Veritas-bu

[Veritas-bu] Encryption

2002-01-08 14:53:55
Subject: [Veritas-bu] Encryption
From: Don.OShea AT emergis DOT com (O'Shea, Don)
Date: Tue, 8 Jan 2002 14:53:55 -0500
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C1987E.34360020
Content-Type: text/plain;
        charset="iso-8859-1"

Larry, thanks for the response. Our clients are configured to require
encryption. It turns out the classes were unchecked for using encryption.
That now is the second problem I need to figure out. We have a total of
about 15 classes that were configured to use encryption. Everyone of them
somehow got set to not use encryption. At the same time, all the classes
defaulted back to use the Netbackup pool. The operators swear that they did
not touch the configuration of the backups but I cannot think of any way
this could happen. Has anybody else ever come accross this?

Don O'Shea
NT Support
BCE Emergis Inc.
(905)707-4000 Ext. 3765
Fax: (905) 707-4329
mailto:don.oshea AT emergis DOT com


-----Original Message-----
From: Larry Kingery [mailto:larry.kingery AT veritas DOT com]
Sent: January 7, 2002 7:19 PM
To: O'Shea, Don
Subject: Re: [Veritas-bu] Encryption


On the client, you can set it to deny, allow, or require encryption.
It sounds like your client is set to require, but the server is not
requesting the use of encryption.

I would check that the class is set to use encryption, a valid
encryption key is entered on the master (and media server???), and
probably the bpcd/bpbkar(might be bpbkar32 on windows???) logs on the
client, the bprd/bpsched logs on the master and the bpbrm log on the
media server for clues.  Might also want to check that nothing has
happened to the keyfile.


O'Shea, Don writes:
> We are running Netbackup Datacenter version 3.4.1 with 56 bit Data
> encryption on several Win2K servers. Last week for some unknown reason
> it stopped working. While checking through the logs we discovered error
> messages stating "Encryption Not requested by server but required by
> client, access is denied. This was all working fine up until this point.
> The only way we could get the backups working was to turn off data
> encryption.
> 
> Does anyone know what might cause this to happen and how do we go about
> getting it working again? I am not very familiar with the encryption
> part so any help would be appreciated.
> 
> Don O'Shea 
> NT Support 
> BCE Emergis Inc. 
> (905)707-4000 Ext. 3765 
> Fax: (905) 707-4329 
> mailto:don.oshea AT emergis DOT com <mailto:don.oshea AT emergis DOT com>  
> 
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
> <HTML>
> <HEAD>
> 
> <DEFANGED_META NAME="Generator" CONTENT="MS Exchange Server version
5.5.2654.89">
> <TITLE>Encryption</TITLE>
> </HEAD>
> <BODY>
> 
> <P><FONT SIZE=2 FACE="Arial">We are running Netbackup Datacenter version
3.4.1 with 56 bit Data encryption on several Win2K servers. Last week for
some unknown reason it stopped working. While checking through the logs we
discovered error messages stating &quot;Encryption Not requested by server
but required by client, access is denied. This was all working fine up until
this point. The only way we could get the backups working was to turn off
data encryption.</FONT></P>
> 
> <P><FONT SIZE=2 FACE="Arial">Does anyone know what might cause this to
happen and how do we go about getting it working again? I am not very
familiar with the encryption part so any help would be
appreciated.</FONT></P>
> 
> <P><FONT SIZE=2 FACE="Arial">Don O'Shea</FONT>
> <BR><FONT SIZE=2 FACE="Arial">NT Support</FONT>
> <BR><FONT SIZE=2 FACE="Arial">BCE Emergis Inc.</FONT>
> <BR><FONT SIZE=2 FACE="Arial">(905)707-4000 Ext. 3765</FONT>
> <BR><FONT SIZE=2 FACE="Arial">Fax: (905) 707-4329</FONT>
> <BR><FONT SIZE=2 FACE="Arial"><A
HREF="mailto:don.oshea AT emergis DOT com">mailto:don.oshea AT emergis DOT 
com</A></FONT>
> </P>
> 
> </BODY>
> </HTML>
-- 
Larry Kingery 
                           Free the mallocs

