Symantec NetBackup PureDisk Release Readme


Nov 18, 2013 (3 years and 6 months ago)


Symantec NetBackup
PureDisk Release
Symantec NetBackup
PureDisk Release
This document includes the following topics:
Date:February 25,2011
This Hotfixprovides features andfixes tothe Symantec NetBackupPureDisk6.6.1
This Hotfix can be installed on PureDisk 6.6.1 or PureDisk software.
For detailed information about the PureDisk Hotfix,refer to the the
following site:
Note:PureDisk automatically creates upgrade jobs for the agent software on
backup and restore clients.The upgrade does not create agent upgrade jobs for
PDDO (deduplication) agents on NetBackup media server clients.To upgrade
mediaserver clients,followtheprocedureUPGRADINGDEDUPLICATIONAGENTS
ONMEDIA SERVER CLIENTS in this document.
The following list of enhancements provides an overviewof the improvements
that are included in this release of PureDisk.See the PRODUCT FIXES section of
this README file for specific details about these enhancements.
■ Performance improvements
■ Replication
WithPDDOenabled,replicationperformance is significantlyimprovedfor
optimized duplication fromNetBackup to PureDisk servers.This
enhancement removedoverheadfromthe PureDiskstorage pool authority
■ Concurrent backup and data removal
With PureDisk,you can run backup jobs and data removal jobs at
the same time.With past releases,data removal jobs could not run
concurrently with backup jobs.In some environments data removal jobs
did not run because backup jobs ran 24 hours per day.
■ Rollup of existing EEBs
PureDisk includes all engineering binaries that have been created for
PureDisk and PureDisk 6.6.1.
■ Vulnerabilities resolved
PureDisk resolves a number of identified vulnerabilities.See the
VULNERABILITIES - RESOLVEDsection of this README file for specific
Symantec NetBackup PureDisk Release Readme
This release contains the following product fixes:
■ Etrack 2084551:PDDOoptimized duplication forces unnecessary PDVFS
directory cache loads resulting in degraded performance
After the initial setup of the environment,some customers reported slow
replications when using storage lifecycle policies (SLPs).SLP polices were
beingusedfor the replicationof the data betweenPureDisknodes.The PDVFS
directory cache was being reloaded many times in an optimized duplication
replication.Tofixthis issue,analternate approachwas implementedtoquery
the metabase directly and bypass the directory cache load.
■ Etrack 2162355:PDDOgenerates a large number of temporary files in/tmp
When PDDOis configured for a particular storage pool,but that storage pool
is not available due to error conditions (or it is turned off),a PureDisk register
attempt is performed.However,it is not cleaning up the files correctly after
it completes.In PureDisk,this error handling uses different logic that
resolves this issue.
■ Etrack 2143000 and Etrack 2161043:PureDisk 6.6.1 and PureDisk are
not backwards compatible because of missing getNBUPrimaryDSIDlogic on
target SPA
PureDiskreleases not backward-compatible insituations
where optimized duplication was used with a PureDisk source storage
pool and a PureDisk 6.6.1 target storage pool.With the fix,PureDisk
can performoptimized duplication to PureDisk
■ Etrack 2103458:PDDOconfigurable Web service call retries
The followingWebservice call parameters are nowconfigurable inthe pd.conf
■ The WS_TIMEOUT parameter allows you to increase or decrease the timeout
valuefor Webservicecalls madefromNetBackupmediaservers toPureDisk
storage units.The default value for this parameter is 120 (seconds).
■ TheWS_RETRYCOUNTparameter allows youtoconfiguretheamount of retries
that will be attemptedincase the Webservice fails or times out.The default
value for this parameter is 3 (retries).
■ Etrack 2125623:PDDOreplication sets encryption by default
Optimized duplicationencryptionis enabled by default inPDDO,but pd.conf
states it is disabled by default with OPTDUP_ENCRYPTION.To resolve this issue,
the parameter OPTDUP_ENCRYPTION is set nowto off in pd.conf.
5Symantec NetBackup PureDisk Release Readme
■ Etrack 2141136:Enable backup policy compression by default
When creating a newPureDisk backup policy,compression is nowenabled by
default.This change applies to all backup policy types.Policies created with
earlier releases are not changed.Policies created with PureDisk and
later releases nowenable compression by default.
■ Etrack 2163363:NetBackup optimized duplication job is failing with error
no-50 {Client Process Aborted}
Resolves an issue when a PDDOreplication job successfully finished very
quickly after being created,but NetBackup did not validate the job with a
proper job exit code.
■ Etrack 2093695:Jobs hang if the import PO-List process on the metabase
engine and data mining attempted to access the same data selection at the
same time
Fixes a problemfound when a PureDisk environment locked up and jobs were
not progressing.Symantec traced the problemto a data mining process that
attempted to access a data selection at the same time it accessed an import
process.The processes stopped and did not progress until one or the other
was stopped.As a result,all backup jobs eventually locked up as the number
of hung import processes reached the concurrency limit.
