NVP-vProxy: vProxy backups fail with "ERROR: [140] VDDK Error: 13: You do not have access rights to this file"

Summary: The vProxy is unable to backup any VMs that do not reside on the same esxi host as the vProxy. The vProxy fails to communicate over port 902 for the esxi hosts, hosting the VMs.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

It was found that all the esxi hosts, are on separate Backup VLANs, and Management VLANs. 
 

vProxy backup is failing with the following error, as seen from the backup log on the NetWorker Server: 
YYYY/MM/DD HH:MM:SS ERROR: [nw_build] VDDK Error: 13: You do not have access rights to this file.
YYYY/MM/DD HH:MM:SS ERROR: [nw_build] Failed to open source VMDK "[Datastore] vm_name/vm_name_1.vmdk".
YYYY/MM/DD HH:MM:SS ERROR: [nw_build] "Hard disk 1": BackupVmdk: "Hard disk 1": Unable to open Virtual Disk "[Datastore] vm_name/vm_name_1.vmdk" in "hotadd" mode.


As seen from the /opt/emc/vproxy/runtime/logs/vbackupdd-vddk.log on the vProxy:

YYYY/MM/DD HH:MM:SS NOTICE: VDDK INFO VixDiskLib: VixDiskLib_OpenEx: Open a disk.
YYYY/MM/DD HH:MM:SS NOTICE: VDDK INFO VixDiskLibVim: VixDiskLibVim_GetNfcTicket: Get NFC ticket for [Datastore] vm_name/vm_name_1.vmdk.
YYYY/MM/DD HH:MM:SS NOTICE: VDDK INFO VixDiskLibVim: Request RandomAccessRO diskKey = 2000, readOnly = 1, openSnapshot = 0.
YYYY/MM/DD HH:MM:SS NOTICE: VDDK INFO VixDiskLibVim: VixDiskLibVim_FreeNfcTicket: Free NFC ticket.
YYYY/MM/DD HH:MM:SS NOTICE: VDDK INFO 2017-11-06T13:16:45.500-05:00 warning -[7FC6AAF8B700] [Originator@6876 sub=Libs] [NFC ERROR] NfcNewAuthdConnectionEx: Failed to connect to peer. Error: Failed to connect to server esxi_hostname:902
YYYY/MM/DD HH:MM:SS NOTICE: VDDK INFO 2017-11-06T13:18:52.732-05:00 warning -[7FC6AAF8B700] [Originator@6876 sub=Libs] [NFC ERROR] NfcNewAuthdConnectionEx: Failed to connect to peer. Error: Failed to connect to server esxi_hostname:902
YYYY/MM/DD HH:MM:SS NOTICE: VDDK INFO 2017-11-06T13:18:52.735-05:00 error -[7FC6AAF8B700] [Originator@6876 sub=transport] Mounting VM vm-326 using transport hotadd failed : Could not connect to ESX host esxi_hostname: Failed to connect to server esxi_hostname:902.
YYYY/MM/DD HH:MM:SS NOTICE: VDDK INFO 2017-11-06T13:18:52.736-05:00 error -[7FC6AAF8B700] [Originator@6876 sub=transport] Cannot use mode hotadd to access [Datastore] vm_name/vm_name_1.vmdk: Cannot mount using this method. (Mounting VM vm-326 using transport hotadd failed : Could not connect to ESX host esxi_hostname: Failed to connect to server esxi_hostname:902.)
YYYY/MM/DD HH:MM:SS NOTICE: VDDK INFO VixDiskLib: Unable to locate appropriate transport mode to open disk. Error 13 (You do not have access rights to this file) (Mounting VM vm-326 using transport hotadd failed : Could not connect to ESX host esxi_hostname: Failed to connect to server esxi_hostname:902.) at 4570.
YYYY/MM/DD HH:MM:SS NOTICE: VDDK INFO VixDiskLib: VixDiskLib_OpenEx: Cannot open disk [Datastore] vm_name/vm_name_1.vmdk. Error 13 (You do not have access rights to this file) (Mounting VM vm-326 using transport hotadd failed : Could not connect to ESX host esxi_hostname: Failed to connect to server esxi_hostname:902.) at 4680.
YYYY/MM/DD HH:MM:SS NOTICE: VDDK INFO VixDiskLib: VixDiskLib_Open: Cannot open disk [Datastore] vm_name/vm_name_1.vmdk. Error 13 (You do not have access rights to this file) at 4718.
YYYY/MM/DD HH:MM:SS NOTICE: VDDK INFO VixDiskLib: VixDiskLib_Disconnect: Disconnect.
YYYY/MM/DD HH:MM:SS NOTICE: VDDK INFO VixDiskLib: VixDiskLib_EndAccess: Disk access completed.


 

Cause

It's found that the vProxy will only backup VMs located on the same esxi host as itself. If the vProxy attempts to backup a VM located on a separate esxi host, it will fail to connect on port 902 as seen below:
  
Could not connect to ESX host esxi_hostname: Failed to connect to server esxi_hostname:902.

Testing connectivity from the vProxy to the esxi host in question using the below command, hangs, and eventually fails to connect, though ping and nslookup, return expected results. 

#curl -kv esxi_hostname:902

Verified the firewall is down on the esxi hosts.

esxcli network firewall set -e false

Verified no layer2 firewall exists, or any firewall between the esxi hosts. 
 

Resolution

Found, that the esxi hosts are all on separate backup/management VLANs, and not able to communicate over port 902. Need to be able to communicate over port 902 between esxi hosts and vproxy.

Affected Products

NetWorker

Products

NetWorker
Article Properties
Article Number: 000050098
Article Type: Solution
Last Modified: 23 Sept 2024
Version:  4
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.