------_=_NextPart_001_01C1987E.34360020
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2654.89">
<TITLE>RE: [Veritas-bu] Encryption</TITLE>
</HEAD>
<BODY>

<P><FONT SIZE=3D2>Larry, thanks for the response. Our clients are =
configured to require encryption. It turns out the classes were =
unchecked for using encryption. That now is the second problem I need =
to figure out. We have a total of about 15 classes that were configured =
to use encryption. Everyone of them somehow got set to not use =
encryption. At the same time, all the classes defaulted back to use the =
Netbackup pool. The operators swear that they did not touch the =
configuration of the backups but I cannot think of any way this could =
happen. Has anybody else ever come accross this?</FONT></P>

<P><FONT SIZE=3D2>Don O'Shea</FONT>
<BR><FONT SIZE=3D2>NT Support</FONT>
<BR><FONT SIZE=3D2>BCE Emergis Inc.</FONT>
<BR><FONT SIZE=3D2>(905)707-4000 Ext. 3765</FONT>
<BR><FONT SIZE=3D2>Fax: (905) 707-4329</FONT>
<BR><FONT SIZE=3D2><A =
HREF=3D"mailto:don.oshea AT emergis DOT com">mailto:don.oshea AT emergis DOT 
com</A></=
FONT>
</P>
<BR>

<P><FONT SIZE=3D2>-----Original Message-----</FONT>
<BR><FONT SIZE=3D2>From: Larry Kingery [<A =
HREF=3D"mailto:larry.kingery AT veritas DOT com">mailto:[email protected]=
om</A>]</FONT>
<BR><FONT SIZE=3D2>Sent: January 7, 2002 7:19 PM</FONT>
<BR><FONT SIZE=3D2>To: O'Shea, Don</FONT>
<BR><FONT SIZE=3D2>Subject: Re: [Veritas-bu] Encryption</FONT>
</P>
<BR>

<P><FONT SIZE=3D2>On the client, you can set it to deny, allow, or =
require encryption.</FONT>
<BR><FONT SIZE=3D2>It sounds like your client is set to require, but =
the server is not</FONT>
<BR><FONT SIZE=3D2>requesting the use of encryption.</FONT>
</P>

<P><FONT SIZE=3D2>I would check that the class is set to use =
encryption, a valid</FONT>
<BR><FONT SIZE=3D2>encryption key is entered on the master (and media =
server???), and</FONT>
<BR><FONT SIZE=3D2>probably the bpcd/bpbkar(might be bpbkar32 on =
windows???) logs on the</FONT>
<BR><FONT SIZE=3D2>client, the bprd/bpsched logs on the master and the =
bpbrm log on the</FONT>
<BR><FONT SIZE=3D2>media server for clues.&nbsp; Might also want to =
check that nothing has</FONT>
<BR><FONT SIZE=3D2>happened to the keyfile.</FONT>
</P>
<BR>

