NMC: Unable to set user privileges based on user token for SYSTEM on nmc_server_name. Failed to validate security token
摘要: This Article describes an authentication issue which can arise when using a single NMC server to connect to multiple NetWorker servers.
本文适用于
本文不适用于
本文并非针对某种特定的产品。
本文并非包含所有产品版本。
症状
- Adding additional NetWorker servers to NetWorker Management Console (NMC), the following error may appear when trying to connect to one or more of the NetWorker servers.
Unable to set user privileges based on user token for SYSTEM on nmc_server_hostname. Failed to validate security token
- In some instances, you may be able to connect to the NetWorker server; however, the Tabs in the NMC are blank and do not show any data.
原因
When the NMC software is installed, an authentication host/server is specified: This represents the AuthC server installed on a single NetWorker server which NMC trusts to authenticate users.
Authentication trust is established between the NMC and NetWorker server by default during this installation. Other NetWorker datazone servers which are monitored from the same NMC server must be configured to use the same AuthC server as the authenticating authority.
Authentication trust is established between the NMC and NetWorker server by default during this installation. Other NetWorker datazone servers which are monitored from the same NMC server must be configured to use the same AuthC server as the authenticating authority.
解决方案
- Confirm what host was configured as the authentication server during NMC installation. On the host where the NMC server is installed, find the configured authentication host and port (default 9090) in the gstd.conf:
Linux: /opt/lgtonmc/etc/gstd.conf
Windows: ..\NetWorker\Management\GST\etc\gstd.conf
Windows: ..\NetWorker\Management\GST\etc\gstd.conf
string authsvc_hostname = "nsrsvr.lab.loc";
int authsvc_port = 9090;
- On each NetWorker server being added to NMC, run the following commands. Leave portnum as 9090 (default) unless it has been configured otherwise; authsvc_hostname must be the same hostname specified in gstd.conf:
nsrauthtrust -H authsvc_hostname -P 9090
nsraddadmin -H authsvc_hostname -P 9090
- Finally, add the account running the NMC service (replace user with nsrnmc for Linux and SYSTEM for Windows NMC servers) as an Administrator to the NetWorker server being added to NMC for administration:
nsraddadmin -u user@nmc_server_hostname
其他信息
受影响的产品
NetWorker产品
NetWorker, NetWorker Management Console文章属性
文章编号: 000038012
文章类型: Solution
上次修改时间: 14 3月 2025
版本: 4
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。