Troubleshooting Tip: Database backup Failed Event after migrating from CentOS to FortiOS

[pdipen]

Description

This article describes the behavior when the FortiNAC server migrates from CentOS to FortiOS and has the 'System Backup Failed: Backup script exit code = 1" and/or "Database Backup Failed' events.

Scope

FortiNAC, FortiOS.

Solution

The FTP/SSH remote backup server is failing to back up the database in the FortiNAC. Before the change, it is advised to complete VM snapshots of all FortiNAC appliances.

From GUI:

1. Log in to the FortiNAC GUI.
2. Navigate to System -> Settings -> System Management -> Remote Backup Configurations.
3. Remove the SSH and/or FTP Remote Backup configuration and save.
4. Reconfigure the SSH and/or FTP Remote Backup configuration and save.
5. Navigate to System -> Settings -> System Management -> Database Backup/Restore.
6. Select Run Now.
7. Navigate to Logs -> Events & Alarms -> Events and validate the Database Backup Success event.

From CLI:

1. Login to the FortiNAC CLI.
2. Go to the Shell mode:
   
   

execute enter-shell

3. Navigate to the /bsc/campusMgr/bin/ Directory and run:
   
   vi .backup_config

   Resend all of this out as below:
   
   

   # BACK_UP_HOST=remote backup location
   # FTP_USER_ID=userid
   # BACK_UP_PATH=backup path
   # FTP_USER_PASSWORD=password should be here
   # BACK_UP_HOST_SSH=""
   # password should be here
   # BACK_UP_HOST_SSH=""

4. Reconfigure the SSH/FTP backup settings from the GUI and re-run the Database backup.

5. The .backup_config file should look like this:

For the FTP setup:

BACK_UP_HOST=remote backup location
FTP_USER_ID=userid
BACK_UP_PATH=backup path
FTP_USER_PASSWORD=password should be here
# BACK_UP_HOST_SSH=""
# password should be here
# BACK_UP_HOST_SSH=""

For SSH setup:

BACK_UP_HOST=remote backup location
# FTP_USER_ID=userid
# BACK_UP_PATH=backup path
# FTP_USER_PASSWORD=password should be here
BACK_UP_HOST_SSH=""
password should be here
BACK_UP_HOST_SSH=""

If the issue persists, enable the debug mode from the FortiNAC CLI:

execute enter-shell

nacdebug -name SchedulerInterface true

Follow the same procedure again and download the grab-log-snapshot from the FortiNAC server. Open a support ticket and attach the logs: 

Technical Tip: How to get a debug log report from FortiNAC-CA or FortiNAC-Manager

Disable the debug with:

nacdebug -name SchedulerInterface false