NVP vProxy: Registration fails with "vProxy in unstable state, method not allowed. Received an HTTP code: 405"

           

   Article Number:     529161                                   Article Version: 4     Article Type:    Break Fix 
   

 


Product:

 

NetWorker Family,NetWorker

 

Issue:

 

 

   

      The NetWorker VMware Protection integration is configured with the vProxy Appliance.  The vProxy is being registered and the NetWorker Management Console shows an HTTP warning code 405.   

   
      Warning    HH:MM:SS  event    vm proxy  Unable to register NSR VMware proxy '[VPROXY_NAME]': vProxy in unstable state, method not allowed. Received an HTTP code: 405, libCURL message: "", url: "https://[NETWORKER_SERVER_NAME]:9090/api/v1/VproxyEngines/RestEngine/Registration"    
   

     
      The vProxy vrapid-engine.log shows:   

   
      YYYY/MM/DD HH:MM:SS TRACE:  rejecting unauthorized request "/api/v1/VproxyEngines/RestEngine/process":YYYY/MM/DD HH:MM:SS TRACE:  {"Config": {"LogTag": "28", "Username": "admin", "SessionId": "", "IdleTimeout": 300, "LogLevel": "INFO", "Password": "*****", "NWS": "[NETWORKER_SERVER_NAME]", "Cp": "-----BEGIN CERTIFICATE-----\nMIICwD....\n-----END CERTIFICATE-----\n-----BEGIN RSA PRIVATE KEY-----\n.....==\n-----END RSA PRIVATE KEY-----\n", "MobServer": {"HostName": "[VCENTER_SERVER_NAME]", "UserName": "[VCENTER_USER]", "UserPassword": "*****", "TcpPort": 0}}}YYYY/MM/DD HH:MM:SS ERROR:  AdminEngine: sending response error: code=401, errText=only requests from [NETWORKER_SERVER_NAME] are allowedYYYY/MM/DD HH:MM:SS TRACE:  rejecting unauthorized request "/api/v1/VproxyEngines":YYYY/MM/DD HH:MM:SS ERROR:  AdminEngine: sending response error: code=401, errText=only requests from [NETWORKER_SERVER_NAME] are allowed    
                                                             

 

 

Cause:

 

 

The symptom is due to a new access control feature implemented in NetWorker 18.2.0.0 Build.28 with 3.0.0-4.  If the NetWorker server has multiple network interfaces, the vProxy may see another interface and deny the registration.                                                           

 

 

Resolution:

 

 

   

      The issue has been resolved in the NetWorker 18.2.0.2 cumulative release.  Install the latest NetWorker 18.2.0.x cumulative hot fix package and vProxy release to resolve the symptom. The latest cumulative hot fix is available on the Dell EMC NetWorker Support Download web page:     
     
      https://support.emc.com/downloads/1095_NetWorker     
     
      Workaround:   

   
         
  •         Edit the systemd unit config file: vi /usr/lib/systemd/system/vrapid.service     
  •      
  •         Find the line starting with "ExecStart=/opt/emc/vproxy/bin/vrapid"     
  •      
  •         Append/edit command line arg to disable access control.     
  •      
  •         Example: ExecStart=/opt/emc/vproxy/bin/vrapid -disable-access-control     
  •      
  •         Reload the unit config file into systemd: systemctl daemon-reload     
  •      
  •         Restart the recover engine: systemctl restart vrapid.service     
  •      
  •         Register the vProxy with the NetWorker server.     
  •