■ Etrack 2101259 and 2101261:Rerouting failure -"Could not process tlog
entries:invalid argument"
Fixes aproblemthat occurredwhenreroutingfailedinenvironments withtwo
or more content routers that tried to add one or more content routers.
■ Etrack2111731:Move'ChangeIPTables'fromcronto/etc/init.d/pdiptables
Moves'ChangeIPTables'fromcron to/etc/init.d/pdiptables.
ChangeIPTablesnolonger runs everyfiveminutes fromcron;ChangeIPTables
runs onlywhen"pdiptables change"is run.The"pdiptables start"process
loads the firewall rules.The"pdiptables stop"process removes the firewall
■ Etrack 2116235:Call to pdengine (PHP) in GetFilesAction.php picks up
configuration fromsystemif another version of PHP is installed and restore
Fixes a restore problemon Windows clients that also hosted PHP.When
Windows clients had PHP installed,backups completed successfully,but
restores failed with the following PHP errors:
[2010-Jul-05 15:53:39 EEST]Fatal error:require_once():Failed opening required
'bootstrap.php'(include_path='.;./includes;./pear') in C:\\Symantec\\NetBackup
PureDisk Agent\\tmp\\pd_jobstep_5109.php on line 15 [directories stream]
[2010-Jul-05 15:53:39 EEST]PHP Warning:PHP Startup:Unable to load dynamic library'C:\\Program
Symantec NetBackup PureDisk Release Readme
Files\\SWsoft\\Plesk\\Additional\\PleskPHP5\\ext\\php_gd2.dll'- The specified
procedure could not be found.
[2010-Jul-05 15:53:39 EEST] in Unknown on line 0 [directories stream]
[2010-Jul-05 15:53:39 EEST]PHP Warning:PHP Startup:Unable to load dynamic
library'C:\\Program Files\\SWsoft\\Plesk\\Additional\\PleskPHP5\\ext\\php_gettext.dll'- The
specified procedure could not be found.
[2010-Jul-05 15:53:39 EEST] in Unknown on line 0 [directories stream]
[2010-Jul-05 15:53:39 EEST]PHP Warning:Module'sockets'already loaded in
Unknown on line 0 [directories stream]
[2010-Jul-05 15:53:39 EEST] *** directories stream completed with exit value 255
*** Error Message ***
One or more child processes encountered a fatal error.
Please examine the previous error messages for more information.
*** End ***
■ Etrack 2119111:Report response XML received by VBR for Replication
Workflowdoes not contain file size/count information
Fixes a problemcaused when the report response XML received by Veritas
Backup Reporter (VBR) for the replication workflowdid not contain file size
and file count information
■ Etrack2123156:validateURLfunctionfails if FQDNcontains astanzabeginning
with a number causing the import of PO-List into the metabase engine to fail.
Fixes animport failure causedwhenthe FQDNspecifiedfailedthe validateURL
function because the FQDNcontained a stanza that began with a number.For
*** Error Message ***
:Invalid url type specified;Invalid value:
:*** End ***
■ Etrack 2123459:PureDisk administrative Web UI LDAP Server Configuration
fails with"Error:LDAP Server unreachable'if bindpasswd contains a'$'"
7Symantec NetBackup PureDisk Release Readme
Fixes an error that occurred during external directory service configuration.
When the user clicked Settings >Configuration>LDAPServer >External
LDAP,completedthe informationonthe LDAPServer Configurationtabs,and
thenclickedSave,theadministrativeWebUI failedwiththefollowingmessage:
LDAP Server unreachable
This occurred if the Microsoft Active Directory user account had a dollar sign
($) character in the password.
■ Etrack 2123486:topology_nodes.ini file is truncated/corrupted
Fixes an issue in environments with VCS when the topology_nodes.ini file
became truncated or corrupted.
■ Etrack 2123488:VCS PureDisk agent is not reporting the status of PureDisk
Resolves aproblemwheretheVCSPureDiskagent intermittentlyreportedthe
status of PureDisk incorrectly.
■ Etrack 2130698:Some PureDisk install files are owned by user"www-data"
with 775 file permission
Changes theownershipof somePureDiskinstall files to"root"from"www-data"
with the file permission set to 775.This resolves a potential security issue.
■ Etrack 2141146:PureDisk 6.6 administrative Web UI logon does not accept
passwords containing'$'character for external LDAP accounts residing in
Active Directory domains
Fixes the PureDisk 6.6 administrative Web UI logon page so that it accepts
passwords that containthedollar sign($) character for external LDAPaccounts
residing in Active Directory domains.
■ Etrack 2160714:Add configuration file options for non-fatal exports
An option to enable or disable non-fatal exports was added to the agent.conf
file that will allowexport jobs to continue if non-fatal errors occur.The
parameter nonfatalexporthas a default value of 0.This value means that the
export stops only if a fatal error occurs.
