Disaster recovery orchestration for the Enterprise (formerly Veeam Availability Orchestrator)
Post Reply
Markus.K1985
Veeam Vanguard
Posts: 103
Liked: 28 times
Joined: Dec 08, 2014 2:30 pm
Full Name: Markus Kraus
Contact:

Failed to Add Veeam B&R Server

Post by Markus.K1985 »

Hello,

I try to add my Veeam B&R Server 9.5 U3 Server to the DR Site. But I only get a "Wrong credentials" Error. I have connected from DR Server to this Veeam B&R Server via the Console successful.

Are only AD Accounts Supported for the Connection?

Best regards,
Markus
Alec King
VP, Product Management
Posts: 1445
Liked: 362 times
Joined: Jan 01, 2006 1:01 am
Contact:

Re: Failed to Add Veeam B&R Server

Post by Alec King »

Hello Markus,

Correct, an Active Directory account is required to deploy the VAO Agent to B&R.
VAO and B&R server should be in the same domain or have domain trust in place.
Alec King
Vice President, Product Management
Veeam Software
Markus.K1985
Veeam Vanguard
Posts: 103
Liked: 28 times
Joined: Dec 08, 2014 2:30 pm
Full Name: Markus Kraus
Contact:

Re: Failed to Add Veeam B&R Server

Post by Markus.K1985 »

Thanks Alec.

The huge dependency to AD in a DR solution is limiting the use cases in my opinion...
Alec King
VP, Product Management
Posts: 1445
Liked: 362 times
Joined: Jan 01, 2006 1:01 am
Contact:

Re: Failed to Add Veeam B&R Server

Post by Alec King »

Hi Markus,

I don't really see use case where VAO customer does not have AD.
Also I don't see use case where VAO customer has lost their entire AD! Even after production site disaster, the DR site can still have DCs running.

Can you elaborate on the use cases you are talking about?

Thanks!
Alec King
Vice President, Product Management
Veeam Software
Mark
Service Provider
Posts: 12
Liked: 1 time
Joined: Sep 17, 2012 5:20 am
Full Name: Mark Cummings
Contact:

Re: Failed to Add Veeam B&R Server

Post by Mark »

I thought best practise was to not have your Veeam infrastructure on the domain to protect all servers from compromise?
Berniebgf
Service Provider
Posts: 96
Liked: 9 times
Joined: Sep 01, 2010 11:36 pm
Full Name: Bernard Tyers
Contact:

Re: Failed to Add Veeam B&R Server

Post by Berniebgf »

Hello all,

Same "Solution Design" issue here, we have left our Veeam Management, Proxies, Repository servers isolated from the main networks and domain to protect our backups and recover-ability as much as possible. Deployed VAO onto the domain (no choice), and now cannot add our Veeam Management Server??

We're now considering creating a "Management Domain" on which we can place / isolate all of our VMware, Veeam infrastructure. However its a bit of effort to change!

Bernie.
Alec King
VP, Product Management
Posts: 1445
Liked: 362 times
Joined: Jan 01, 2006 1:01 am
Contact:

Re: Failed to Add Veeam B&R Server

Post by Alec King »

We currently have no plans to support non-AD deployment for VAO - so a 'Management Domain' would be the answer. Thanks!
tmue
Influencer
Posts: 13
Liked: 3 times
Joined: Jan 14, 2019 3:03 pm
Full Name: Thomas Muehlboeck
Contact:

Re: Failed to Add Veeam B&R Server

Post by tmue »

That is a big issue for our planned deployments. The customer will not join their existing veeam backupservers to any domain. Why is there an option in the orchestrator deployment to add an non domain backup server when it is not working? I have the same error as the thread starter.
It is not about that there is no AD in DR site or no DCs after a disaster, no. It is the isolation of backups and backup copies that our customer is not willing to give up, what i can totally unterstand. Is there simply no way of deploying the VAO Agent on a non domain B&R server or is there maybe a manual procedure / will there be a procedure? Maybe I did not read everything, but I did not recognize that a domain join is necessary for EVERY Veeam server to use Orchestrator DR.
haslund
VeeaMVP
Posts: 839
Liked: 149 times
Joined: Feb 16, 2012 7:35 am
Full Name: Rasmus Haslund
Location: Denmark
Contact:

