NetWorker NVP-vProxy: Backups failing - User does not have sufficient access rights - Failed to verify the password for user ddboost. Error is 7:Authentication failure

Summary: The NetWorker VMware Protection (NVP) integration is configured with the vProxy appliance. Backups are unable to run properly, they fail with the error message "User does not have sufficient access rights". The DDBoost user has all proper permissions configured, but is still unable to proceed. A simple reboot of the NetWorker Server and resetting the DDBoost account failed login attempts resolves this issue. ...

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

The NetWorker VMware Protection (NVP) integration is configured with the vProxy appliance. Backups are unable to run properly, they fail with the error message "User does not have sufficient access rights".
The DDBoost user has all proper permissions configured, but is still unable to proceed.

The Data Domain's /ddvar/log/debug/ddfs.log reports: 
MM/DD HH:MM:SS (tid 0x7fd14c503200): nfs_rpc_svc_idx0 accepted 1000001384 154 from 12.34.56.123:58244
MM/DD HH:MM:SS (tid 0x7fd14c501e00): ost_decrypt_mnt_sec_request(): EVP_DecryptFinal_ex failed
MM/DD HH:MM:SS (tid 0x7fd14c501e00): nfsproc3_ostmntsec_3_svc: connection failed permission (corrupted credentials) from host 12.34.56.123 - ost_decrypt_mnt_sec_request(): failed to finalize plain text (101077092, error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt)
MM/DD HH:MM:SS (tid 0x7fd14c501e00): WARNING: Failed to verify the password for user ddboost. Error is 7:Authentication failure
MM/DD HH:MM:SS (tid 0x7fd152408df0): nfs_rpc_svc_idx0 destroyed tcp 1000001384
MM/DD HH:MM:SS (tid 0x7fd14c505130): nfs_rpc_svc_idx0 accepted 1000001385 154 from 12.34.56.123:58246
MM/DD HH:MM:SS (tid 0x7fd14c301200): ost_decrypt_mnt_sec_request(): EVP_DecryptFinal_ex failed
MM/DD HH:MM:SS (tid 0x7fd14c301200): nfsproc3_ostmntsec_3_svc: connection failed permission (corrupted credentials) from host 12.34.56.123 - ost_decrypt_mnt_sec_request(): failed to finalize plain text (101077092, error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt)
MM/DD HH:MM:SS (tid 0x7fd14c38f200): GUTS: dld1: Load avg/t: 17.98/1075.59, 18, ISR Cnt: 32708195, Thd: 48/14/18/16, qlen: 0 0 0 0 0 0 0 0 0 0 0 0
MM/DD HH:MM:SS (tid 0x7fd14c301200): WARNING: Failed to verify the password for user ddboost. Error is 7:Authentication failure

Cause

The ddboost user account configured in the Data Domain device NetWorker VMware Protection performs backups to is locked. 

You can see the users status using one of the following options.

1. Log in to the Data Domain web user interface as sysadmin, go to Administration->Access->Local Users. The ddboost user account shows locked/disabled.
2. Open an SSH session to the Data Domain as sysadmin, run the command user show list. The ddboost user account shows locked/disabled.

Resolution

Enable/unlock the ddboost user account 
image.png
Figure 1: Steps for enabling the ddboost user account in the Data Domain web user interface.

Or, from a sysadmin SSH session on the Data Domain runs the following command: 
user username enable

To confirm there is no issue with the account, unmount the VM backup device in NetWorker and mount it again. If the device mounts correctly, perform a VM backup.

Additional Information

Data Domain: DDBoost user shows locked status.
NetWorker: Changing the DDBOOST password in the NMC user interface

Affected Products

NetWorker

Products

NetWorker
Article Properties
Article Number: 000173716
Article Type: Solution
Last Modified: 02 Nov 2023
Version:  3
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.