Error:"V-106-58644-674 Permission denied for executing this command. Please verify the vxsas service is running in proper account on all hosts in RDS" reported for VVR on Windows

book

Article ID: 100017947

calendar_today

Updated On:

Description

For clustered VVR environment, when attempting to perform a Global switch operation from the VCS Java Console, the RVGPrimary resource may fail to come online on the Secondary site and be in a Faulted state. 

The online attempt followed by the error message can be tracked from the engine_A.log located in %VCS_HOME%\log folder as below: 

YYYY/MM/DD HH:MM:SS VCS NOTICE V-16-1-10301 Initiating Online of Resource (Owner:xxxx Unspecified, Group:xxxx) on System xxxx

YYYY/MM/DD HH:MM:SS VCS INFO V-16-20027-29 RVGPrimary:<RLINK_name>:online: will be used to decide for takeover or migrate.

YYYY/MM/DD HH:MM:SS VCS ERROR V-16-20027-11 RVGPrimary::online:migrate of failed with error code 41472 and message Error V-106-58644-674: Permission denied for executing this command. Please verify the vxsas service is running in proper account on all hosts in RDS.Error occurred on host xxxx.

 

For a standalone VVR environment, attempting to perform Add Secondary/Start replication/Stop Replication/Migrate/Takeover operation from Veritas Enterprise Administrator (VEA) may fail with the below error

Error V-106-58644-674

Error occurred while performing the <Operation> on host xxx

Permission denied for executing this command. Please verify the vxsas service is running in proper account on all hosts in RDS.

 

Example: Error seen when performing Start replication operation

image.png

 

 



Cause

VVR works in the context of the Veritas Volume Replicator Security Service (VxSAS). It uses this service to contact the remote host to perform the requested operation, once authentication is successful.

This issue is observed when VVR fails to authenticate the remote host (Secondary server), thereby preventing the requested operation from completing successfully.

The possible causes for the authentication failure can be:

1) The VxSAS service is logged in with different accounts on the Primary and Secondary servers.

2) The account configured for VxSAS is missing the Log on as a service user privilege 

3) The VxSAS service account is not a part of the Local Administrators group on the Primary and/or Secondary servers

3) The password for the VxSAS is incorrect or expired

4) The VxSAS service is not running on the Primary and/or Secondary servers 

 

Resolution

To address this issue:
 
a) Ensure the account configured for VxSAS is part of the Local Administrators group and is assigned the Log on as a service user privilege on the Primary and Secondary servers.
 
b) Once the above permissions are assigned to the account, reconfigure the VxSAS service using the below steps:
  1. From the Windows Run prompt, type vxsas and hit Enter
  2. Hit Next on the Welcome page of the Veritas Volume Replicator Security Service Configuration Wizard
  3. Provide the account and password on the Account Information page
  4. Select the domain for all replication servers on the Domain Selection page
  5. Enter the names for all hosts which are involved in replication on the Host Selection page
  6. Click the Configure button to update the login information and restart the VxSAS service on all servers
For more information regarding VxSAS, refer Volume Replicator Administrator's Guide
 
 
 

Issue/Introduction

For Infoscale on Windows platform, several Veritas Volume Replicator (VVR) related operations may be blocked pointing to an issue with the Veritas Volume Replicator Security Service (VxSAS). 

Powered by Wolken Software