011-12-19 17:27:33: SMB: 3: AcceptPushStream failed: Socket is not connected
2011-12-19 17:27:42: CFS: 6:[VDM0] write failed, fsid = 18, inode = 6994717, startOffset = 0x45ff, status = TreeQuotaExceeded
Send Pop up not implemented in SMB2
2011-12-19 17:27:55: DHSM: 3: Could not get HTTP response from HTTP server; status code - 1002 Authentication scheme not supported
2011-12-19 17:27:55: DHSM: 3: The HTTP server failed to respond to an OPTIONS method of the HTTP protocol with a status code 1002 Authentication scheme not s
upported.
2011-12-19 17:27:55: MGFS: 3: Mount remote file system failed with status: InternalError.
2011-12-19 17:27:55: ADMIN: 3: Command failed: connect fsid=18 type=HTTP rpolicy=15 wpolicy=1 http=http://evvault.CORP.CAPGEMINI.COM/EnterpriseVault cgi=n a
ccount=svc-in-evadmin@corp.capgemini.com passwd=****************
TCPDUMP Message for reference
401 - Unauthorized: Access is denied due to invalid credentials.
\r\n
You do not have permission to view this directory or page using the credentials that you supplied.
\r\n
Thanks & Regards,
1 Attachment
image001.gif
SAMEERK1
296 Posts
0
December 20th, 2011 02:00
try to create the connection again and paste the server logs related to the DHSM
$server_log server_2 | tail -100
Sameer Kulkarni
swapnil_mistry
7 Posts
0
December 20th, 2011 04:00
Hi Sameer,
Same output
fs_dhsm -connection FS1 -create -type http -secondary "http://evvault.corp.capgemini.com/EnterpriseVault" -cgi n
Error 13159628829: The HTTP server failed to respond to an OPTIONS method of the HTTP protocol with a status code 1002 Authentication scheme not supported.
Thanks & Regards,
1 Attachment
image001.gif
SAMEERK1
296 Posts
0
December 20th, 2011 04:00
fs_dhsm -info
SAMEERK1
296 Posts
0
December 20th, 2011 04:00
try without specifying the -user option,
you command should look something like this :
fs_dhsm -connection FS1 -create -type http -secondary "http://10.0.25.1/EnterpriseVault" -cgi n
Rainer_EMC
8.6K Posts
0
December 20th, 2011 06:00
Did you look at knowledgebase emc242722 ?
PeteOrton
9 Posts
0
December 20th, 2011 06:00
Hi Guys
I am seeing the same issue when trying to configure EV on a Celerra NS-120 - see below..
[nasadmin@hs001nascs01-01 ~]$ fs_dhsm -connection macpoc -create -type http -secondary http://evserver/enterprisevault -user domain/evservice -password evpassword -cgi n
Error 13159628829: The HTTP server failed to respond to an OPTIONS method of the HTTP protocol with a status code 401 Unauthorised.
[nasadmin@hs001nascs01-01 ~]$ fs_dhsm -connection macpoc -create -type http -secondary http://evserver/enterprisevault -user domain\evservice -password evpassword -cgi n
Error 13159628829: The HTTP server failed to respond to an OPTIONS method of the HTTP protocol with a status code 401 Unauthorised.
Any help would be much appreciated....
Thanks
Pete
SAMEERK1
296 Posts
0
December 20th, 2011 06:00
Hi...
have you added the Vault Service account to the Administrators group ?
PeteOrton
9 Posts
0
December 20th, 2011 07:00
KB doesn't seem to apply to my error...
Vault Service account is in definately in Administrators group.
SAMEERK1
296 Posts
0
December 20th, 2011 07:00
Can we give a try creating it with CGI connection instead of non-CGI ?
SAMEERK1
296 Posts
0
December 20th, 2011 08:00
let me do some research on this from my end..
PeteOrton
9 Posts
0
December 20th, 2011 08:00
Hi - tried and get the same error..
PeteOrton
9 Posts
0
December 20th, 2011 09:00
Many Thanks Sameer
swapnil_mistry
7 Posts
0
December 20th, 2011 20:00
Fs_dhsm –info FS1 //Output as follow
state = enabled
offline attr = on
popup timeout = 0
backup = passthrough
read policy override = none
log file = on
max log size = 10MB
Additionally, both ping from blades & telnet (to port 80) work as well,
- emc242722 doesn’t apply as the server_log output is pasted earlier
- Vault Service account is added to Vault server Administrator group as well as Celerra CIFS server Administrator group to check if it helped however still same output
- Had already tried with both CGI and non-CGI option however no use
- Even I will continue to investigate it further and appreciate your support for this.
swapnil_mistry
7 Posts
0
December 21st, 2011 02:00
SR is in place well. However considered putting the same over Forum if someone may have come across similar problem and provide quicker resolution. So far the support findings are as follows
Output from TCPDUMP and nothing much helpful from server_log output.
401 - Unauthorized: Access is denied due to invalid credentials.
\r\n
You do not have permission to view this directory or page using the credentials that you supplied.
\r\n
However the Vault user is having all necessary access (i.e addition to administrator group,etc) as per pre-requisites.