Media Server Verification Points

Verify the UNIX Media Server

For UNIX media servers, follow the same procedures as those listed in Media Server Verification Points.

Verify the Windows Media Server

Check the machine certificate comes from the root Authentication broker, which is found on the UNIX master server (unix_master).

If the certificate is missing, run the following commands to correct the problem:

• bpnbat -addmachine on the root Authentication broker (in this example, unix_master)
• bpnbat -loginmachine (in this example, win_media)

For example:

Verify that a Media Server is Permitted to Perform Authorization Lookups

Make sure the media server is allowed to perform authorization checks by running bpnbaz -listgroups -CredFile. For example:

If the media server is not allowed to perform authorization checks, run bpnbaz -allowauthorization on the master server for the media server name in question.

Unable to Load Library Message

Verifying the Windows media server and verifying that the media server is permitted to perform authorization checks indirectly informs us that the VxSS client libraries for both At and Az are properly installed. If either of these procedures fail with messages pertaining to "unable to load libraries," check to make certain the Authentication and Authorization client libraries are installed. See the VERITAS Security Services Installation Guide on the VxSS installation CD.

Verify Authentication Domains

You may also verify that the Authentication domains are correct by viewing the Access Control host properties for this media server, or by using regedit directly on the media server in the following location:

Cross Platform Authentication Domains

Take extra care in mixed environments to ensure that the appropriate domain types point to the correct authentication brokers. In the example below, note that the WINDOWS domains point to win_media.min.com.