NetWorker:精靈記錄中的 SQL 備份錯誤「無法讀取『<clientname>』的要求,以取得 GSS 驗證狀態更新」

Summary: NMM/SQL 備份在下列伺服器精靈記錄中發生錯誤:無法從「 讀取請求' 以取得 GSS 認證狀態更新:對等方重置連接

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Symptoms



NMM/SQL 備份在 伺服器 守護程式記錄中發生錯誤:
nsrexecd NSR critical Unable to authenticate user USERNAME: Unable to read request from 'CLIENTNAME' for a GSS authentication status update: Connection reset by peer. Consult CLIENTNAME s daemon log for additional information.

用戶端精靈有錯誤:
nsrexecd NSR notice 06/28/16 17:19:42.763849 Encountered BSAFE SSL error: The SSL read operation did not complete

如果在除錯 1 或 2 模式下執行,則在 NW 伺服器上的模擬時,可以看到以下錯誤:
 
nsrexecd NSR critical Unable to authenticate user USERBANE/CLIENTNAME@DOMAINNAME: Unable to read request from 'CLIENTNAME' for a GSS authentication status update: Connection reset by peer. Consult CLIENTNAME's daemon log for additional information

身份驗證失敗,因為無法打開創建的管道,並回退到弱身份驗證:
 
06/30/16 12:54:11.244790 DEBUG: the pipe name -> \\CLIENTNAME\pipe\nsridentity2ce0
06/30/16 12:54:11.244790 DEBUG: failed to open pipe
06/30/16 12:54:11.416677 RPC Authentication: error in LookupAccountSid: No mapping between account names and security IDs was done. (Win32 error 0x534)
06/30/16 12:54:11.432303 An unexpected error occured in file: rpc/lib/gsslgtov1.c, line: 2756, message = "Could not open file"
101036:save: Falling back to a weaker RPC authentication flavor since GSS authentication failed: Authentication error; why = GSS-API context problem

06/30/16 12:54:11.432303 Setting DNS cache TTLs to 1800 secs for positive lookups and 1800 secs for negative lookups
79355:save:
Could not get session key from CLIENTNAME for GSS authentication with NW_SERVERNAME: Authentication error; why = GSS-API context problem

 

Cause

當 SQL 代理出現使用者模擬問題時 sqlagent.exe 由於安全要求,該使用者帳戶以 本地管理員帳戶的用戶帳戶運行。
NW 備份是使用同樣不是本機管理員帳戶的 SQL 代理帳戶 (有模擬) 觸發。
 

Resolution

已找到此問題的解決方法:

  • 刪除強身份驗證 (nsrauth) 中,以便它們使用 oldauth
  • 將 SQLAGENT 使用者帳戶設為 SQL 主機上的本機系統管理員 (並重新啟動 SQL Server 服務) 
  • 從 Windows 工作排程器開始工作
  • 從命令列手動啟動工作

Affected Products

NetWorker Module for Microsoft

Products

NetWorker, NetWorker Module for Microsoft
Article Properties
Article Number: 000056700
Article Type: Solution
Last Modified: 17 Apr 2025
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.