Forum Discussion

Nayabsk's avatar
Nayabsk
Level 6
11 years ago
Solved

Root SSH access to NBU Appliance

Hi All,

I have admin access to my NBU appliance but not the root access , Could anybody help me with how to enable ROOT SSH access ?

I have tried searching WEB for it but i found no proper procedure to do .

Thanks,

Nayab

  • Hello,

     

    That is not supported. You have to login as admin, then if you want to elevate you need to use support > maintenance.

     

    If you're running 2.6.0.x you'll need to override the IPS too.

10 Replies

  • Hello,

     

    That is not supported. You have to login as admin, then if you want to elevate you need to use support > maintenance.

     

    If you're running 2.6.0.x you'll need to override the IPS too.

  • Hey Riaan,

    Thanks so much for the quick reply , So you mean to say SSH is not supported on NBU Appliane only have to use MAINTENANCE mode if want to perform any ROOT tasks ? Am i right to say that.

    Override the IPS to access as ADMIN ? How it can be done. 

    Now actually what i need to do is to CONFIGURE KMS Encryption on my NBU Appliance , I already have procedure to do it is there any things i need to consider is the KMS for Appliance differes from the legacy NBU configuration ?

     

    Thanks, 

    Nayab

     

  • Connecting the appliance with SSH is supported for the admin user, or any CLI user you create.

     

    You can check in the NetBackup Appliance Security guide for instructions to override IPS to gain access to CLI (please note this appliance only to versions 7.6.0.x/2.6.0.x).

  • Thanks , I will check the security guide 

    So how about the root access to NBU appliance as i understand certain tasks can be performed only through ROOT access ? , Is admin access would be sufficient ?

  • Ok I understood MAINTENANCE is the root access to the Appliance ...... And also Maintenance means do i need to have downtime ?

  • maintenance is a user not a function. You do some maintenance on the machine like cleaning up /tmp periodically by using the user maintenance but again it is not a function. 

  • You may run following from the Maintainance command line.

    /opt/Symantec/scspagent/IPS/sisipsoverride.sh

    ftp://ftp.symantec.com/public/english_us_canada/products/symantec_critical_system_protection/5.0/manuals/5.2/scsppolov.pdf

    After that you will be able to elevate to root.

     

    But for root ssh access you will need to move /root/.bash_profile and  /root/.bashrc somewhere, change PermitRootLogin parameter in /etc/ssh/sshd_config and run service sshd reload.

     

    However all of above is not recommended, unless you are know exactly, what are you doing.

  • So how about the root access to NBU appliance...

    As per Riaan's post - you need to 'elevate' from 'Support -> maintenance' menu.

    Maybe you would like to download some documentation?

     NetBackup 52xx Appliance Documentation: http://www.symantec.com/docs/DOC2792  

    Symantec NetBackup 52xx and 5330 Appliance Command Reference Guide: DOC8010 

    Symantec NetBackup 52xx and 5330 Appliance Security Guide: DOC8013 

    Or else attend Appliance training available to Symantec Partners?
    (Speak to your local SE)

     

  • FYI - NetBackup KMS is only supported on appliances running v2.6.0.1 and above:

    https://www-secure.symantec.com/connect/forums/netbackup-kms-when-appliance-mastermedia