Permission denied errors when performing Volume Replicator Operations


Permission denied errors when performing Volume Replicator Operations
Prev	Recovering from problems during replication	Next

You may get permission denied errors while Volume Replicator operations are carried out:

Failed to authenticate user credentials. Please verify the
 vxsasservice is running in proper account on all hosts in RDS.

This error can occur if the VxSAS service is not started, or, if it has been started using a logon account that is not valid as a local administrator on some of the Volume Replicator hosts, participating in the command.

An RDS is the logical unit that groups the RVGs present on different (local and remote) hosts. Volume Replicator uses the VxSAS service logon account as the account to be authenticated while performing remote RDS configuration operations. Volume Replicator provides many RDS-wide operations that can perform simultaneous updates of Volume Replicator configuration on multiple hosts. These operations can be initiated from the Primary or the Secondary, and can be successful only when the logon account(s) of the local host's VxSAS service and Primary host's VxSAS service (if that is not the local host) has administrative privileges on all the remote participating hosts, failing which you may get this error.

To fix the problem, use the Volume Replicator Security Service Configuration Wizard to configure the VxSAS service remotely on multiple hosts from a single host.

Launch the wizard from Start > All Programs > Veritas > Veritas Storage Foundation > Configuration Wizards > VVR Security Service Configuration Wizard or, on Windows 2012 operating systems, from the Apps menu in the Start screen.

Optionally, run vxsascfg.exe from the command prompt.

Veritas recommends that you configure the VxSAS service now. Once correctly configured, it is not necessary to reconfigure a host unless you want to change the account name or the password.

When configuring the VxSAS service account make sure that all the hosts participating or being added in the RDS are configured, using an account that has administrative rights on all the other hosts. Another way to configure the vxsas service is through the Service Control Manager.

To configure the VxSAS service directly from the Service Control Manager

Select Start > Settings > Control Panel > Administrative Tools > Services or, on Windows 2012 operating systems, on the Start screen, click Control Panel.
Select VxSAS service and right-click. Choose the Properties option from the menu that appears.
Click on the Log On tab and select the This account option. Specify your administrative password in the This account field and your password if any in the password field. Click OK to effect these changes.
Restart the VxSAS service.
Perform these steps for each host that is intended to be a part of the replication configuration.
For cluster setups, Veritas recommends that each node of the cluster should share the same VxSAS logon account. This can either be a domain account that has been configured as a member of the local administrators group in the local security policy of each node, or a local administrative account that is configured with the same name and password on each node.