Re: Failed to Add Veeam B&R Server

Post by haslund »

The is no requirement to domain-join any backup repositories so you can easily meet the customer requirements you have mentioned. Worst-case create a new domain and migrate the backup server into the domain and you are done.
Rasmus Haslund | Twitter: @haslund | Blog: https://rasmushaslund.com
tmue
Influencer
Posts: 13
Liked: 3 times
Joined: Jan 14, 2019 3:03 pm
Full Name: Thomas Muehlboeck
Contact:

Re: Failed to Add Veeam B&R Server

Post by tmue »

Yeah, that's what i thought. But I have the same problem as the thread starter. I cannot install the VAO Agent on my non-domain B&R Servers. I always get the error "Wrong Credentials" too. And like it says in the previous posts in this thread, the VAO and B&R Server have to be in the same domain for agent deployment. Or is there any workaround?
Alec King
VP, Product Management
Posts: 1445
Liked: 362 times
Joined: Jan 01, 2006 1:01 am
Contact:

Re: Failed to Add Veeam B&R Server

Post by Alec King »

Hi Thomas,

It's not required that VAO server and Veeam Backup server(s) are in the same domain - only that a domain trust is in place.

Please note that our Veeam Best Practice documentation is being updated to reflect that keeping Veeam Backup server in a workgroup is not more secure (it provides some "security through obscurity", that's all). The documented best practice going forward will be that Veeam Backup server should be in a domain, however that can be a 'resource' domain, separate from the everyday user domain, containing critical infrastructure accounts and servers, and of course highly-secured.
andrie
Service Provider
Posts: 29
Liked: 8 times
Joined: Nov 20, 2015 12:37 pm
Full Name: Andy
Contact:

Re: Failed to Add Veeam B&R Server

Post by andrie »

Hi all,

it looks like nothing has changed. Most other Veeam products don't require a domain joined backup server, only the VAO.
Are there any plans to change that? If not, consider this as a feature request.
Vitaliy S.
VP, Product Management
Posts: 27055
Liked: 2710 times
Joined: Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov
Contact:

Re: Failed to Add Veeam B&R Server

Post by Vitaliy S. »

Hi Andy,

Yes, currently, a domain-joined backup server is a requirement for VAO. Thanks for your FR!
KLinville
Influencer
Posts: 12
Liked: 5 times
Joined: Nov 16, 2015 3:01 pm
Full Name: Kristopher Linville
Location: Evansville, IN
Contact:

Re: Failed to Add Veeam B&R Server

Post by KLinville »

We've run into this issue doing a customer deployment of DR Orchestrator 4.0.
Alec King
VP, Product Management
Posts: 1445
Liked: 362 times
Joined: Jan 01, 2006 1:01 am
Contact:

Re: Failed to Add Veeam B&R Server

Post by Alec King »

We are currently developing the feature for adding non-domain VBR server to Orchestrator. Although I cannot promise exactly which delivery vehicle will be used, we will ship this capability in a future update.
Please keep the feedback and feature requests coming!
Alec King
Vice President, Product Management
Veeam Software
Mildur
Product Manager
Posts: 8549
Liked: 2223 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: Failed to Add Veeam B&R Server

Post by Mildur » 3 people like this post

The feature is now available with the new Release V 5.0. From the guide, it looks like you don‘t need a domain anymore.

VDRO - Requirements
Note: If you connect a standalone Veeam Backup & Replication server to the Orchestrator server, it must be joined to either the same domain, a trusted domain or a workgroup.
Product Management Analyst @ Veeam Software
Alec King
VP, Product Management
Posts: 1445
Liked: 362 times
Joined: Jan 01, 2006 1:01 am
Contact:

Re: Failed to Add Veeam B&R Server

Post by Alec King » 2 people like this post

Just to confirm, we did ship this feature - deploying VDRO agent to a non-domain VBR - in VDRO version 5 last week :)
Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests