Since SP7 it appears that when attempting to do a restore from a snapshot that has been vaulted to secondary storage, that the restore job is not using the NDMP credentials specified in the NAS client, but is picking up the user account that OCUM is using to monitor the cluster. We use a local NetApp account "ocum" for this purpose, and I can see the restore jobs failing as they attempt NDMP with that user account. We have never specified that account anywhere in CV.
[Data ONTAP reported error code (13115), message: 'Cannot get password for user "ocum".' (request: '<ndmp-password-generate><user-name>ocum</user-name></ndmp-password-generate>').]
Does anyone else run SP7, using OCUM storage policy, and seeing this issue?
In order to generate NDMP password, ONTAP requires that the user account has SSH enabled. I enabled SSH for the "ocum" user, and restores are working again.