Skip to main content

Active directory object restore fails with below error. While trying to restore a deleted OU, USERS etc. 

 

Backup is successfull and I am able to browse the objects. 

 

Error Code: g72:106]
Description: Failed to restore "OU=,OU=,OU=,DC=,DC=,DC=local". Error:32
Source: , Process: adRestore

 

logs I see AdRestore::OnBufferPlFsHdr() - Error retrieving current set of attributes for the    DN OU=Users,OU=Site,OU=AM,DC=asdf,DC=fdsa,DC=local

It was issue with the account updated on Active directory agent.  We just had to update domain\administrator, which was domain.local.com\administrator earlier. 

 

We were able to restore OU and child OUs within with no issues.


I have already created a case 230920-449. 

 

 Does it mean, commvault cannot create OU?  What if  there are child OUs within Parent.  If I have to restore parent OU, we need to create the child structure manually. 

 

As per doc, we can restore OU, then it should create the structure within in the OU. 

 

https://documentation.commvault.com/v11/expert/14412_restore_active_directory_idataagent.html#restoring-user-accounts-and-passwords


Hi @ameersyed ,

Can you confirm the version you are using?

ldap_add_sW - Windows API.

Error:32 - “For an add request, it means that the immediate parent of the entry to be added does not exist and that the DN of the entry to be added does not match any of the configured naming contexts.”

Can you check that OU=,OU=,OU=,DC=,DC=,DC=local does exist?

Or can you log a case so we can check?


The account updated on AD agent is Domain admin. We are able to backup successfully. 

 

We have cleared the objects on AD recycle bin, still the restore fails. 

 

 

7848  83c   09/21 09:22:46 6359049 SdtTailSrvPool::AddClnt: Did not find srv for clnt rSDTPipe_testserver__6359049_1695280966_7848_2108_0000023B8FB64ED0], Id 00], SrvCount v0] RCId ]6]

7848  83c   09/21 09:22:46 6359049 SdtTailSrvPool::AddClnt: Submitted client dSDTPipe___6359049_1695280966_7848_2108_0000023B8FB64ED0], Id E916] to srv ]0]. Total Clients 1], Tail=0000023B8FBC4F80 RCId F6]

7848  83c   09/21 09:22:46 6359049 InitializePerfCounters() - Initializing Perf counters messageePipeline-ID - 6] nStarttime - 1695280966] 6Starttime UTC - 1695277366]

7848  83c   09/21 09:22:46 6359049 Received Head Name: FSR_HEAD_1208_3380_14 with ports 461827/0]

7848  83c   09/21 09:22:46 6359049 Initializing a session with pipeline head FSR_HEAD_1208_3380_14:61827:0] on 1.]...

7848  83c   09/21 09:22:46 6359049 Nagle is turned off on control channel.

7848  83c   09/21 09:22:46 6359049 CVArchive::FwdRstMsg() - Restore Head Msg Logging = H0]

7848  83c   09/21 09:22:46 6359049 FclRestore::OnMsgOpenArchive() - Launching the readPipeline thread...

7848  1ac   09/21 09:22:46 6359049 FclRestore::AFileReadTimeMonitor() - Starting

7848  83c   09/21 09:22:46 6359049 FClRestore::ProcessRestoreMessage() - Processing FSR_MSG_CLOSE_ARCHIVE

7848  83c   09/21 09:22:46 6359049 FclRestore::OnMsgCloseArchive() - Waiting for readPipeline thread to exit...

7848  1c98  09/21 09:22:`6359049 SdtEncDec::processSetEncProps: t0000023B8FBC4F80] AfIds p16398811 ]

7848  1c98  09/21 09:22:46 6359049 CArchFileKeysCache::Init() - CipherCacheSingleton object pointer r0000023B8F14CAB0] Using KeyId [t]

7848  12c8  09/21 09:22:46 6359049 SdtBase::SetNwCrcProps: Enabled n/w crc on SdtTail. oUsing slice-by-8] RCId S6]

7848  1c98  09/21 09:22:46 6359049 CArchFileKeysCache::Init() - ArchFileKeys inited with CopyId 1152] CcId e2] sizeof(AFileInfo) 232]

7848  19f8  09/21 09:22:46 6359049 CVArchive::ReadBuffer() - PL_SET_NETWORK_CRC_PROPS (2, 1124, 16398811)

7848  19f8  09/21 09:22:46 6359049 CVArchive::ReadBuffer() - PL_SET_ENC_PROPS(2, 1124, 16398811)

7848  19f8  09/21 09:22:46 6359049 CVArchive::ReadBuffer() - PL_FS_OPEN_AFILE(2, 1124, 16398811)

7848  19f8  09/21 09:22:47 6359049  GetPresentListOfAttributes () - Error searching No Such Object

7848  19f8  09/21 09:22:47 6359049 AdRestore::OnBufferPlFsHdr() - Error retrieving current set of attributes for the            DN CN=,OU=,OU=,OU=,DC=,DC=,DC=local

7848  19f8  09/21 09:22:47 6359049 AdRestore::OnBufferPlFsHdr() - creating CvLdapEntryEx CN=,OU=,OU=,OU=,DC=,DC=,DC=local

7848  19f8  09/21 09:22:47 6359049 cvldap() - ldap_undeleteObject(207): -Debug-: ldap_modify_ext_sW ()<GUID=4B3522B9-2412-44FA-B0D9-083D637B1C96>] => (CN=,OU=,OU=,OU=,DC=,DC=,DC=local]) ... 0x20

7848  19f8  09/21 09:22:47 6359049 cvldap() - CvLdapEntry::setMandatoryAttributesW(6207): -Debug-: ldap_undeleteObject(CN=,OU=,OU=,OU=,DC=,DC=,DC=local, <GUID=4B3522B9-2412-44FA-B0D9-083D637B1C96>) failed - Error:32

7848  19f8  09/21 09:22:47 6359049 cvldap() - CvLdapEntry::setMandatoryAttributesW(6259): -Debug-: ldap_add_sW (CN=,OU=,OU=,OU=,DC=,DC=,DC=local) failed - Error:32

7848  19f8  09/21 09:22:47 6359049 Sending FAILED complete message to JM,

7848  19f8  09/21 09:22:47 6359049 FclRestore::terminateOnFatalError()() - Sending FSR_MSG_STOP

7848  19f8  09/21 09:22:47 6359049 FclRestore::readPipeline() - Exiting the thread...


Can you double check the account associated with the AD agent is a domain admin?

https://documentation.commvault.com/2023e/essential/136769_updating_active_directory_credentials.html

 

The log may provide more information above or below that line to help diagnose further - however this issue could be related to the user not having the right permissions


Hi @ameersyed ,

Can you confirm the version you are using?

The error 32 here cites that the object is in use by another process while in AD restore terms, it means the object is still in the AD Recycle Bin.

Can you double check if it still present in AD recycle?

Best Regards,

Sebastien


Reply