Backup of some VMs within a job Failing with user/pass error

[MadanM]

Issue : Backup of some VMs within a job is Failing with error ""can not compelte loging with incorrect username and password error"

Service Account "svc_veeam" is Domain Admin & has Administrator access on Vpshere as well. Backups were running fine before , now we are facing issue mentioned above.
Note that Vcenter is Linux Appliance.

Actions Taken :
1. We have verified access on AD & Vsphere
2. we can add the Vcentre on Veeam console with the username and password without any issue
3. svc_veeam can also access web GUI of Vcentre
4. Restarted Vcenter server but no luck .


Log Snippet

Code: Select all

=======================
[09.05.2016 14:31:54] <16> Error Failed to login to "ndbs-vma-1.extendtec.com.au" by SOAP, port 443, user "EXTENDTEC\svc_veeam", proxy srv: port:0 at Veeam.Backup.ViSoap.CServiceSession.Create(CServiceConnSpec connSpec) 
[09.05.2016 14:31:54] <16> Error at Veeam.Backup.ViSoap.CSoapService..ctor(String host, CServiceConnSpec serviceConnSpec, RemoteCertificateValidationCallback validationCallback) 
[09.05.2016 14:31:54] <16> Error at Veeam.Backup.ViSoap.CSoapConnection..ctor(Guid dbHostId, String host, Int32 port, String user, String password, Boolean useProxy, String proxyHost, Int32 proxyPort, RemoteCertificateValidationCallback validationCallback) 
[09.05.2016 14:31:54] <16> Error at Veeam.Backup.ViSoap.CHierarchy.GetConnection() 
[09.05.2016 14:31:54] <16> Error at Veeam.Backup.ViSoap.CHierarchy.ReloadVm(CVm vm) 
[09.05.2016 14:31:54] <16> Error at Veeam.Backup.Core.CViVmTask.CheckAndReload() 
[09.05.2016 14:31:54] <16> Error at Veeam.Backup.Core.CViBackupJobPerformer.ExecuteTask(IVmBackupTask task, CViJobSource jobSource, CBackupJobTarget jobTarget) 
[09.05.2016 14:31:54] <16> Error Cannot complete login due to an incorrect user name or password. at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall) 
[09.05.2016 14:31:54] <16> Error at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters) 
[09.05.2016 14:31:54] <16> Error at VimApi.VimService.Login(ManagedObjectReference _this, String userName, String password, String locale) 
[09.05.2016 14:31:54] <16> Error at Veeam.Backup.ViSoap.CServiceSession.Create(CServiceConnSpec connSpec) 
[09.05.2016 14:31:54] <16> Info Error: Cannot complete login due to an incorrect user name or password.

Veeam can not get access to the vCenter with EXTENDTEC\svc_veeam user.
=============================================================

Raised case with Veeam. Case # 01793214 , Support is suggesting to its issue with Single Sign-on. Not too sure if it was even required and besides backups are working for some job & not for others. If i keep on retrying , it completes most of the vms eventually. but not all. However this workaround is not acceptable as backup window is taking too long. Support also suggested it could be resource issue on Vcenter , however i don't see any spikes for CPU, RAM & disk I/O on Vsphere for that VM.


Any help /suggestion would be appreciated.

Captured Job Image on Location below for reference
https://drive.google.com/open?id=0BzFSJ ... HRPeTBLUEU


Thanks
Madan

[Dima P.]

Hi Madan,

Google advised to:

- Check that svc_veeam account has access to domain controller.
- Make sure that firewall running on the domain controller is configured to allow TCP/389 for incoming connections
- Check that Domain Alias is configured with the domain NetBIOS name (short name)

[albertwt]

Hi Madan,

What's your Veeam version and the VCenter version ?

I also face the same thing and Veeam support mentioned that it is always due to the account is locked, but that was not possible because the account I was using before is DOMAIN\Administrator account.
have you grant the permission of the svc_veeam account using this guide: http://veeampdf.s3.amazonaws.com/guide/ ... ssions.pdf ?

after upgrading the VCenter server version into 5.5 Update 3d and using Veeam Backup 9.0 Update 1, the problem has been finally resolved.

Hope that helps.

[chrtho1]

Hi,
You don't mention os version, what I've encountered is that with win 2012 (and later) the account used *must* be named "administrator" (either local or domain). It's not enough to have administrator permissions. At least with some functions, like Truncating sql logs etc.

Regards Chris.

[foggy]

It's not enough to have administrator permissions. At least with some functions, like Truncating sql logs etc.

This is a requirement for application-aware backup in networkless mode, over VIX, where UAC should be disabled on the VM and built-in administrator account should be used.