<P><FONT SIZE=3D2>O'Shea, Don writes:</FONT>
<BR><FONT SIZE=3D2>&gt; We are running Netbackup Datacenter version =
3.4.1 with 56 bit Data</FONT>
<BR><FONT SIZE=3D2>&gt; encryption on several Win2K servers. Last week =
for some unknown reason</FONT>
<BR><FONT SIZE=3D2>&gt; it stopped working. While checking through the =
logs we discovered error</FONT>
<BR><FONT SIZE=3D2>&gt; messages stating &quot;Encryption Not requested =
by server but required by</FONT>
<BR><FONT SIZE=3D2>&gt; client, access is denied. This was all working =
fine up until this point.</FONT>
<BR><FONT SIZE=3D2>&gt; The only way we could get the backups working =
was to turn off data</FONT>
<BR><FONT SIZE=3D2>&gt; encryption.</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; Does anyone know what might cause this to =
happen and how do we go about</FONT>
<BR><FONT SIZE=3D2>&gt; getting it working again? I am not very =
familiar with the encryption</FONT>
<BR><FONT SIZE=3D2>&gt; part so any help would be appreciated.</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; Don O'Shea </FONT>
<BR><FONT SIZE=3D2>&gt; NT Support </FONT>
<BR><FONT SIZE=3D2>&gt; BCE Emergis Inc. </FONT>
<BR><FONT SIZE=3D2>&gt; (905)707-4000 Ext. 3765 </FONT>
<BR><FONT SIZE=3D2>&gt; Fax: (905) 707-4329 </FONT>
<BR><FONT SIZE=3D2>&gt; <A =
HREF=3D"mailto:don.oshea AT emergis DOT com">mailto:don.oshea AT emergis DOT 
com</A> =
&lt;<A =
HREF=3D"mailto:don.oshea AT emergis DOT com">mailto:don.oshea AT emergis DOT 
com</A>&g=
t;&nbsp; </FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; &lt;!DOCTYPE HTML PUBLIC &quot;-//W3C//DTD HTML =
3.2//EN&quot;&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &lt;HTML&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &lt;HEAD&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; &lt;DEFANGED_META NAME=3D&quot;Generator&quot; =
CONTENT=3D&quot;MS Exchange Server version 5.5.2654.89&quot;&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &lt;TITLE&gt;Encryption&lt;/TITLE&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &lt;/HEAD&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &lt;BODY&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; &lt;P&gt;&lt;FONT SIZE=3D2 =
FACE=3D&quot;Arial&quot;&gt;We are running Netbackup Datacenter version =
3.4.1 with 56 bit Data encryption on several Win2K servers. Last week =
for some unknown reason it stopped working. While checking through the =
logs we discovered error messages stating &amp;quot;Encryption Not =
requested by server but required by client, access is denied. This was =
all working fine up until this point. The only way we could get the =
backups working was to turn off data =
encryption.&lt;/FONT&gt;&lt;/P&gt;</FONT></P>

<P><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; &lt;P&gt;&lt;FONT SIZE=3D2 =
FACE=3D&quot;Arial&quot;&gt;Does anyone know what might cause this to =
happen and how do we go about getting it working again? I am not very =
familiar with the encryption part so any help would be =
appreciated.&lt;/FONT&gt;&lt;/P&gt;</FONT></P>

<P><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; &lt;P&gt;&lt;FONT SIZE=3D2 =
FACE=3D&quot;Arial&quot;&gt;Don O'Shea&lt;/FONT&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &lt;BR&gt;&lt;FONT SIZE=3D2 =
FACE=3D&quot;Arial&quot;&gt;NT Support&lt;/FONT&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &lt;BR&gt;&lt;FONT SIZE=3D2 =
FACE=3D&quot;Arial&quot;&gt;BCE Emergis Inc.&lt;/FONT&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &lt;BR&gt;&lt;FONT SIZE=3D2 =
FACE=3D&quot;Arial&quot;&gt;(905)707-4000 Ext. 3765&lt;/FONT&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &lt;BR&gt;&lt;FONT SIZE=3D2 =
FACE=3D&quot;Arial&quot;&gt;Fax: (905) 707-4329&lt;/FONT&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &lt;BR&gt;&lt;FONT SIZE=3D2 =
FACE=3D&quot;Arial&quot;&gt;&lt;A HREF=3D&quot;<A =
HREF=3D"mailto:don.oshea AT emergis DOT com">mailto:don.oshea AT emergis DOT 
com</A>&q=
uot;&gt;<A =
HREF=3D"mailto:don.oshea AT emergis DOT com">mailto:don.oshea AT emergis DOT 
com</A>&l=
t;/A&gt;&lt;/FONT&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &lt;/P&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; &lt;/BODY&gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &lt;/HTML&gt;</FONT>
<BR><FONT SIZE=3D2>-- </FONT>
<BR><FONT SIZE=3D2>Larry Kingery </FONT>
<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT SIZE=3D2>&nbsp;&nbsp; =
Free the mallocs</FONT>
</P>

</BODY>
</HTML>
------_=_NextPart_001_01C1987E.34360020--

<Prev in Thread] Current Thread [Next in Thread>