Symptoms

The NetWorker VMware Protection integration is configured with the vProxy Appliance. The environment networking is configured with IPv6, and it is not dual-stacked. The vProxy registration fails with "Possible wrong vProxy userid or password, invalid credentials. Received an HTTP code: 401, libCURL message:". The NetWorker Server adhoc logs show: 160859:nsrvproxy_mgmt: vProxy management job started with CLI: 'C:\Program Files\EMC NetWorker\nsr\bin\nsrvproxy_mgmt.exe register -s [NETWORKER_SERVER_NAME] -v [VCENTER_SERVER_NAME] -h [VPROXY_NAME] -p 9090 -j 13 -k 0 ' 161332:nsrvproxy_mgmt: Starting 'amp62-nw-nvp' vProxy registration to '[NETWORKER_SERVER_NAME]' NetWorker server. 161327:nsrvproxy_mgmt: Failed to register vProxy '[VPROXY_NAME]': Cannot get vProxy '[VPROXY_NAME]' state: Possible wrong vProxy userid or password, invalid credentials. Received an HTTP code: 401, libCURL message: "", url: "https://[VPROXY_NAME]:9090/api/v1/VproxyEngines" 161319:nsrvproxy_mgmt: vProxy management job completed with errors. The vProxy /opt/emc/vproxy/runtime/logs/vrapid/vrapid-engine.log shows: YYYY-MM-DD HH:MM:SS NOTICE: Request #1496: Rejecting unauthorized request from '[NSR_LINK-LOCAL_IPV6_ADDRESS]%eth0' for '/api/v1/VproxyEngines': YYYY-MM-DD HH:MM:SS ERROR: AdminEngine: sending response error: code=401, errText=Only requests from '[NETWORKER_SERVER_NAME]' are allowed. YYYY-MM-DD HH:MM:SS TRACE: Request #1496: Responded to client.

Cause

The NetWorker Server registration request is referencing the Link-Local IPv6 address instead of the IPv6 address. The vProxy appliance does not recognize the Link-Local IPv6 address and rejects the registration request.

Resolution

Workaround:The NetWorker Server Link-Local IPv6 address can be temporarily removed to allow the vProxy registration. Once the registration is complete, the Link-Local IPv6 address can be restored by rebooting the NetWorker server.1. Redeploy the vProxy in the environment.2. Backup the vrapid.service configuration file: cp -p usr/lib/systemd/system/vrapidd.service usr/lib/systemd/system/vrapid.service_original 3. Edit the vrapid.service configuration file: vi /usr/lib/systemd/system/vrapid.service 4. Add the command-line argument "--disable-access-control" to the line starting with "ExecStart=". ExecStart=/opt/emc/vproxy/bin/vrapid --disable-access-control 5. Reload the unit configuration file into systemd: systemctl daemon-reload 6. Restart the vrapid service engine: systemctl restart vrapid.service 7. On the NetWorker Server, open on a command prompt window in administrator mode.8. Determine the Link-local IPv6 Address on the NetWorker Server: ipconfig /all 9. Remove the Link-local IPv6 Address with the netsh command-line utility: netsh interface ipv6 delete address interface=[INTERFACE_#] address=[NSR_LINK-LOCAL_IPV6_ADDRESS] 10. Register the vProxy using the NetWorker Management Console.11. Once the registration is complete, the NetWorker Server can be rebooted to restore the Link-local IPv6 Address.

Support Cases