Troubleshooting NetWorker authorisation errors

This article provides a list of possible causes and resolutions for error messages that are related to NetWorker server authorisation issues.

Insufficient permissions

This message appears when you try to perform NetWorker operations, and the username that you used to log in to the NMC server is a member of many operating system groups.

When a user belongs to many groups, the total number of characters in the group names can exceed the buffer size that NetWorker uses to store the group names. NetWorker excludes characters and group names that exceed the buffer size.

To resolve this issue, edit the Usergroup resource to which the user belongs , and then specify the dn for the user in the External Roles field.

Token has expired

This message appears when the Console GUI is open and the token expires for the authenticated user.

To resolve this issue:

  1. Click OK. The Enter Credentials window appears.
  2. In the Enter Credentials window, specify the password of the user, and then click OK. The NetWorker Authentication Service validates the user credentials and if the validation succeeds, generates a new token for the session.

Unable to connect to server: Unable to set user privileges based on user token for SYSTEM: security token has expired

This message appears when the NetWorker Administration window is open and the token expires for the authenticated user.

To resolve this issue:

  1. Click OK. The NetWorker Administration window closes.
  2. In the Console GUI, select the NetWorker server, and then select Launch NetWorker Administration. The Enter Credentials window appears.
  3. In the Enter Credentials window, specify the password of the user, and then click OK. The NetWorker Authentication Service validates the user credentials and if the validation succeeds, generates a new token for the session.

Unable to query resource database: security token has expired

This message appears when you run a CLI tool as an authenticated user but the token for the user has expired.

To resolve this issue, run the nsrlogin command to generate a new token for the user.