Skip to main content

Can no longer connect to Openfiler NAS to store backups

Thread needs solution

We have an Openfiler NAS unit which we normally save the vmProtect backups to. This was very tricky to setup, but it has been working for awhile until yesterday. Now for the life of me I cannot get vmprotect 9 to connect to it. I did delete the locations in the recovery point screen to try to add it again. I authenticate and the shared folder backups appears under the openfiler's server name. Once I click on the folder called "backups" I get an error.

All backup jobs are erroring out as well. I can't figure this out and I am using the "local" openfiler account "vmprotect" to log in because even though Openfiler is domain joined, we can't use any domain accounts (I think because of NT LAN Manager level 5).

I get this log trying to re-add this openfiler location to the recovery points screen:
Code: 27066484 (0x019D0074)
Line: 836463A653DED97A
Message: An error has occurred while executing command 'file_browse_async'.

============
Code: 27066470 (0x019D0066)
Line: AC471D05F22A8C34
Message: Access to location 'avfs:/smb?//deathstar/backups/' is denied. Unknown user name or invalid password.

============
Code: 27787268 (0x01A80004)
Line: 10F02767C7826ADA
Message: Failed to get the directories list.

============
Code: 262164 (0x00040014)
Line: 4D7F75FCDE07D57A
IsReturnCode: 1
Message: Access is denied.

============
Code: 9568343 (0x00920057)
Line: 4D7F75FCDE07D675
Message: Failed to get files.

============
Code: 262164 (0x00040014)
Line: 4D7F75FCDE07D57A
IsReturnCode: 1
Message: Access is denied.

============
Code: 9568342 (0x00920056)
Line: 4D7F75FCDE07D69F
Message: Failed to add the items to the directory.

============
Code: 262164 (0x00040014)
Line: 72BD8F1A411BE0E2
Message: Access to the file is denied.

============
Code: 5832753 (0x00590031)
Line: 72BD8F1A411BE2F8
hostName: deathstar
Message: Failed to mount the SMB share.

0 Users found this helpful

Ok, this is more of an Openfiler issue than Acronis, because everything can connect to Openfiler that is newer Windows style domain security, etc...

But the fix if anyone is using openfiler is that ON OPENFILER edit the smb.conf and change the line under the global section that says:
obey pam restrictions = yes

to

obey pam restrictions = no

I figured to try this by running a tail -f /var/log/messages on openfiler box while having vmprotect attempt to connect to the share:
daemon.err<27>: Oct 26 10:09:05 deathstar nss_wins[15634]: smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User vmprotect!

the user vmprotect in this case is local I believe (another IT guy here set it up) because Acronis (and many other *nix distro's) do not play well with our SMB and NT level security which is required in our line of work, and exposed if incorrectly set during 3rd party quarterly vulnerability scans.

frestogaslorastaswastavewroviwroclolacorashibushurutraciwrubrishabenichikucrijorejenufrilomuwrigaslowrikejawrachosleratiswurelaseriprouobrunoviswosuthitribrepakotritopislivadrauibretisetewrapenuwrapi
Posts: 22
Comments: 3800

Hi KJSTech,

Thank you for sharing the solution that you have found. I would like to add that we're planning to upgrade the virtual appliance Linux OS to 3.11 version where there is a better handling of various security schemes, so it should be working better with most NAS devices. We're testing it currently in our QA lab and plan to perform this upgrade in the nearest update for vmProtect 9.

Thank you.
--
Best regards,
Vasily
Acronis vmProtect Program Manager