NetWorker: How To Identify Which Server is the Authentication Server Used By NMC and NWUI
Summary: This article applies to NetWorker environments that contain multiple NetWorker servers managed by a single NetWorker Management Console (NMC). The NMC uses only one NetWorker server as the authentication (AUTHC) server. This article provides steps for identifying which NetWorker host is the AUTHC server. ...
Instructions
NetWorker Authentication (AUTHC) Service:
Each NetWorker server contains the NetWorker Authentication service. There is no individual service that runs from Services.msc (Windows) or systemd (Linux).
On Linux NetWorker servers, AUTHC runs as a jsvc.exe process spawned by the user nsrtomc+:
[root@nsr ~]# ps -ef | grep jsvc nsrtomc+ 2961 2087 0 00:04 ? 00:00:00 jsvc.exec -nodetach --add-modules=java.se.ee --illegal-access=permit -classpath /opt/nsr/authc-server/tomcat/bin/bootstrap.jar:/opt/nsr/authc-server/tomcat/bin/tomcat-juli.jar -pidfile /nsr/authc/authc-tomcat.pid -Dcatalina.home=/opt/nsr/authc-server/tomcat -Dcatalina.base=/nsr/authc -Dauthc.server.datasource.location=/nsr/authc/data/authcdb -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.util.logging.config.file=/nsr/authc/conf/logging.properties -Djava.security.properties=/opt/nsr/authc-server/conf/java.security -Dauthc.server.banner.location=/opt/nsr/authc-server/conf -Djava.locale.providers=COMPAT -XX:+IgnoreUnrecognizedVMOptions org.apache.catalina.startup.Bootstrap nsrtomc+ 2997 2961 3 00:04 ? 00:22:20 jsvc.exec -nodetach --add-modules=java.se.ee --illegal-access=permit -classpath /opt/nsr/authc-server/tomcat/bin/bootstrap.jar:/opt/nsr/authc-server/tomcat/bin/tomcat-juli.jar -pidfile /nsr/authc/authc-tomcat.pid -Dcatalina.home=/opt/nsr/authc-server/tomcat -Dcatalina.base=/nsr/authc -Dauthc.server.datasource.location=/nsr/authc/data/authcdb -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.util.logging.config.file=/nsr/authc/conf/logging.properties -Djava.security.properties=/opt/nsr/authc-server/conf/java.security -Dauthc.server.banner.location=/opt/nsr/authc-server/conf -Djava.locale.providers=COMPAT -XX:+IgnoreUnrecognizedVMOptions org.apache.catalina.startup.Bootstrap
On Windows NetWorker servers, AUTHC runs as a jsvc.exe process spawned by the local SYSTEM account:
The NetWorker authentication service is not stopped or started independently from NetWorker. NetWorker AUTHC is a dependent function of the NetWorker server service (nsrd). The nsrd service stops and starts NetWorker AUTHC.
NetWorker Authentication
- In a single-host environment, where the NMC server manages a single NetWorker server, the NetWorker server is the AUTHC server.
- In a multihost data zone, where a single NetWorker Management Console (NMC) server manages two or more NetWorker servers, only one of the NetWorker servers is the AUTHC server. For NetWorker Web UI (NWUI), there are per-NetWorker server NWUI servers, but authentication may be directed to a specific NetWorker authentication server.
- In some environments, the NMC or NWUI server may also contain the
nsrdand AUTHC installation packages. The NMC server, NWUI server, or another standalone host is configured as the authentication server. - Port 9090 is the default port used by NetWorker AUTHC, see Additional Information section.
nsrlogin, authc_config, authc_mgmt, and so forth)
How to Identify:
The AUTHC host used by the NMC or NWUI is set during initial configuration:
- On Windows: The Installation wizard contains steps for setting the AUTHC server used by the NMC and NWUI.
- On Linux: During initialization of the NMC using
/opt/lgtonmc/bin/nmc_configand NWUI/opt/nwui/scripts/nwui_configure.sh
To identify which host the NMC uses for its authentication, perform the following steps on the NetWorker Management Console (NMC) server:
- Open the
gstd.conffile:
- Linux:
/opt/lgtonmc/etc/gstd.conf - Windows (Default):
C:\Program Files\EMC NetWorker\Management\GST\etc\gstd.conf
- The
gstd.conffile defines theauthsvc_hostnameandauthsvc_portthat the NMC uses to authenticate users.
authsvc_hostname: Hostname of the NetWorker Authentication server.authcsvc_port: The NetWorker Authentication service port (default 9090).
For the NetWorker Web User Interface (NWUI). The install log defines which host was set as the AUTHC server. On the NWUI server:
- Linux:
grep /opt/nwui/logs/install.log -e "Authentication server" - Windows: Open the installation log found under
%LOCALAPPDATA%\Temp\NetWorker_DATE_MCUI.log. Search the file forAUTH_HOSTNAMEwhich defines the AUTHC host.
