NWRecovery Tool backup fails on Admin Server with mongo error
Issue
While taking backup on Admin server using NWRecovery Tool, the backup fails with mongo errors as below.#nw-recovery-tool --export --dump-dir /var/netwitness/backup/ --category AdminServer
[2021-08-17T07:47:02+00:00] <19780> (INFO) Processing component: mongo...
[2021-08-17T07:47:02+00:00] <19780> (INFO) Executing: before-export [1/2]...
[2021-08-17T07:47:02+00:00] <19780> (INFO) Executing: before-export [2/2]...
2021-08-17T07:47:02.495+0000 WARNING: --sslAllowInvalidCertificates and --sslAllowInvalidHostnames are deprecated, please use --tlsInsecure instead
2021-08-17T07:47:03.830+0000 Failed: error creating intents to dump: error creating intents for database config: error getting collections for database `config`: (Unauthorized) not authorized on config to execute command { listCollections: 1, filter: {}, lsid: { id: UUID("653f4d0d-fc5f-4bf0-be62-04e2f8defa63") }, $db: "config" }
[2021-08-17T07:47:03+00:00] <19780> (INFO) mongo: [failed]
[2021-08-17T07:47:03+00:00] <19780> (ERROR) Failed to execute before-export step [2/2]!
[2021-08-17T07:47:02+00:00] <19780> (INFO) Executing: before-export [1/2]...
[2021-08-17T07:47:02+00:00] <19780> (INFO) Executing: before-export [2/2]...
2021-08-17T07:47:02.495+0000 WARNING: --sslAllowInvalidCertificates and --sslAllowInvalidHostnames are deprecated, please use --tlsInsecure instead
2021-08-17T07:47:03.830+0000 Failed: error creating intents to dump: error creating intents for database config: error getting collections for database `config`: (Unauthorized) not authorized on config to execute command { listCollections: 1, filter: {}, lsid: { id: UUID("653f4d0d-fc5f-4bf0-be62-04e2f8defa63") }, $db: "config" }
[2021-08-17T07:47:03+00:00] <19780> (INFO) mongo: [failed]
[2021-08-17T07:47:03+00:00] <19780> (ERROR) Failed to execute before-export step [2/2]!
Cause
This issue is due to security authorization enabled in mongo configuration.
Resolution
- Please login to Admin Server putty to follow the below steps.
- Edit the /etc/mongod.conf file to change the authorization option from enabled to disabled as below.
security:
authorization: disabled - Then run NWRecovery tool backup command again to complete successfully.
- Then revert the changes to /etc/mongod.conf file to default as below.
security:
authorization: enabled
Product Details
RSA Product Set: RSA NetWitness PlatformRSA Product/Service Type: Security Analytics Server
RSA Version/Condition: 11.6.X
Platform: CentOS
O/S Version: 7
Summary
This document outlines the procedure to complete backup on Admin Server.
Approval Reviewer Queue
RSA NetWitness Suite Approval Queue