Forum Discussion

laguns97's avatar
laguns97
Level 4
2 months ago

NB 10.4.0.1 bpnbat vs nboracmd

Hi communities,
our environment is Linux with NB 10.1.1.  We have scripts to manage RMAN instances and we use a lot of home-made scripts in CLI with Netbackup commands like nboraadm.  In our scripts, we can register instances and delete them, all from within our scripts.

We installed a new Linux environment with NB 10.4.0.1.  We found that the nboraadm command is no longer exists under NB 10.4.0.1 and has been replaced by nboracmd.  This command is different from the old one and I'd like to adapt our scripts with the new command.  I find that if I simply want to list instances with this command: “nboracmd list instances”, it returns this: “A web login is required. Run the 'bpnbat' command to login.”.

I wasn't familiar with this command (bpnbat) and to my surprise, it dates back to a few versions of NB and we've never needed to use this. 

My question.... am I obliged to use this command (bpnbat) or is there a way around this?  If there's no way, will I have to add the “bpnbat” command to all my scripts with a response file that will contain a clear text password?  I'm trying to find the logic to this... Veritas wants to secure certain commands but the possibility of automating this is to have a file containing a logon and pwd in clear text.  If I'm wrong, please let me know!!!
I'd like to migrate my scripts with as little impact as possible

Sorry for my english !!!

 

  • StefanosM's avatar
    StefanosM
    Level 6
    2 months ago

    try to follow this 

    https://www.veritas.com/support/en_US/article.100016959

    • davidmoline's avatar
      davidmoline
      Level 6
      2 months ago

      Hi laguns97 

      You may also be able to add the user that runs the nboracmd into an RBAC group for CLI access to be able to skip the requirement for bpnbat (but I haven't tried this and may be wrong). 

      Cheers

  • tcsimerson's avatar
    tcsimerson
    Level 3
    2 months ago

    Yes, NBU has been tightened down security-wise.  There's a couple of ways to address this extra layer of security.

    1. Use the technote above from StefanosM
    2. Try the RBAC group that allows CLI access suggested by davidmoline
    3. Leverage API keys instead of a credential file with actual passwords.  This would require you to identify a user in the NBU web UI that has the permissions you need and generate an API key (which you can set an expiration of years).  Your credential file would now hold just the user name, the API key and the primary server name.
    4. Depending upon what you are trying to accomplish with the nboracmd, you may be able to leverage actual NBU APIs to accomplish the same tasks.

     

  • Thomas_Schulz_3's avatar
    Thomas_Schulz_3
    Level 6
    2 months ago

    Hi Laguns,

    same here. After upgrading from 10.1.1 to 10.4.0.1 my nboraadm scripts not longer running :-( Do you solved your issue with the new command #nboracmd? How can i add a new RAC to Netbackup?

    • laguns97's avatar
      laguns97
      Level 4
      21 days ago

      Hi Thomas, 
      actually, the problem still there, i'm waiting for a response of Veritas support.  From your side, something new ?
      I'm trying actually to use a service account with non root privilege, I can use the bpnbat but when I want list all instance of oracle, I have no instance, only the header of the command.  If I use bpnbat with my account (root privilege) and list all oracle instance, I got a list. 
      I will give you more info when the support will call me.

      • Thomas_Schulz_3's avatar
        Thomas_Schulz_3
        Level 6
        19 days ago

        Same here. 

        Login with API Key works fine for me (#bpnbat -Login -LoginType APIKEY) to test the new CLI command #nboracmd

        But i (and my DBAs) don't understood the result of the command -> related to "Asset ID":

        # nboracmd list databases

        Database unique name, Database ID, State, Database type, Scan name, Service name, Port, Load balanced node count, Registered, Credentials, Policies, Asset ID

        19.11.1.0_<Hostname>, , ACTIVE, SINGLE_INSTANCE, <Hostname>, , 0, 0, UNREGISTERED, , , 347971d8800c4a1d0f5049b6149bb40ca950f4616a36602edbf53xxxxxxxxxxx

        Now i try to understand the meaning of "Asset ID" to find the right DB with my script. In the next step i'll try to solve me issue over the RestAPI...but this will take some time

        Btw....i've opened a "Product Enhancement" Ticket by Veritas to get the "-add_rac_db", again. - Please do the same to put some pressure to Veritas