When checking MCNA system operate logs, we found someone have operation on MCNA at the day system backup failed. A file was replaced and the files type was changed.
Although content is the same except ‘clientLogExpireDay’, but using diff command, we could see all lines different.
Using file command, we found files type is different.
From symptom above,we can image that the administrtor want to change ‘clientLogExpireDay’, so he download file ‘logparam.conf’, edit it using windows notepad and then upload it. This process lead to file type changed and system can not read this file. This file contend essential paameters especially ftp server password. So the backup process can not read ftp password and lead to galax backup failure.