Avamar：由于 DD Boost 用户锁定，无法更新或连接到 Data Domain 系统

Summary: 由于多次尝试使用错误的密码登录，DD Boost 用户被锁定。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

从 Avamar 到 Data Domain 的所有备份均失败，并显示： 
2020-02-09 10:05:39 avtar Error <10542>: Data Domain server "datadomain.local" open failed DDR result code: 5075, desc: the user has insufficient access rights (Log #1)
2020-02-09 10:05:39 avtar Error <10509>: Problem logging into the DDR server:'', only GSAN communication was enabled. (Log #1)
2020-02-09 10:05:39 avtar FATAL <17964>: Backup is incomplete because file "/ddr_files.xml" is missing (Log #1)
2020-02-09 10:05:39 avtar FATAL <8941>: Fatal server connection problem, aborting initialization. Verify correct server address and login credentials. (Log #1)
所有维护作业均失败，并显示： 
 MSG_ERR_DDR_ERROR
以下命令将检查点报告为无效，并显示错误：  
admin@avamar :~/>: cplist --full
cplist: ERROR: ddrmaint: <4750>Datadomain get checkpoint list operation failed.
2020/02/09-12:08:56.31504 [cplist]  ERROR: <0001> ddrmaint: <4750>Datadomain get checkpoint list operation failed.
cp.20200122200414 Thu Jan 23 00:04:14 2020 invalid --- ---  nodes   1/1 stripes   1875
cp.20200122201338 Thu Jan 23 00:13:38 2020 invalid --- ---  nodes   1/1 stripes   1875
cp.20200123043629 Thu Jan 23 08:36:29 2020 invalid --- ---  nodes   1/1 stripes   1876
以下命令还会报告相同的错误： 
admin@avamar:~/>: ddrmaint cplist
<4750>Datadomain get checkpoint list operation failed.
“DDR 身份验证标记”在 mcserver.xml中处于禁用状态： 
root@avamar:~/#: grep -i "use_ddr_auth_token" /usr/local/avamar/var/mc/server_data/prefs/mcserver.xml
              <entry key="use_ddr_auth_token" value="false" />

Cause

由于 Avamar 端多次频繁尝试使用错误的 DD Boost 密码，它会锁定并关闭与 Avamar 的所有连接。

以 DD Boost 用户身份尝试与 Data Domain 建立 SSH 连接时，表明帐户由于 X 次登录失败而被锁定。 
admin@avamar:~/>: ssh ddboost@datadomain
EMC Data Domain Virtual Edition
Account locked due to X failed logins
Password:
在 Data Domain 帐户中，以下命令的输出将 DD Boost 用户显示为已启用： 
sysadmin@ddve# user show list
User list from node "localhost".
Name       Uid   Role    Last Login From   Last Login Time           Status   Disable Date
--------   ---   -----   ---------------   ------------------------  -------- -----------
sysadmin   100   admin   xx.xxx.xx.x       Mon Feb 10 11:57:06 2020  enabled     never
ddboost    500   admin   xx.xxx.xx.x       Mon Feb 10 12:07:07 2020  enabled     never
--------   ---   -----   ---------------   ------------------------   -------------------
2 users found.
注册表设置经验证正确无误。 
ddboost@Dddve# reg show protocol.ost
reg set protocol.ost.stu_user.avamar-<dpnid>= 500:50
reg set protocol.ost.user.ddboost = 500:50 
reg set protocol.ost.uid500:50 = ddboost
reg removekey protocol.ost.uid500:100
ddfs.info 显示来自 Avamar IP 地址的身份验证失败。

Resolution

请联系 戴尔支持 部门，与 Avamar 和 Data Domain 支持团队合作应用解决方案。

必须在使用相同 DD Boost 用户的每个 Avamar 上遵循此解决方法。 
ddboost@ddve# ddboost storage-unit show
Name                Pre-Comp (GiB)   Status   User      Report Physical
                                                           Size (MiB)
-----------------   --------------   ------   -------   ---------------
avamar-xxx          515401.8            RW       ddboost                 -
-----------------   --------------   ------   -------   ---------------
 D    : Deleted
 Q    : Quota Defined
 RO   : Read Only
 RW   : Read Write
 RD   : Replication Destination

Additional Information

此问题也可能由过期的 DD Boost 密码而非不正确的密码组成。

Affected Products

Avamar

Products

Avamar
Article Properties
Article Number: 000063453
Article Type: Solution
Last Modified: 22 Apr 2025
Version:  18
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.