NMC: Unable to set user privileges based on user token for SYSTEM on nmc_server_name. Failed to validate security token

Summary: This Article describes an authentication issue which can arise when using a single NMC server to connect to multiple NetWorker servers.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

  • Adding additional NetWorker servers to NetWorker Management Console (NMC), the following error may appear when trying to connect to one or more of the NetWorker servers.
Unable to set user privileges based on user token for SYSTEM on nmc_server_hostname. Failed to validate security token
  • In some instances, you may be able to connect to the NetWorker server; however, the Tabs in the NMC are blank and do not show any data. 

Cause

When the NMC software is installed, an authentication host/server is specified: This represents the AuthC server installed on a single NetWorker server which NMC trusts to authenticate users.

Authentication trust is established between the NMC and NetWorker server by default during this installation. Other NetWorker datazone servers which are monitored from the same NMC server must be configured to use the same AuthC server as the authenticating authority.

Resolution

  1. Confirm what host was configured as the authentication server during NMC installation. On the host where the NMC server is installed, find the configured authentication host and port (default 9090) in the gstd.conf:
Linux: /opt/lgtonmc/etc/gstd.conf
Windows: ..\NetWorker\Management\GST\etc\gstd.conf 
string authsvc_hostname = "nsrsvr.lab.loc";
    int authsvc_port = 9090;
  1. On each NetWorker server being added to NMC, run the following commands. Leave portnum as 9090 (default) unless it has been configured otherwise; authsvc_hostname must be the same hostname specified in gstd.conf:
nsrauthtrust -H authsvc_hostname -P 9090
nsraddadmin -H authsvc_hostname -P 9090
  1. Finally, add the account running the NMC service (replace user with nsrnmc for Linux and SYSTEM for Windows NMC servers) as an Administrator to the NetWorker server being added to NMC for administration:
nsraddadmin -u user@nmc_server_hostname

Additional Information

NMC: Verify NetWorker Authentication Service is Running

Affected Products

NetWorker

Products

NetWorker, NetWorker Management Console
Article Properties
Article Number: 000038012
Article Type: Solution
Last Modified: 14 Mar 2025
Version:  4
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.