■ Etrack 2166739:Backups are failing with"Error:22:SortPOListFile:source
does not contain a valid POlist:the line @POformatVersion=1.0 is missing"
Adds additional fixes for load balancing a system,as follows:
- Windows 32-bit client includes an improved randomized retry mechanism
after HTTP response code 503
- MBFind web service fix for"SnapshotPOList.po does not contain a valid PO
Symantec NetBackup PureDisk Release Readme
■ Etrack 2141137:Enable MBGC extensive cleanup by default
With PureDisk,metabase garbage collection extensive cleanup is by
default enabled to accommodate an ever-growing metabase engine database.
■ Etrack 2150461:PureDisk 6.6.1 install/upgrade wizard screen includes two
extraneous options
The PureDisk6.6.1installationandupgrade screenprovides five boot options.
The boot screenprovides these options at everyboot,not onlyduringthe 6.6.1
upgradeprocess.Theappearanceandwordingof theseoptions confusedsome
users.To resolve the confusion,two options were removed fromthe screen,
and the text of the options was altered to clarify the options.With PureDisk,the following boot options appear on the installation and upgrade
■ PDLinux 6.6.1 (default)
Use the SMP kernel (for multiple CPUs) to boot the machine.
■ Failsafe -- PDLinux 6.6.1
Use SMP kernel's safe mode to boot the machine.This option is similar to
Windows'safe mode.
■ Floppy
Use a floppy disk to boot the machine.
■ Etrack 2169703:Container lost by running dcscan
Fixes aproblemwhere,insome cases,adatacontainer canbe lost if the support
tool dcscan is used while compaction is running.
■ Etrack 2181557:Unable to delete PureDisk client agents -"Failed LDAPdelete
of user"
This error occurredwhenattemptingtodelete anyPureDiskclient agent using
the PureDisk user interface.This issue is resolved in PureDisk
■ Etrack 2185567:DerefCR.php fails to finish and causes a storage leak
While executing a data removal policy,the DerefCR.php function is called
when some invalid fingerprints are found.In this case,PureDisk generates
the message “Fatal error,undefined function tempname” and exits.Though
the operation is not be executed in the content router,the path objects (POs)
were being updated as"dereferenced"in the metabase.This caused a storage
leak.With PureDisk,this problemhas been fixed.
■ Etrack 2196263:Lowdeduplication rates on PDDObackups after upgrading
from6.5.1.2 to 6.6.1
After upgrading to 6.6.1 from6.5.1.2,some systems experienced lower
deduplicationrates (around25-30%) withPDDObackups.Subsequent backups
also showthis lower deduplication rate as well.With PureDisk,this
problemhas been fixed through a number of code enhancements.
9Symantec NetBackup PureDisk Release Readme
■ Etrack 2193759:Rerouting failed with assertion error
Resolves a problemon systems with multiple content router nodes and a
PDDO-enabled environment where rerouting processes failed on the nodes
due to an assertion error.
■ Etrack 2050594:PDServer agent segmentation fault on MBE node of primary
Corrects a problemthat results in a server agent crash.The server agent
crashed when the following series of events occurred:
1 - The agent issued a'syncState'call to the workflowengine.
2 - A process was running on agent side.
3 - The process was not marked as running in workflowengine cache.
Whenthis problemoccurred,PureDiskwrotemessages similar tothefollowing
in the Agent.log file:
INFO (1075853632):JobStep''(id:-1,jobid:0):Has been retrieved for processor.
ERROR (1076382016):Application has crashed..caught signal 11
ERROR (1076382016):Dumping stack trace.
