We run a DCL script in our SYS$BATCH queue called VMS_BACKUP_SCHEDULER which emulates the backup schedule that is running in Data Protector. After some initialization it resubmits itself successfully to the batch queue with the following command:
Code: Select all
$ SUBMIT/QUEUE=SYS$BATCH/AFTER="TOMORROW00:00:10"/NOPRINTER/LOG=$1$DGA322: -
[VEEAM_VMS_BACKUPS.LOGS]'DATE'_'THISNODE'_VMS_BACKUP_SCHEDULER.LOG -
$1$DGA322:[VEEAM_VMS_BACKUPS]VMS_BACKUP_SCHEDULER.COM
main SCHEDULER script has done with the system echoing the successful status of the job submittal.
Code: Select all
$ DISPLAY "SUBMITTING WEEKLY_SATSS1_INCR_BACKUP ON ''DATE'" -
SUBMITTING WEEKLY_SATSS1_INCR_BACKUP ON 19-APR-2023 00:00:04.47
$ SUBMIT/QUEUE=SYS$BATCH/AFTER="+3"/NOPRINTER/LOG=$1$DGA322:[VEEAM_VMS_BACKUPS.LOGS]'DATE'_'THISNODE'_WEEKLY_INCR_BACKUP.LOG $1$DGA322:[VEEAM_VMS_BACKUPS]WEEKLY_SATSS1_INCR_BACKUP.COM
Job WEEKLY_SATSS1_INCR_BACKUP (queue SATSS1$BATCH, entry 402) holding until 19-APR-2023 03:00
Looking for some kind of error I ran the following command:
Code: Select all
ANALYZE/AUDIT/FULL/NOINTERACTIVE SYS$MANAGER:SECURITY.AUDIT$JOURNAL
Code: Select all
Security Audit Analysis Utility
Security alarm (SECURITY) and security audit (SECURITY) on SATSS1, system id: 31
Auditable event: Batch process login failure
Event time: 19-APR-2023 03:00:04.59
PID: 20D4F2D0
Process name: BATCH 402
Username: SYSTEM
Process owner: [SYSTEM]
Image name: SATSS1SDKAO:[SYSO.SYSCOMMON.][SYSEXE]LOGINOUT.EXE
Posix UID: -2
Posix GID: -2 (%XFFFFFFFE)
Status: %RMS-E-CRE, ACP file create failed
This is what makes no sense and has me completely stymied. Both the Scheduling script job and the backup script job submitted from the scheduler are both running as SYSTEM processes. At least that has always been my understanding of how things work. Obviously I’m missing something because the login is failing but I don’t understand why. The thing that is confusing me is the “%RMS-E-CRE, ACP file create failure” statement in the Audit Log. What is it trying to create that it can’t. Is it complaining because it is unable to create the LOG file? If so why doesn't it say that? I mean seriously, a security person looking through the log would like to know something like that I would think. Other than the Audit Log failure record shown above there is nothing to indicate the process ever existed. The error message “%RMS-E-CRE, ACP file create failure” is one step above useless! This has always been one of my complaints about VMS.
I have looked in all my books and all the VMS manuals I can find. I’ve searched online rephrasing the query as many different ways that I can think of and I can come up with no explanation of exactly what this is telling me with any relevance to my current issue. I thought maybe a password failure and when I checked I did find that the SYSTEM password had expired so I set the new one but that has had no effect. I’ve included the SYSTEM account info and file directory permissions info below as I thought maybe it was telling me it couldn’t open the log file due to permissions or something but you can see that as a SYSTEM level process it should have all the access it needs.
