NetWorker:当客户端和存储节点之间的对等节点不匹配时,客户端备份将失败

Summary: NetWorker 客户端备份失败。“Could not get session key from CLIENT for GSS authentication with STORAGE NODE”

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Symptoms

NetWorker 文件系统客户端的备份失败,并在会话日志中观察到以下错误:

181407:save: Step (1 of 7) for PID-87339: Save has been started on the client 'NETWORKER_CLIENT_NAME'.
174412:save: Step (2 of 7) for PID-87339: Running the backup on the client 'NETWORKER_CLIENT_NAME' for the save set 'SAVESET_NAME'.
180569:save: Identified a save for the backup with PID-87339 on the client 'NETWORKER_CLIENT_NAME'. Updating the total number of steps from 7 to 6.
174920:save: Step (3 of 6) for PID-87339: Contacting the NetWorker server through the nsrd process to obtain a handle to the target media device through the nsrmmd process for the save set 'SAVESET_NAME'.
174908:save:Saving the backup data in the pool 'POOL_NAME'.
206529:save: Unable to set up the direct save with server 'NETWORKER_SERVER_NAME'. Be sure network connectivity exists between client 'NETWORKER_CLIENT_NAME' and storage node '?' in both directions. Error: Could not get session key from NETWORKER_CLIENT_NAME for GSS authentication with STORAGE_NODE_NAME: Authentication error; why = Server rejected credential
98520:save: Falling back to agent-assisted indirect save 
208834:save: Step (4 of 6) for PID-87339: Successfully connected to the target media device through the nsrmmd process on the host 'NETWORKER_SERVER_NAME' for the save set 'SAVESET_NAME' (ssid SSID#)
174422:save: Step (5 of 6) for PID-87339: Reading the save sets and writing to the target device.
100690:save: SAVESET_NAME/: File index could not be obtained due to <Unable to do Index lookup of path 'SAVESET_NAME'. The Index session is invalid.
>.  Contents of this directory may not be properly backed up.  See save man page (Command Reference Guide) for more information.

174918:save: Step (6 of 6) for PID-87339: Unable to complete the backup. See the savegrp log to track the closure steps of the backup.
76677:save: Can't encode arguments
90019:save: save of 'SAVESET_NAME' to server 'NETWORKER_SERVER_NAME' failed.

用于备份的设备是通过独立 NetWorker 存储节点配置的。设备未使用 NetWorker 服务器的嵌入式存储节点。

NetWorker 存储节点的daemon.raw报告同一客户端的对等不匹配问题:

Linux:/nsr/logs/daemon.raw
Windows:[安装驱动器]:\Program Files\EMC NetWorker\nsr\logs\daemon.raw

NetWorker:如何使用nsr_render_log呈现.raw日志文件

89879 MM/DD/YYYY HH:mm:SS  nsrexecd GSS critical An authentication request from NETWORKER_CLIENT_NAME was denied. The 'NSR peer information' provided did not match the one stored by STORAGE_NODE_NAME. To accept this request, delete the 'NSR peer information' resource with the following attributes from STORAGE_NODE_NAME's NSRLA database: name: NETWORKER_CLIENT_NAME; NW instance ID: 6042beae-00000004-270237f6-67057d43-00015000-2317bb56; peer hostname: NETWORKER_CLIENT_NAME
89879 MM/DD/YYYY HH:mm:SS  nsrexecd GSS critical An authentication request from NETWORKER_CLIENT_IP was denied. The 'NSR peer information' provided did not match the one stored by STORAGE_NODE_NAME. To accept this request, delete the 'NSR peer information' resource with the following attributes from STORAGE_NODE_NAME's NSRLA database: name: NETWORKER_CLIENT_NAME; NW instance ID: 6042beae-00000004-270237f6-67057d43-00015000-2317bb56; peer hostname: NETWORKER_CLIENT_IP

Cause

NetWorker 客户端与 NetWorker 存储节点之间存在对等证书问题。

Resolution

清除两台主机上 NetWorker 存储节点和客户端的“NSR 对等主机信息”。

在 NetWorker 客户端上:
nsradmin -p nsrexeced
print type: nsr peer information; name: STORAGE_NODE_NAME
delete
yes
quit
示例:
[root@lnx-srvr01 ~]# nsradmin -p nsrexecd
NetWorker administration program.
Use the "help" command for help, "visual" for full-screen mode.
nsradmin> p type: nsr peer information; name: storage.networker.lan
                        type: NSR peer information;
               administrator: root,
                              "user=nsrnmc,host=lnx-srvr01.networker.lan",
                              "user=root,host=lnx-srvr01.networker.lan";
                        name: storage.networker.lan;
               peer hostname: storage.networker.lan;
          Change certificate: ;
    certificate file to load: ;
nsradmin> d
                        type: NSR peer information;
               administrator: root,
                              "user=nsrnmc,host=lnx-srvr01.networker.lan",
                              "user=root,host=lnx-srvr01.networker.lan";
                        name: storage.networker.lan;
               peer hostname: storage.networker.lan;
          Change certificate: ;
    certificate file to load: ;
Delete? y
deleted resource id 1.0.4.4.48.4.0.0.187.151.35.103.192.168.0.6(1)
nsradmin> q
[root@lnx-srvr01 ~]#
确保 NetWorker 客户端可以访问存储节点上的 nsrexecd 进程:
nsradmin -p nsrexecd -s STORAGE_NODE_NAME
示例:
[root@lnx-srvr01 ~]# nsradmin -p nsrexecd -s storage.networker.lan
NetWorker administration program.
Use the "help" command for help, "visual" for full-screen mode.
nsradmin> quit
[root@lnx-srvr01 ~]#

在 NetWorker 存储节点上:
nsradmin -p nsrexeced
print type: nsr peer information; name: NETWORKER_CLIENT_NAME
delete
yes
quit
示例:
[root@storage ~]# nsradmin -p nsrexecd
NetWorker administration program.
Use the "help" command for help, "visual" for full-screen mode.
nsradmin> p type: nsr peer information; name: lnx-srvr01.networker.lan
                        type: NSR peer information;
               administrator: root, "user=nsrnmc,host=storage.networker.lan",
                              "user=root,host=storage.networker.lan";
                        name: lnx-srvr01.networker.lan;
               peer hostname: lnx-srvr01.networker.lan;
          Change certificate: ;
    certificate file to load: ;
nsradmin> d
                        type: NSR peer information;
               administrator: root, "user=nsrnmc,host=storage.networker.lan",
                              "user=root,host=storage.networker.lan";
                        name: lnx-srvr01.networker.lan;
               peer hostname: lnx-srvr01.networker.lan;
          Change certificate: ;
    certificate file to load: ;
Delete? y
deleted resource id 1.0.6.182.118.0.0.0.128.3.252.102.192.168.0.3(1)
nsradmin> q
[root@storage ~]#
确保 NetWorker 存储节点可以访问客户端上的 nsrexecd 进程:
nsradmin -p nsrexecd -s NETWORKER_CLIENT_NAME
示例:
[root@storage ~]# nsradmin -p nsrexecd -s lnx-srvr01.networker.lan
NetWorker administration program.
Use the "help" command for help, "visual" for full-screen mode.
nsradmin> quit
[root@storage ~]#

Additional Information

Affected Products

NetWorker

Products

NetWorker Family
Article Properties
Article Number: 000243005
Article Type: Solution
Last Modified: 02 Oct 2025
Version:  2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.