DUMP:/opt/pdag/../pdshared/lib/ [0x2b546e21304d]
DUMP:/opt/pdag/../pdopensource/lib/ [0x2b546e7d032f]
DUMP:/lib64/ [0x2b546f74ac00]
DUMP:/opt/pdag/bin/pdagent [0x41ad32]
DUMP:/opt/pdag/bin/pdagent [0x43dbb3]
DUMP:/opt/pdag/bin/pdagent [0x43e28c]
DUMP:/opt/pdag/bin/pdagent [0x43eb41]
DUMP:/opt/pdag/bin/pdagent [0x43980f]
DUMP:/opt/pdag/../pdopensource/lib/ [0x2b546e7de95b]
DUMP:/opt/pdag/../pdopensource/lib/ [0x2b546e7df687]
DUMP:/lib64/ [0x2b546f743143]
DUMP:/lib64/ [0x2b54702fe8cd]
■ Etrack 1966553 &Etrack 1977075:Replication jobs that wait for import
replication data selection step to complete cause performance issues
■ Increases thepo_count_thresholdparameter andthepo_size_threshold
parameter.This improvement decreased the number of remote metabase
import jobs that resided on the destination storage pool.As a result,
replication jobs launch only one import replication job on remote agents
and complete faster with less load on the storage pool.For
po_count_threshold,the default value is 200000.For po_size_threshold,
the default value is 200000000000 (200 GB).To access the Server Agent
configuration file fields,click as follows in the administrative Web UI and
then click the configuration value you want to change:
Symantec NetBackup PureDisk Release Readme
Settings >Configuration>ConfigurationFile Templates >PureDisk
■ ChangestheDropIndexThresholdparameter.PureDiskkeepsthemetabase's
database index on tables when the path object (PO) list is smaller than the
threshold specified in this parameter.By default,this value is 10000.To
access this threshold in the PureDisk Web UI,click as follows:
Settings >Configuration>ConfigurationFile Templates >PureDisk
Metabase Engine >Default Value Set for PureDiskMetabase Engine >
■ Etrack 2073054:Make naptime parameter configurable for replication
Changes thenaptimeparameter,whichdetermines theamount of timeallowed
to elapse between checks for the completion of the remote metabase import
job.The default value is 15 seconds.To access the server agent configuration
file fields,click as follows in the administrative Web UI and then click the
configuration value you want to change:
Settings >Configuration>ConfigurationFile Templates >PureDiskServer
Agent >Default Value Set for PureDiskServer Agent >replication
■ Etrack 2023023:PDDOoptimized duplications slowcompared to normal
The PDDOplug-in on the media server checks the storage pool authority for
job completionstatuses.Anewpd.conf parameter,OPT_DUP_WAIT_INTERVAL,
lets users specify the length of time the media server needs to wait between
status checks.The default value is 10 seconds.
Also with this fix,20 PDDOreplication jobs can run simultaneously.
■ Etrack2084537:PDDOreplicationgets queuedupbecauseof longimport times
on target storage pool
PureDisk uses a metabase web service to import image POs in remote
replicatedPDDOdata selections.Previous releases usedmetabase import jobs.
Import replicationdata selectionjobs are no longer createdonthe destination
storage pool when PDDOreplication is initiated fromthe NetBackup PDDO
■ Etrack 2069901:Create_dslastpddo rewrite dslast_pddo views as well as data
selection views
Changes the order of PDDOdslast_pddo viewon all PDDOdata selections.
This fix prevents PDDOoptimized duplication failures that generated a"no
more entries"error message.
■ Etrack 2179286:Requesting actual bandwidth usage be added to replication
job detail
11Symantec NetBackup PureDisk Release Readme
Thetransferratefor somereplicationjobdetailsreportsmight be inconsistent
with expectations because the short duration of a backup could cause a spike
in the data transfer rate before the throughput is stabilized.With PureDisk,the actual data transfer rate has been added to the job details to help
account for suchreportinginconsistencies.The followingis anexample of the
line added to the log:
[stream0]..Info:Network transfer rate:3.20 MB/sec
■ Etrack 2186502:Restore bandwidth not being throttled
Adds a newparameter to the restore wizard:Maximumallowed bandwidth
(KB/s) This value is set per stream,and it appears in the restore job log as
"*** Bandwidth limit set to XX KB/s via policy"
The following are the known issues associated with this patch:
■ Etrack 2294093:Rollback UI hangs while rolling back fromPureDisk
to PureDisk 6.6.1
When rolling back a PureDisk version fromrelease to release 6.6.1
using the storage pool configuration wizard (also known as the installer UI),
the UI hangs after approximately83%of the operationcompletes eventhough
the rollbackoperationactuallycompletes successfully.The followingrollback
progress messages appear before the UI hangs:
+ Stopping services on all nodes
+ Validating restore conditions
+ Restoring checkpoints
+ Restoring/opt on all nodes
Workaround:If the installer UI hangs for several minutes and the rollback
progress is 83%or more complete,close the installer UI because patch has
beenrolledbackat this point.Make sure that the UI hangs for several minutes
before you close the windowto allowany background operations to complete.
■ Etrack 2194531:Unable to upload large patch tar file (more than 250M) to
server by using the storage pool configuration wizard
When the size of the patch tar file is greater than 250M,the storage pool
configuration wizard user interface (UI) is not able to upload the file to the
storage pool authority (SPA) node for installation purposes.
Symantec NetBackup PureDisk Release Readme
Workaround:Symantec provides a script to allowa large file to be uploaded
for installation.To run this script and install the PureDisk tar patch
using the storage pool configuration wizard (also known as the installer UI),
performthe procedure"Applying preinstallation updates to the storage pool
configuration wizard"in the PREINSTALLATIONSTEPS section of this
README file.
■ Etrack 2220813:Statistics tab of PDDOjob details is blank onPureDisk
The Statistics tab of the Job Details windowdoes not contain data for PDDO
jobs that run on a PureDisk storage pool authority (SPA).
