NWRecovery Tool backup fails on Admin Server with mongo error

[#1]

Article Number

000039989

Applies To

RSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: Security Analytics Server
RSA Version/Condition: 11.6.X
Platform: CentOS
O/S Version: 7

Issue

While taking backup on Admin server using NWRecovery Tool, the backup fails with mongo errors as below.

#nw-recovery-tool --export --dump-dir /var/netwitness/backup/ --category AdminServer
 

[2021-08-17T07:47:02+00:00] <19780> (INFO) Processing component: mongo...
[2021-08-17T07:47:02+00:00] <19780> (INFO) Executing: before-export [1/2]...
[2021-08-17T07:47:02+00:00] <19780> (INFO) Executing: before-export [2/2]...
2021-08-17T07:47:02.495+0000 WARNING: --sslAllowInvalidCertificates and --sslAllowInvalidHostnames are deprecated, please use --tlsInsecure instead
2021-08-17T07:47:03.830+0000 Failed: error creating intents to dump: error creating intents for database config: error getting collections for database `config`: (Unauthorized) not authorized on config to execute command { listCollections: 1, filter: {}, lsid: { id: UUID("653f4d0d-fc5f-4bf0-be62-04e2f8defa63") }, $db: "config" }
[2021-08-17T07:47:03+00:00] <19780> (INFO) mongo: [failed]
[2021-08-17T07:47:03+00:00] <19780> (ERROR) Failed to execute before-export step [2/2]!

Cause

This issue is due to security authorization enabled in mongo configuration.

Resolution

1. Please login to Admin Server putty to follow the below steps.
2. Edit the /etc/mongod.conf file to change the authorization option from enabled to disabled as below.
    

   security:
    authorization: disabled

3. Then run NWRecovery tool backup command again to complete successfully.
4. Then revert the changes to /etc/mongod.conf file to default as below.
    

   security:
    authorization: enabled