Symptoms

Starting avinstaller.pl from command line shows the error message: nve_server: # avinstaller.pl --start Avistart process: INFO: Starting AVI service... INFO: Succeed to start AVI service. nve_server: # systemctl status avi ● avi.service - Avamar Installation Manager Loaded: loaded (/usr/lib/systemd/system/avi.service; enabled; vendor preset: disabled) Active: inactive (dead) since Wed 2024-10-16 13:45:47 EEST; 3s ago Process: 27416 ExecStop=/usr/local/avamar/bin/avinstaller.pl --stop --force (code=exited, status=0/SUCCESS) Process: 26644 ExecStart=/usr/local/avamar/bin/avinstaller.pl --daemon (code=exited, status=0/SUCCESS) Main PID: 27286 (code=exited, status=0/SUCCESS) Oct 16 13:45:37 nve_server avinstaller.pl[26644]: 13:45:37,590 |-INFO in c.q.l.core.rolling.helper.TimeBasedArchiveRemover - Multiple periods, i.e. 32 periods, seem to have elapsed. This is exp...cation start. Oct 16 13:45:38 nve_server avinstaller.pl[26644]: org.eclipse.jetty.ssl.password : Wed Oct 16 13:45:38 EEST 2024 com.avamar.avinstaller.util.LifecycleListener contextInitialized Oct 16 13:45:38 nve_server avinstaller.pl[26644]: INFO: Context is being initialized... Oct 16 13:45:38 nve_server avinstaller.pl[26644]: Wed Oct 16 13:45:38 EEST 2024 com.avamar.avinstaller.util.AppConfig conformResources Oct 16 13:45:38 nve_server avinstaller.pl[26644]: INFO: > Oct 16 13:45:40 nve_server sudo[27361]: pam_unix(sudo:auth): authentication failure; logname= uid=1000 euid=0 tty= ruser=avi rhost= user=avi Oct 16 13:45:45 nve_server sudo[27361]: avi : 3 incorrect password attempts ; TTY=unknown ; PWD=/space/home/avi ; USER=root ; COMMAND=/usr/local/avamar/lib/avi/avi_secure.sh -sysinfo Oct 16 13:45:46 nve_server systemd[1]: Started Avamar Installation Manager. Oct 16 13:45:47 nve_server avinstaller.pl[27416]: Avistart process: Oct 16 13:45:47 nve_server avinstaller.pl[27416]: INFO: AVI is already stopped

Cause

One important context of the issue:avi user password is reset at avinstaller.pl runtime (within aviutils.pm). So every time we try to start avinstaller.pl, a new password is generated for avi, and this password is right. The above means issue is not with avi password itself, but must be with root/admin password, the avi user config (it must be part of admin group), or the lockbox that is used by avi service. In summary, the Issue is generally either within: The avi password (OS account) does not match with the lockbox.avi lockbox has some issue.Some other issue (like an unexpected system language) The output of the below commands should orientate where the issue is.groups avi/usr/local/avamar/lib/avi/avi_secure.sh -chagesudo -u avi sudo -A /usr/local/avamar/lib/avi/avi_secure.sh -chagechage -l rootchage -l adminchage -l avicat /etc/sysconfig/language | grep -v '#' | grep . In this article's issue: nve_server:# sudo -u avi sudo -A /usr/local/avamar/lib/avi/avi_secure.sh -chage Sorry, try again. Sorry, try again. sudo: 3 incorrect password attempts We can see that the issue is around avi_secure script trying to access the lockbox.Then we can dig into the lockbox status: /usr/local/avamar/bin/avlockbox.sh -r avi The expected output is no output. And if you encounter an error, then that is the cause of this issue.Example: nve_server:# /usr/local/avamar/bin/avlockbox.sh -r avi Mon Oct 21 09:57:54 2024 Retrieve Error Mon Oct 21 09:57:54 2024 vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv An error has occured: The requested Lockbox entry could not be found. ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Resolution

Do verify if the lockbox file exists: /usr/local/avamar/bin/avlockbox.sh -t If avi lockbox does not exist, or if avi lockbox exists but yet we cannot see where the issue issue, we can always re-create it with no side effect: # Retrieve current keystore passphrase (Which will be either changeit for NVEs before 19.4, or changeme) /usr/local/avamar/bin/avlockbox.sh -r keystore_passphrase # reset avlockbox: /usr/local/avamar/bin/avlockbox.sh -f -i # create keystore_passphrase entry with the previous password: /usr/local/avamar/bin/avlockbox.sh -s keystore_passphrase

Support Cases