Workaround:Complete the following steps to allowviewing of data in the
Statistics tab:
■ Stop the PureDisk administrative Web UI:
/etc/init.d/puredisk stop pdgui
■ Run the following command to delete the
/opt/pdgui/tomcat/webapps/PureDisk folder:
/bin/rm -fr/opt/pdgui/tomcat/webapps/PureDisk
■ Start the PureDisk administrative Web UI:
/etc/init.d/puredisk start pdgui
■ Etrack 2221889:Percentage of deduplication is not shown properly for a
PureDisk6.6.1.2storage pool authority(SPA) if the plug-inis at PureDisk6.6.1
If you upgrade the storage pool authority (SPA) to PureDisk and then
leave the deduplication agent at an earlier software release,deduplication
rates are not displayed correctly in the PureDisk administrative Web UI.This
issue is applicable only if the deduplication agent runs on a NetBackup 6.5.x
media server.
Workaround:Upgrade the deduplication agent to the latest release,PureDisk"UPGRADINGDEDUPLICATIONAGENTS ONMEDIA SERVER
CLIENTS"in this README file for instructions.
■ Etrack 2225843:PDDOconfiguration and PDDObackups still succeed when
PDis in checkpoint mode
PureDisk does not suppress PDDOoperations in checkpoint mode.
Checkpoint mode is the state that a storage pool is in if you installed a patch,
createdacheckpoint,but didnot commit the patch.Typically,PureDiskshould
prevent PDDOoperations fromoccurringwhile astorage pool is incheckpoint
mode.For more information about checkpoint mode,see the Symantec
NetBackup PureDisk Administrator's Guide,Release 6.6.1.
13Symantec NetBackup PureDisk Release Readme
Workaround:If you roll back PureDisk,all changes and all backups
written to the storage pool while in checkpoint mode are lost.Symantec
strongly recommends that you do not performany production backups while
the storage pool is in checkpoint mode.When in checkpoint mode,Symantec
recommends that you restrict backup activity to only test backups and that
younotify appropriate NetBackupadministrators inyour organizationof this
situation.This recommendationapplies toall storagepools,bothPDDOstorage
pools and remote office storage pools.Performthe procedure"Applying
preinstallation updates to the storage pool configuration wizard"in the
PREINSTALLATIONSTEPSsectionof this READMEfile so that messages that
can caution you about using the checkpoint mode properly can be displayed.
■ Etrack 2233267:Optimized duplication fails between PDDOto PDDOwith
media write error (84) on AIX and Solaris 10 x86_64
This issueapplies onlytoenvironments that runNetBackup7.1withaPureDisk
6.6.1 or PureDisk deduplication agent on AIX and Solaris 10 x86_64
platforms.In these environments,optimized duplication fails with a media
write error of 84.
Workaround:Contact Technical Support to request a fix.
The following are resolved vulnerabilities in PureDisk
■ ET 2151815 - Invalid Transfer-Encoding header
Apache Tomcat 5.5.0 through 5.5.29,6.0.0 through 6.0.27,and 7.0.0 beta does
not properlyhandleaninvalidTransfer-Encodingheader,whichallows remote
attackers to cause a denial of service (application outage) or obtain sensitive
information via a crafted header that interferes with"recycling of a buffer."
(CVE-2010-2227:CVSS v2 Base Score:6.4 (MEDIUM).)
■ ET 2159667 - Improper userspace memory allocation for the 32-bit
compatibility layer
The compat_alloc_user_space functions in include/asm/compat.h files in
the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly
allocate the userspace memory required for the 32-bit compatibility layer,
which allows local users to gain privileges by leveraging the ability of the
compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt
support) tocontrol acertainlengthvalue,relatedtoa"stackpointer underflow"
issue,as exploited in the wild in September 2010.(CVE-2010-3081:CVSS v2
Base Score:7.2 (HIGH).)
The following vulnerabilities were resolved in PureDisk 6.6.1:
■ ET 2160855 - Denial of service (CPUand bandwidth consumption)
Symantec NetBackup PureDisk Release Readme
ntp_request.c in ntpd in NTP before 4.2.4p8,and 4.2.5,allows remote
attackers to cause a denial of service (CPUand bandwidth consumption) by
using MODE_PRIVATE to send a spoofed (1) request or (2) response packet that
triggers acontinuous exchange of MODE_PRIVATEerror responses betweentwo
NTP daemons.(CVE-2009-3563:CVSS v2 Base Score:6.4 (MEDIUM).)
■ ET 2145106 - Denial of service (daemon crash)
The apr_strmatch_precompile function in strmatch/apr_strmatch.c in
Apache APR-util before 1.3.5 allows remote attackers to cause a denial of
service (daemon crash) via crafted input involving (1) a.htaccess file used
with the Apache HTTP Server,(2) the SVNMasterURI directive in the
mod_dav_svn module in the Apache HTTP Server,(3) the mod_apreq2 module
for the Apache HTTP Server,or (4) an application that uses the libapreq2
library,whichtriggers a heap-basedbuffer underflow.(CVE-2009-0023:CVSS
v2 Base Score:4.3 (MEDIUM).)
