Avamar: A checkpoint validation (hfscheck) is overdue due to a password inconsistency for MCUser in the mccli files

The event may be generated even when a checkpoint validation (hfscheck) has been running successfully daily.

Error messages received by High Priority Events, ConnectEMC (DialHome), or Events Management in the MC UI:

22409 ERROR A checkpoint validation (hfscheck) of Avamar Server checkpoint data is overdue.

summary="A checkpoint validation (hfscheck) of Avamar Server checkpoint data is overdue."
type="ERROR"
code="22409"

Symptom: 22409, Desc: A checkpoint validation (hfscheck) of server checkpoint data is overdue

Although there can be other reasons, the most common cause of this issue is when the change-passwords command did not complete successfully.

1. Verify that the encrypted password in mcserver.xml matches the password in the mcclimcs.xml files:

a. Log in to the Avamar Utility Node as admin.

b. Elevate to root: 

su -

c. Run the following command to retrieve the encrypted password from mcserver.xml:

grep MCUSERAP /usr/local/avamar/var/mc/server_data/prefs/mcserver.xml

Sample output:

<entry key="MCUSERAP" value="{AES}3uMU0rMYgtNfMpBtpAG4PA==" />

d. Run the following commands to retrieve the encrypted password from the two mcclimcs.xml files:

grep "passwd" /root/.avamardata/var/mc/cli_data/prefs/mcclimcs.xml

grep "passwd" /home/admin/.avamardata/var/mc/cli_data/prefs/mcclimcs.xml

Sample output: (both commands should produce the same results): 

<!-- mcspasswd  : password -->
      mcspasswd="{AES}3uMU0rMYgtNfMpBtpAG4PA=="

e. Compare the outputs from 1c and 1d.

f. If a discrepancy is detected, go to step 2, otherwise go to step 3.

2. As root, run the "change-passwords" script to change the Avamar MCUser password:

change-passwords

See the Avamar Administration Guide for more details on changing passwords.

3. If a discrepancy was not detected or the issue is still not resolved after running change-passwords, return to Avamar: Symptom Code 22409: A checkpoint validation (hfscheck) of server checkpoint data is overdue (Resolution Path)