Avamar：由於 DD Boost 使用者鎖定，無法更新或連線至 Data Domain 系統

Summary: 由於多次嘗試使用錯誤的密碼登入，DD Boost 使用者遭到鎖定。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

從 Avamar 到 Data Domain 的所有備份都失敗，並傳回： 
2020-02-09 10:05:39 avtar Error <10542>: Data Domain server "datadomain.local" open failed DDR result code: 5075, desc: the user has insufficient access rights (Log #1)
2020-02-09 10:05:39 avtar Error <10509>: Problem logging into the DDR server:'', only GSAN communication was enabled. (Log #1)
2020-02-09 10:05:39 avtar FATAL <17964>: Backup is incomplete because file "/ddr_files.xml" is missing (Log #1)
2020-02-09 10:05:39 avtar FATAL <8941>: Fatal server connection problem, aborting initialization. Verify correct server address and login credentials. (Log #1)
所有維護工作都失敗，並顯示： 
 MSG_ERR_DDR_ERROR
以下命令會將檢查點報告為無效，並顯示錯誤：  
admin@avamar :~/>: cplist --full
cplist: ERROR: ddrmaint: <4750>Datadomain get checkpoint list operation failed.
2020/02/09-12:08:56.31504 [cplist]  ERROR: <0001> ddrmaint: <4750>Datadomain get checkpoint list operation failed.
cp.20200122200414 Thu Jan 23 00:04:14 2020 invalid --- ---  nodes   1/1 stripes   1875
cp.20200122201338 Thu Jan 23 00:13:38 2020 invalid --- ---  nodes   1/1 stripes   1875
cp.20200123043629 Thu Jan 23 08:36:29 2020 invalid --- ---  nodes   1/1 stripes   1876
以下命令也回報相同的錯誤： 
admin@avamar:~/>: ddrmaint cplist
<4750>Datadomain get checkpoint list operation failed.
「DDR 驗證旗標」在 mcserver.xml 中已停用： 
root@avamar:~/#: grep -i "use_ddr_auth_token" /usr/local/avamar/var/mc/server_data/prefs/mcserver.xml
              <entry key="use_ddr_auth_token" value="false" />

Cause

由於 Avamar 端多次頻繁嘗試使用錯誤的 DD Boost 密碼，因此會被鎖定，關閉所有與 Avamar 的連線。

嘗試以 DD Boost 使用者身分透過 SSH 連線至 Data Domain，顯示帳戶已因登入 X 次失敗而被鎖定。 
admin@avamar:~/>: ssh ddboost@datadomain
EMC Data Domain Virtual Edition
Account locked due to X failed logins
Password:
在 Data Domain 帳戶中，以下命令的輸出顯示 DD Boost 使用者已啟用： 
sysadmin@ddve# user show list
User list from node "localhost".
Name       Uid   Role    Last Login From   Last Login Time           Status   Disable Date
--------   ---   -----   ---------------   ------------------------  -------- -----------
sysadmin   100   admin   xx.xxx.xx.x       Mon Feb 10 11:57:06 2020  enabled     never
ddboost    500   admin   xx.xxx.xx.x       Mon Feb 10 12:07:07 2020  enabled     never
--------   ---   -----   ---------------   ------------------------   -------------------
2 users found.
註冊表設置已驗證為正確。 
ddboost@Dddve# reg show protocol.ost
reg set protocol.ost.stu_user.avamar-<dpnid>= 500:50
reg set protocol.ost.user.ddboost = 500:50 
reg set protocol.ost.uid500:50 = ddboost
reg removekey protocol.ost.uid500:100
ddfs.info 顯示來自 Avamar IP 位址的驗證失敗。

Resolution

請聯絡 Dell 支援 部門，與 Avamar 和 Data Domain 支援團隊合作，套用解決方案。

在每個使用相同 DD Boost 使用者的 Avamar 上，必須遵循此解決方案。 
ddboost@ddve# ddboost storage-unit show
Name                Pre-Comp (GiB)   Status   User      Report Physical
                                                           Size (MiB)
-----------------   --------------   ------   -------   ---------------
avamar-xxx          515401.8            RW       ddboost                 -
-----------------   --------------   ------   -------   ---------------
 D    : Deleted
 Q    : Quota Defined
 RO   : Read Only
 RW   : Read Write
 RD   : Replication Destination

Additional Information

DD Boost 密碼過期而非不正確密碼也可能會導致此問題。

Affected Products

Avamar

Products

Avamar
Article Properties
Article Number: 000063453
Article Type: Solution
Last Modified: 22 Apr 2025
Version:  18
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.