■ ET 2165451 - TLS protocol does not properly associate renegotiation
handshakes with an existing connection
The TLS protocol,and the SSL protocol 3.0 and possibly earlier,as used in
Microsoft Internet InformationServices (IIS) 7.0,mod_sslinthe Apache HTTP
Server 2.2.14 and earlier,OpenSSL before 0.9.8l,GnuTLS 2.8.5 and earlier,
Mozilla Network Security Services (NSS) 3.12.4 and earlier,multiple Cisco
products,and other products,does not properly associate renegotiation
handshakes with an existing connection,which allows man-in-the-middle
attackers to insert data into HTTPS sessions,and possibly other types of
sessions protected by TLSor SSL,by sending anunauthenticated request that
is processed retroactively by a server in a post-renegotiation context,related
toa"plaintext injection"attack,akathe"Project Mogul"issue.(CVE-2009-3555:
CVSS v2 Base Score:5.8 (MEDIUM).)
■ ET 2165453 - Multiple buffer overflows in the CMUCyrus SASL library
Multiple buffer overflows in the CMUCyrus SASL library before 2.1.23 might
allowremote attackers to execute arbitrary code or cause a denial of service
(application crash) via strings that are used as input to the sasl_encode64
The following data loss issue is resolved in this Hotfix:
■ Etrack 2273601:Duplications complete successfully but the destination copy
is incomplete with EEB20 (RockSolid) installed.Unable to verify or
restore fromduplicate copy
15Symantec NetBackup PureDisk Release Readme
Images with a large number of fragments (>20) are duplicated successfully,
but not all files are imported on the target PureDisk metabase engine (MBE)
database.This situationresults inverificationandrestore issues onthe second
This issue affects only users with NetBackup 6.5.X using the PDDOplug-in
fromPureDisk6.6.0.3+EEB20or the plug-infromPureDisk6.6.1.1.This issue
does not affect users with NetBackup 7.0.X (which uses an integrated plug-in
(Media Server Deduplication Pool or MSDP) for deduplication) or users of the
NetBackup 5000 Appliance.
This Hotfix resolves the verification and restore issues for the affected
This section describes the preinstallation steps for applying this Hotfix.
You can choose between two methods to install this Hotfix:using commands as
described in this README file or using the storage pool configuration wizard.
■ Use the commands as described in this README file.
■ Use the storage pool configuration wizard.For information about installing
this patch using the storage pool configuration wizard,refer to the following
■ See KNOWNISSUES- Etrack2194531inthis READMEfile for information
about the patch tar file.
■ See KNOWNISSUES- Etrack2225843inthis READMEfile for information
about using the checkpoint mode.
■ Perform"Applyingpreinstallationupdates tothestoragepool configuration
wizard"which appears later in this section.
Performthis procedureonlyif youplantousethestoragepool configuration
wizard to apply this Hotfix.After completing these steps,you can upload
a large patch tar file for installation and observe newmessages about
checkpoint mode.See KNOWNISSUES - Etrack 2194531 in this README
file for information about the patch tar file.See KNOWNISSUES - Etrack
2225843 in this README file for information about the checkpoint mode.
■ See"Chapter 3 - Applying patches"of the Symantec NetBackup PureDisk
Administrator's Guide,Release 6.6.1,starting with"Uploading a patch."
Symantec NetBackup PureDisk Release Readme
Note:Makesurethat youreadthe final installationmessagesinthe storage
pool configurationwizard.Themessages tell youtonext install thePureDisk kernel upgrade.To install the kernel upgrade,complete step 8
Downloading and extracting the patch
1 Use scp to copy the tar file,NB_PDE_6.6.1.2_NNNNNN.tar to the/root
directory of the PureDisk node that hosts the storage pool authority (SPA).
2 Log on as root to the node that hosts the storage pool authority.
3 Type the following command to verify the integrity of the Hotfix:
This commandcomputes themd5checksumof theHotfix.Themd5checksum
of the Hotfix must match'f8b9950c9530f676baea73efb7954824'.
If youobtainadifferent checksum,theHotfixwas corruptedduringdownload.
Try to download the Hotfix again.
4 Type the following command to extract the README file:
tar -C/-xf/root/NB_PDE_6.6.1.2_NNNNNN.tar./NB_PDE_6.6.1.2.README
Applying preinstallation updates to the storage pool configuration wizard
1 Extract the file and the Installer.tgz file from
NB_PDE_6.6.1.2.tar.For example,froma UNIX system:
tar -xvf NB_PDE_6.6.1.2.tar./opt/pdinstall/
tar -xvf NB_PDE_6.6.1.2.tar./opt/pdinstall/Installer.tgz
2 Use a secure copy,such as scp,to copy the file and
the Installer.tgz file to the same folder on the SPA node,for example the
/tmp folder.
