PowerScale: Isilon: OneFS 9 - NDMP Backups Fail with Error "ERRO:NDMP security.c:401:securityAuthenticateClient MD5 authorization by user 'x' failed"
Summary: The scope of this KB is to interpret an error where an NDMP administrator doesn't get authenticated.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Symptoms
NDMP backups fail when attempting to authenticate an NDMP administrator account. A sample error can be found here:
In this example, the Isilon aborts the backup as the ndmp user can't be authenticated.
2021-10-10T18:00:01-04:00 <3.3> powerscale-5(id5) isi_ndmp_d[7090]: ERRO:NDMP security.c:401:securityAuthenticateClient MD5 authorization by user 'ndmpadmin' failed
In this example, the Isilon aborts the backup as the ndmp user can't be authenticated.
Sun Oct 10 18:00:01 2021 (1633914001): Received from x.x.x.x; Session:7090 Message : 0x901 (NDMP_CONNECT_CLIENT_AUTH) Timestamp : 1633816801 XSequence : 3 RSequence : 3 Error : 0 (NDMP_NO_ERR) Auth Type : 2 (MD5) Id : ndmpadmin Digest : <MD5 hash> Sun Oct 10 18:00:01 2021 (1633914001): Transmitted to x.x.x.x; Session:7090 Message : 0x901 (NDMP_CONNECT_CLIENT_AUTH) Timestamp : 1633816801 XSequence : 4 RSequence : 3 Error : 0 (NDMP_NO_ERR) Error : 4 (NDMP_NOT_AUTHORIZED_ERR !!!)
Cause
One or multiple scenarios has occurred for the NDMP administrator account (applies to both the Isilon and DMA):
- The password expired on the and needs to get reset.
- The account got locked and needs to get unlocked.
- The password doesn't match on both the Isilon and Avamar.
- The password expired on the and needs to get reset.
- The account got locked and needs to get unlocked.
- The password doesn't match on both the Isilon and Avamar.
Resolution
It's advised to have the user verify the account properties on both the Isilon and DMA side, and follow the check list provided above.
Additional Information
An NDMP administrator account is required for NDMP backups and restores. They will need to get configured on both the Isilon and DMA (Avamar, Networker, NetBackup, etc.). The root user, or users associated with Active Directory, for example, are considered invalid.
Article Properties
Article Number: 000192491
Article Type: Solution
Last Modified: 31 Aug 2022
Version: 2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.