Forum Discussion

gustav's avatar
gustav
Level 5
11 years ago

Java console - auth.conf issue

Hello,

 

We have a windows master setup and we do a large amount of file restores which I am trying to move to the service desk. I have installed the java console on the Terminal servers that we use and I can logon and administer the master server.

I am trying to restrict access by placing an auth.conf file for a test user on the terminal server so access is only for BAR, but when I log on I have access to everything.

The documentation in the admin guide is very confusing and mostly relates to Unix systems in the admin guide (about auth.conf and java console)

Any ideas how I can get this to work? We are on 7.1.0.4

 

Thanks

 

 

7.1.x and Earlier
Backup and Recovery
Configuring
Integration
NetBackup
Troubleshooting
Windows Server (2003-2008)
  • Marianne's avatar
    Marianne
    11 years ago

    You need to create auth.conf on the master - no need to install Java Console.

    Create Java folder: <install_path>\VERITAS\Java\ then create auth.conf.

    Check that Windows text editor does not add .txt extension.

  • Marianne's avatar
    Marianne
    Level 6
    11 years ago

    You need to create auth.conf on the master - no need to install Java Console.

    Create Java folder: <install_path>\VERITAS\Java\ then create auth.conf.

    Check that Windows text editor does not add .txt extension.

  • RamNagalla's avatar
    RamNagalla
    Moderator
    11 years ago

    you need to have the  user name entries in the auth.conf below is the location in the Master server.

     <install_path>\VERITAS\Java\auth.conf

     

    see the below tech note

    http://www.symantec.com/business/support/index?page=content&id=TECH16924

    Entry should be like below

    <username> ADMIN=JBP JBP=BAR

    ALL = Administration of all applications
    AM = Activity Monitor
    BMR = Bare Metal Restore
    BPM = Backup Policy Management
    BAR or JBP = Backup, Archive and Restore
    CAT = Catalog
    DM = Device Manager
    HPD = Host Properties
    MM = Media Management
    REP = Reports
    SUM = Storage Unit Management
    VLT = Vault Management

  • Marianne's avatar
    Marianne
    Level 6
    11 years ago

    but when I log on I have access to everything.

    Do you logon with your own user name or as test user?

    Check auth.conf entries for test user as per Nagalla's excellent post.

  • gustav's avatar
    gustav
    Level 5
    11 years ago

    Do I need to install Java admin console on master - because it's not at present.

     

    I have entry

    domain\<uname> ADMIN=JBP+HPD on auth.conf on Terminal Server but when I log on with that user it gives me everything.

     

    thanks

     

     

     

  • Nicolai's avatar
    Nicolai
    Moderator
    11 years ago

    One problem with the Java auth.conf file is that all users can press the "cancel all jobs" bottom..

    For a more granular setup consider using NBAC (netbackup access control).

  • gustav's avatar
    gustav
    Level 5
    11 years ago

    Thanks for your help - got it working now. I had auth.conf on N:drive where catalog and database was also needed putting in c:\pro*\Ver*

     

    all sorted now smiley