3 Log in to the SPA node as root.
17Symantec NetBackup PureDisk Release Readme
4 Run the script on the SPA node.For example,if you copied the files to the
/tmp folder:
5 Complete the installationprocess withthe storage pool configurationwizard.
For more information about this process,see"Chapter 3 - Applying patches"
of the Symantec NetBackup PureDisk Administrator's Guide,Release 6.6.1,
starting with"Uploading a patch."
This section describes howto install the software.
Installing the patch
1 Logintothe PureDiskadministrative WebUI andmake sure that noPureDisk
jobs are currently running or are scheduled to be run.
■ Select"Monitor >Jobs".
■ In the right pane,select the jobs you want to terminate.
■ Select"Stopjobgracefully"or"Stopjobimmediately".
You might lose data if you select"Stopjobimmediately".
■ Confirmthe termination in the pop-up windowthat appears.
Refer to the topic"Terminating a job that is running"inthe PureDiskBackup
Operator Guide,Release 6.6.1,or in the online Help for more information
about stopping PureDisk jobs.
2 (Conditional) If you have/Storage partitions that are mounted on an NFS
share,add an entry for each partition to the/etc/fstab file.
Note:NFS is supported in a PureDisk environment only with specific
limitations and requirements.See the topic"Limitations for PureDisk 6.6
with NFS"in the PureDisk Getting Started Guide,Release 6.6.1,or contact
technical support for more information about NFS support in PureDisk.
3 Log out fromthe PureDisk administrative Web UI.
Symantec NetBackup PureDisk Release Readme
4 (Conditional) Freeze the PureDisk service groups for the clustered PureDisk
Performthis step if the storage pool is installed with Veritas Cluster Server
(VCS) software.
For each active node,you have groups such as pd_group1,pd_group2,and
so on.Log onto the Storage Pool Authority (SPA) node and runthe following
command for each of these groups:
/opt/VRTS/bin/hagrp -freeze pd_group1
Where pd_group1 indicates the group you are freezing.
For information about howto freeze and unfreeze clustered storage pools,
see the Symantec NetBackup PureDisk Storage Pool Installation Guide.
5 Type the following command to unpack the Hotfix software:
tar -C/-xf/root/NB_PDE_6.6.1.2_NNNNNN.tar./opt
6 Type the following command to run and install the Hotfix:
If the topology.ini file is encrypted,the software prompts you for the
password to decrypt this file.
The Hotfix automatically pushes the software to all nodes inthe storage pool
and to all clients.
Note:The Veritas Cluster Server (VCS) software might detect some faults
during the upgrade process.If any upgrade actions generate a VCS fault,use
the Cluster Manager Java Console to clear the fault and probe that resource
group before you unfreeze the cluster.
At the end of a successful installation,the software prompts you to encrypt
the topology.ini file.
When the upgrade script completes successfully,the script also unfreezes
the PureDisk service groups for the clustered PureDisk server.
7 (Conditional) Again,freeze the PureDisk service groups for the clustered
PureDisk server.
See Step 4 for instructions about freezing PureDisk service groups.
19Symantec NetBackup PureDisk Release Readme
8 (Conditional) If you are upgrading fromPureDisk 6.6.1 to PureDisk,
log ontoeachnode (active andpassive) andrunthe following script toinstall
the kernel upgrade:
/opt/pdinstall/ --upgrade
Note:Do not performthis step if you are upgrading fromPureDisk to
If the kernel upgrade fails because some services do not stop,wait until the
services stop and rerun the kernel upgrade script.
9 (Conditional) After the kernel upgrade finishes,reboot all of the nodes.
Note:Do not performthis step if you are upgrading fromPureDisk to
Note:Allowthe upgradejobs that were startedinstep6tofinish,successfully
or not,before you reboot the nodes.Symantec suggests that you reboot all
of the nodes (active and passive) at the same time.
Note:After the reboot,the clustered service groups that were frozen in Step
7 are unfrozen.
10 (Conditional) If youare performingthis upgrade as part of addinga newnode
to a cluster,restart VCS by performing the following steps:
1.Kill had and hashadow:
#pkill had;pkill hashadow
2.Wait for 10 seconds and then run the following command:
For information about adding a newnode to a cluster,see the PureDisk
Administrator's Guide.
11 (Conditional) To reconnect with the Veritas Enterprise Administrator (VEA)
in a clustered environment,run the following commands:
/etc/init.d/vxpal.StorageAgent start
12 Monitor the client agent update jobs.
Take the following actions to monitor the client agent upgrade jobs:
Symantec NetBackup PureDisk Release Readme
■ Clear the browser's cache and temporary Internet files.
■ Start the administrative Web UI.
■ Click Monitor >Jobs.