Code: Select all
UAF> sho system
Username: SYSTEM Owner: SYSTEM MANAGER #System
Account: LMCO UIC: [1,4] ([SYSTEM])
CLI: DCL Tables: DCLTABLES
Default: SYS$SYSROOT:[SYSMGR]
LGICMD:
Flags: PwdMix
Primary days: Mon Tue Wed Thu Fri
Secondary days: Sat Sun
No access restrictions
Expiration: (none) Pwdminimum: 14 Login Fails: 0
Pwdlifetime: 60 00:00 Pwdchange: 17-APR-2023 17:08 5-MAR-1999 12:02
Last Login: 17-APR-2023 17:08 (interactive), 19-APR-2023 14:25 (non-interactive)
Maxjobs: 0 Fillm: 5000 Bytlm: 250000
Maxacctjobs: 0 Shrfillm: 0 Pbytlm: 0
Maxdetach: 0 BIOlm: 2500 3Tquota: 8192
Prclm: 36372 DIOlm: 8000 WSdef: 8192
Prio: 4 AST1m: 4096 WSquo: 64000
Queprio: 0 TQElm: 200 WSextent: 32768
CPU: (none) Enqlm: 2000 Pgflquo: 7000000
Authorized Privileges:
ACNT ALLSPOOL ALTPRI AUDIT BUGCHK BYPASS
CMEXEC CMKRNL DIAGNOSE DOWNGRADE EXQUOTA GROUP
GRPNAM GRPPRV IMPERSONATE IMPORT LOG_IO MOUNT
NETMBX OPER PFNMAP PHY_IO PRMCEB PRMGBL
PRMMBX PSWAPM READALL SECURITY SETPRV SHARE
SHMEM SYSGBL SYSLCK SYSNAM SYSPRV TMPMBX
UPGRADE VOLPRO WORLD
Default Privileges:
ACNT ALLSPOOL ALTPRI AUDIT BUGCHK BYPASS
CMEXEC CMKRNL DIAGNOSE DOWNGRADE EXQUOTA GROUP
GRPNAM GRPPRV IMPERSONATE IMPORT LOG_IO MOUNT
NETMBX OPER PFNMAP PHY_IO PRMCEB PRMGBL
PRMMBX PSWAPM READALL SECURITY SETPRV SHARE
SHMEM SYSGBL SYSLCK SYSNAM SYSPRV TMPMBX
UPGRADE VOLPRO WORLD
Identifier
SATSS1> dir/full WEEKLY_SATSS1_INCR_BACKUP.COM;
Directory $1$DGA322:[000000.VEEAM_VMS_BACKUPS]
WEEKLY _SATSS1_INCR_BACKUP.COM;5 File ID: (3820,313,0)
Size: 6/200 Owner: [SYSTEM]
Created: 13-APR-2023 17:47:36.67
Revised: 15-APR-2023 00:16:31.74 (4)
Expires: 16-APR-2023 00:16:31.74
Backup: 14-APR-2023 11:11:59.47
Effective: <None specified>
Recording: <None specified>
Accessed: <None specified>
Attributes: <None specified>
Modified: <None specified>
Linkcount: 1
File organization: Sequential
Shelved state: Online
Caching attribute: Writethrough
File attributes: Allocation: 200, Extend: 0, Global buffer count: 0
No version limit
Record format: Variable length, maximum 255 bytes, longest 85 bytes
Record attributes: Carriage return carriage control
RMS attributes: None
Journaling enabled: None
File protection: System:RWED, Owner:RWED, Group:RE, World:
Access Cntrl List: None
Client attributes: None
Total of 1 file, 6/200 blocks.
SATSS1> sho que sys$batch/full
Batch queue SATSS1$BATCH, idle, on SATSS1::
/BASE_PRIORITY=3 /CPUMAXIMUM=INFINITE /JOB_LIMIT=24 /OWNER=[SYSTEM]
/PROTECTION=(S:M,O:D,G:R,W:S) /WSQUOTA=1000
Entry Jobname Username Status
----- ------ -------- ------
401 VMS_BACKUP_SCHEDULER
SYSTEM Holding until 20-APR-2023 00:00:00
Submitted 19-APR-2023 00:00:04.47 /KEEP
/LOG=$1$DGA322:[VEEAM_VMS_BACKUPS.LOGS]19-APR-2023_SATSS1_VMS_BACKUP_SC
/NOPRINT /PRIORITY=3
File: _$1$DGA322:[VEEAM_VMS_BACKUPS]VMS_BACKUP_SCHEDULER.COM;10
403 DAILY_WS SYSTEM Holding until 20-APR-2023 00:00:00
Submitted 19-APR-2023 00:00:04.66 /KEEP
/L°G=SATSSISDKAO:[SYS0.][sYsMGR]DAILY_Ws.LOG; /PARAM=("DAILY_WS",
"00:00","SYS$BATCH","8") /NOPRINT /PRIORITY=3
File: _$1$DGA300:[VMS$COMMON.MGRSW.OPSJOBS]SUBMIT_BATCH_30B.COM;123
There are some typos I missed from the scanning/OCR process. Some $ signs in the device names were OCR'd as S's and I didn't notice until I had posted the text.