Networker

Re: [Networker] Peer errors under Networker 7.3

2006-03-03 09:47:54
Subject: Re: [Networker] Peer errors under Networker 7.3
From: Terry Lemons <lemons_terry AT EMC DOT COM>
To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
Date: Fri, 3 Mar 2006 09:39:05 -0500
Hi Scott

One of the changes in V7.3 was a much better security/authentication
mechanism, where SSL credentials are exchanged between NetWorker systems the
first time they talk with each other.  It's much better than DNS
forward/backward lookup as a security mechanism.

I had the same problem, and was told to look in NMC in Configuration ->
Local Hosts, and to delete something there.  I never could, due to a
permission problem that I couldn't resolve.

tl
-----Original Message-----
From: Legato NetWorker discussion [mailto:NETWORKER AT LISTSERV.TEMPLE DOT EDU] 
On
Behalf Of Scott Russell
Sent: Friday, March 03, 2006 8:33 AM
To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
Subject: [Networker] Peer errors under Networker 7.3

Greets.

On Networker 7.3 I'm seeing lots of the following error in the 
daemon.log file on the server:

03/03/06 08:14:55 nsrexecd: SYSTEM error: There is already a machine 
using the name: "oddjob.rtp.raleigh.ibm.com". Either choose a different 
name for your machine, or delete the "NSR peer information" entry for 
"oddjob.rtp.raleigh.ibm.com" on host: "dotbak.raleigh.ibm.com"


The client is 'oddjob' and the server is 'dotbak'. Both systems are 
RHEL4 running Networker 7.3. The error appears to be something to do 
with authentication and certificate exchange. It does not prevent 
backups from happening however.

I'm a bit lost at what it's really telling me. According to page 568 it 
appears as if two hosts automatically exchange credentials when they 
authenticate with each other for the first time. In this case the 
server, dotbak, has a copy of the client oddjob's credentials and the 
client, oddjob, has a copy of the server dotbak credentials. If I follow 
the advice given and delete the 'NSR peer infromation' entry for oddjob 
off of dotbak, won't it just come back again?

-- 
Scott Russell <lnxgeek AT us.ibm DOT com>
IBM Linux Technology Center

To sign off this list, send email to listserv AT listserv.temple DOT edu and 
type
"signoff networker" in the
body of the email. Please write to networker-request AT listserv.temple DOT edu 
if
you have any problems
wit this list. You can access the archives at
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER

To sign off this list, send email to listserv AT listserv.temple DOT edu and 
type "signoff networker" in the
body of the email. Please write to networker-request AT listserv.temple DOT edu 
if you have any problems
wit this list. You can access the archives at 
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER