IBM Support

Catalog backup stops with "Failed to enable password-less ssh to vsnap server"

Troubleshooting


Problem

The IBM Spectrum Protect Plus appliance catalog backup stops with "Failed to enable password-less ssh to vSnap server" after it was successfully upgraded to 10.1.7 or later versions.

Symptom

In the catalog backup job log, you may see the following errors:

ERROR,Failed to enable password-less ssh to vSnap server yourvsnap@1.2.3.4 Reason : 1
ERROR,Failed to enable password-less ssh to vSnap server
ERROR,Encountered an error executing step basicStep1 in job basicOneStepJob

In the catalog backup virgo log you might see the following errors:

ERROR asyncTaskExecutor-4177 c.c.e.s.protection.catalog.protection.DestinationHandler
<JobId> Failed to enable password-less ssh to vsnap server yourvsnap@1.2.3.4 Reason : 1
ERROR asyncTaskExecutor-4177 c.c.e.s.protection.catalog.protection.DestinationHandler
<JobId> Failed to enable password-less ssh to vSnap server

Cause

Starting with version 10.1.7, the Linux account specified during registration of the vSnap server
in IBM Spectrum Protect Plus User Interface requires shell access.If this account is set to shell
in /sbin/nologin, this causes the catalog backup to fail.

Environment

IBM Spectrum Protect Plus 10.1.7 and later versions.

Diagnosing The Problem

Check to see the Linux account specified during registration of the vSnap server in
IBM Spectrum Protect Plus is set to shell in /sbin/nologin.  If this is the case, the
admin account is restricted from shell access.

Resolving The Problem

In versions before 10.1.7, catalog backup did not need shell access. Starting with 10.1.7,
the IBM Spectrum Protect Plus catalog backups use a new rsync feature that requires shell access.
Setting the vSnap admin user shell to /sbin/nologin is not set by default. This problem will only happen
if, for example for security reasons, the administrator changes the vSnap admin user shell to /sbin/nologin.
To resolve the problem, update the Linux account specified during registration of the vSnap server in
IBM Spectrum Protect Plus so it is not set to shell in /sbin/nologin.The catalog backups will no longer
fail with the errors described in this technical document.

 

Document Location

Worldwide

[{"Type":"SW","Line of Business":{"code":"LOB26","label":"Storage"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSNQFQ","label":"IBM Spectrum Protect Plus"},"ARM Category":[{"code":"a8m50000000L3D0AAK","label":"Planning"},{"code":"a8m3p000000h9Z9AAI","label":"Product Documentation"},{"code":"a8m0z0000001jgyAAA","label":"Troubleshooting"}],"ARM Case Number":"TS005326497","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"10.1.7;10.1.8"}]

Product Synonym

SPP

Document Information

Modified date:
24 September 2021

UID

ibm16454249