■ Set the “Viewjobs by” dropdown to “Policytypes”.
■ Select the “Agent Update” workflowunder “MiscellaneousWorkflows”.
If one of the upgrade jobs fails,PureDisk deactivates those client agents.
Followthe steps belowto activate and upgrade these agents:
■ Start the administrative Web UI.
■ Click"Manage >Agents".
■ In the left pane,select the deactivated agent you want to reactivate.To
activate all agents in the storage pool,select the storage pool.
■ In the right pane,select “Activate Agent(s)”.
■ A newagent update job is scheduled for those agents not upgraded yet.
■ Monitor these upgrade jobs again.Start themover if they fail or timeout.
13 (Conditional) Upgrade the deduplication agent software on media server
SERVER CLIENTS”,which follows.
This section describes howto upgrade deduplication agents on media server
Note:Symantecencouragesyoutoupgradeyour deduplicationagentsat this time.
The PureDisk6.6.1.2release includes enhancements for improvedreplicationand
for concurrent backup and data removal jobs.See the ENHANCEMENTS section
of this README file for an overviewof these improvements.
The specific upgrade procedure that you should performdepends on the release
of software and the platformof your media server.Select the procedure that is
appropriate for your environment:
■ Upgrading NetBackup 6.5.x media servers (all platforms) and NetBackup 7.0
or 7.0.1 media servers (AIX platforms and HP-UX platforms only)
21Symantec NetBackup PureDisk Release Readme
Media servers on these platforms use the PDDOagent for deduplication.To
obtainthe PureDisk6.6.1.2enhancements,performthe procedure"Upgrading
NetBackup6.5.x media servers (all platforms) or NetBackup7.0 or 7.0.1 media
servers (AIX platforms and HP-UX platforms only)."
Note:The upgrade removes the old PDDOagent software automatically.For
more information about howto install the PDDOagent,see the Symantec
NetBackup PureDisk Deduplication Option Guide.
■ Upgrading NetBackup7.0or 7.0.1media servers (Solaris,Linux,andWindows
Media servers on these platforms use an integrated plug-in (Media Server
DeduplicationPool or MSDP) for deduplication.Upgrades are not yet available
for the integrated plug-in on these platforms.You can install the PureDisk upgrade at this time using the procedure"Upgrading NetBackup 6.5.x
media servers (all platforms) or NetBackup 7.0 or 7.0.1 media servers (AIX
platforms and HP-UX platforms only),"however,you will not obtain the
PureDisk enhancements with this upgrade.To obtain the PureDisk enhancements on these platforms,revisit this article later.Updates
will be made to this article when the plug-in is available for download.Please
subscribe to this article by clicking on the"Subscribe via email"link on this
page to receive notification when this article is updated with plug-in upgrade
Upgrading NetBackup 6.5.x media servers (all platforms) or NetBackup 7.0 or 7.0.1
media servers (AIX platforms and HP-UX platforms only)
1 Make sure that the storage pool software for the PDDOclients has been
2 Refresh the PureDisk landing page.
The landing page can be found on:
For <your-puredisk-spa>,type the hostname or the IP address of your
PureDisk storage pool authority.
Be aware that this Hotfix includes both the PureDisk 6.6 base release agents
andrevisedagents for Linux,Solaris,andWindows clients.Therevisedagents
include updates for PDDOagent installation only.A later step in this
procedureinstructs youtodownloadtherevisedagents if youwant toupgrade
the PDDOagent on a client.
3 Log on to each PDDOmedia server client.
Symantec NetBackup PureDisk Release Readme
4 Fromthe PDDOmediaserver client,downloadthe newPDDOagent software.
Thelandingpageincludes morethanonesoftwareversionof thePDDOagent,
so take care to download the most recent agent.
5 (Conditional) Freeze the PureDisk service groups for the clustered PDDO
6 Stop all NetBackup services on the NetBackup media server.
■ On Windows systems,run the following command to stop NetBackup
c:\program files\veritas\netbackup\bin\bpdown.exe
■ OnLinuxor Solaris systems,runthefollowingcommandtostopNetBackup
7 Install the agent software that is included with this Hotfix.
■ On Windows systems,double-click the PureDisk agent icon to start the
Windows Installation Wizard.
■ On Linux or Solaris systems,you can use either the attended or the
unattendedinstallationmethod.The installer prompts youtoconfirmthe
upgrade.For example,type the followingcommandtoupgrade the Solaris
10 agent:
8 (Conditional) Unfreeze the PureDisk service groups for the clustered PDDO
9 Start all the NetBackup services on the NetBackup media server.
■ On Windows systems,run the following command to stop NetBackup
c:\program files\veritas\netbackup\bin\bpstart.exe
■ OnLinuxor Solaris systems,runthefollowingcommandtostopNetBackup
23Symantec NetBackup PureDisk Release Readme
Symantec NetBackup PureDisk Release Readme