IBM Support

IT26213: CATALOG FILE METADATA FAILS WHEN USING NON-DEFAULT LOCAL ADMINISTRATOR

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as documentation error.

Error description

  • When configuring 'Catalog File Metadata' in the Backup view of
    IBM Spectrum Protect Plus and specify a non-default local
    administrator as 'Guest OS Username', the file catalog will
    fail.
    A non-default local administrator is any user that has been
    created in the guest OS and has been given the administrators
    role.
    
    This is caused by the registry key
    'LocalAccountTokenFilterPolicy' in
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
    not being set or set to 0.
    If LocalAccountTokenFilterPolicy is set to 0 or not set, then
    any local non-default administrator will not be usable with
    WinRM, which is the protocol IBM Spectrum Protect Plus uses in
    order to install the Windows agent for file catalog, send
    commands to this agent, and get results from it.
    
    Note: this only applies to Windows guest VMs.
    
    The Documentation needs to be enhanced to document the
    requirement to have this registry key correctly set.
    
    IBM Spectrum Protect Versions Affected:
    IBM Spectrum Protect Plus 10.1.x
    
    Customer/L2 Diagnostics:
    When backup is run and a non-default administrator user is used
    to catalog file metadata, following is seen in the job log:
    
    ERROR,...,2,Failed to connect to the remote host 10.0.20.46.
    e=java.lang.Exception: WinRMAuthorizationError
    ERROR,...,2,File catalog Discovery failed for Vm igstsm20046 -
    w2k16Discovery of files within the server igstsm20046 - w2k16
    failed reason : Failed to connect to the remote host 10.0.20.46.
    e=java.lang.Exception: WinRMAuthorizationError .Confirm that
    hypervisor guest tools are installed and network configuration
    has been completed.
    ...
    ERROR,...,Catalog file discovery results failed.
    e=...xsb.commons.XSBException: Server igstsm20046 - w2k16s file
    discovery result unavailable for cataloging.
    
    Initial Impact: Low
    
    Additional Keywords: SPP, SPplus, TS001277205
    

Local fix

  • Set the LocalAccountTokenFilterPolicy Registry key in the
    Windows guest that is being backed up with 'Catalog File
    Metadata' to 1
    If this key does not exist, navigate to
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Po
    licies\System] and add a DWord Registry key with name
    LocalAccountTokenFilterPolicy and value 1.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * IBM Spectrum Protect Plus levels 10.1.1.*                    *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See ERROR DESCRIPTION                                        *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Apply fixing level when available. This problem is currently *
    * projected to be fixed in level 10.1.2                        *
    * Note that this is subject to change at the discretion of     *
    * IBM                                                          *
    ****************************************************************
    

Problem conclusion

  • The documentation now includes this known item with Windows
    2016. As stated above, users, when seeing File Catalog failures
    as described, should review the registry setting
    LocalAccountTokenFilterPolicy and set it to 1.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT26213

  • Reported component name

    SP PLUS

  • Reported component ID

    5737SPLUS

  • Reported release

    A11

  • Status

    CLOSED DOC

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2018-09-12

  • Closed date

    2018-09-18

  • Last modified date

    2018-09-18

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSNQFQ","label":"IBM Spectrum Protect Plus"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"A11","Line of Business":{"code":"LOB26","label":"Storage"}}]

Document Information

Modified date:
30 January 2024