Any troubleshooting of NWUI or NMC authentication must be investigated from the host identified from the above steps:
Additional Information
Port 9090 is the default port used by NetWorker AUTHC; however, this can be confirmed using the following steps:
Linux:
- Get the Process ID (PID) of the NetWorker jsvc.exe process:
ps -ef | grep jsvc - Using the second entry's PID, list which port is listening for that PID:
netstat -apno | grep LISTEN | grep PID
Example:
[root@nsr ~]# ps -ef | grep jsvc.exe nsrtomc+ 2961 2087 0 Feb17 ? 00:00:00 jsvc.exec -nodetach --add-modules=java.se.ee --illegal-access=permit -classpath /opt/nsr/authc-server/tomcat/bin/bootstrap.jar:/opt/nsr/authc-server/tomcat/bin/tomcat-juli.jar -pidfile /nsr/authc/authc-tomcat.pid -Dcatalina.home=/opt/nsr/authc-server/tomcat -Dcatalina.base=/nsr/authc -Dauthc.server.datasource.location=/nsr/authc/data/authcdb -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.util.logging.config.file=/nsr/authc/conf/logging.properties -Djava.security.properties=/opt/nsr/authc-server/conf/java.security -Dauthc.server.banner.location=/opt/nsr/authc-server/conf -Djava.locale.providers=COMPAT -XX:+IgnoreUnrecognizedVMOptions org.apache.catalina.startup.Bootstrap nsrtomc+ 2997 2961 0 Feb17 ? 00:55:51 jsvc.exec -nodetach --add-modules=java.se.ee --illegal-access=permit -classpath /opt/nsr/authc-server/tomcat/bin/bootstrap.jar:/opt/nsr/authc-server/tomcat/bin/tomcat-juli.jar -pidfile /nsr/authc/authc-tomcat.pid -Dcatalina.home=/opt/nsr/authc-server/tomcat -Dcatalina.base=/nsr/authc -Dauthc.server.datasource.location=/nsr/authc/data/authcdb -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.util.logging.config.file=/nsr/authc/conf/logging.properties -Djava.security.properties=/opt/nsr/authc-server/conf/java.security -Dauthc.server.banner.location=/opt/nsr/authc-server/conf -Djava.locale.providers=COMPAT -XX:+IgnoreUnrecognizedVMOptions org.apache.catalina.startup.Bootstrap root 345777 344577 0 09:45 pts/0 00:00:00 grep --color=auto jsvc.exe [root@nsr ~]# [root@nsr ~]# netstat -apno | grep LISTEN | grep 2997 tcp6 0 0 :::9090 :::* LISTEN 2997/jsvc.exec off (0.00/0/0) tcp6 0 0 :::40383 :::* LISTEN 2997/jsvc.exec off (0.00/0/0) [root@nsr ~]#
Windows (PowerShell):
- Get the Process ID (PID) of the NetWorker jsvc.exe process:
Get-CimInstance Win32_Process -Filter "Name='java.exe'" | Select-Object ProcessId, CommandLine - Using the "
authc-server" PID, list which port is listening for that PID:netstat -ano | findstr LISTENING| findstr PID
PS C:\Users\Administrator.NETWORKER> Get-CimInstance Win32_Process -Filter "Name='java.exe'" | Select-Object ProcessId, CommandLine
ProcessId CommandLine
--------- -----------
6784 "C:\Program Files\NRE\java\jre1.8.0_471\bin\java.exe" -Xms512m -Xmx1024m -cp "C:\Program Files\EMC NetWorker\nsr\bin\\oncrpc.jar;C:\Program Files\EMC NetWorker\nsr\bin\\auth_proxy.jar;C:\Program Files\EMC NetWorker\nsr\bin\\auth-client-proxy-with-dependencies.jar;." COM.emc.nsr.authproxy.AuthProxyServer 7999 "C:\Program Files\EMC NetWorker\nsr\tmp\lock\auth_proxy.lck-5784"
6736 "C:\Program Files\NRE\java\jre1.8.0_471\bin\java.exe" -Djava.util.logging.config.file="C:\Program Files\EMC NetWorker\nsr\authc-server\bin\..\tomcat\conf\logging.properties" -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager "-Dauthc.server.datasource.location=C:\Program Files\EMC NetWorker\nsr\authc-server\tomcat\data\authcdb" "-Djava.security.properties=C:\Program...
7000 "C:\Program Files\NRE\java\jre1.8.0_471\bin\java.exe" -Dlogging.config="C:\Program Files\EMC NetWorker\nwui\monitoring\app\conf\log4j2.xml" -Dpropertiesfile="C:\Program Files\EMC NetWorker\nwui\monitoring\app\conf\monitoring-app.properties" -Dlogsdir="C:\Program Files\EMC NetWorker\nwui\monitoring\app\logs" -jar "C:\Program Files\EMC NetWorker\nwui\monitoring\app\bin\monitoring-ap...
PS C:\Users\Administrator.NETWORKER> netstat -ano | findstr LISTENING| findstr 6736
TCP 0.0.0.0:9090 0.0.0.0:0 LISTENING 6736
TCP 0.0.0.0:51877 0.0.0.0:0 LISTENING 6736
TCP [::]:9090 [::]:0 LISTENING 6736
TCP [::]:51877 [::]:0 LISTENING 6736