Forum Discussion

xid123's avatar
xid123
Level 3
13 years ago
Solved

nbauditreport question

Hello,

I use NetBackup EnterpriseServer 7.5.0.5 on Oracle Enterprise Linux 6.3. I configured a linux user (joe).

I added the rights of joe to auth.conf:

joe ADMIN=ALL JBP=ALL

I loged as joe and ran jnbSA and logged in.

After I changed a policy status from active to deactive.

When I run nbauditreport command I saw the following:

TIMESTAMP            USER               DESCRIPTION

03/11/2013 10:43:33 root@master     Policy 'test-fs' was deactivated

 

My question is why I can not see the joe user in this report why I see root in every case instead of other users (e.g. joe)?

If I would like to see the correct user name I should use NBAC?

Thank you in advance!

 

Regards,

G,

 

7.5
Backup and Recovery
Linux
Monitoring
NetBackup
  • RamNagalla's avatar
    RamNagalla
    13 years ago

    hi, 

    below is the Info that I find from the admin Guide Vol1

    as per the below info , even you login as Joe user , Joe user have the root privilages  to perfrom the action, and joe perfromed it as a  root,that is the reason it is showing as root.

    acatual user identifies when NBAC is configured.

     

    User identity in the audit report

    The audit report lists the identity of the user who performed a specific action.
    The identity includes the user name, the domain, and the domain type of the
    authenticated user.
    If NetBackup Access Control (NBAC) is not used in an environment, administrators
    must have administrator (or root) privileges to configure and run NetBackup. In
    large environments, multiple administrators may share the same root logon.
     
    To differentiate between administrators in the audit report, NBAC must be
    configured. When NBAC is enabled, the audit report displays the actual user
    identities that are associated with audited actions. Information about NBAC
    installation and configuration is available in the NetBackup SecurityandEncryption
    Guide.
     

2 Replies

Replies have been turned off for this discussion
  • RamNagalla's avatar
    RamNagalla
    Moderator
    13 years ago

    hi, 

    below is the Info that I find from the admin Guide Vol1

    as per the below info , even you login as Joe user , Joe user have the root privilages  to perfrom the action, and joe perfromed it as a  root,that is the reason it is showing as root.

    acatual user identifies when NBAC is configured.

     

    User identity in the audit report

    The audit report lists the identity of the user who performed a specific action.
    The identity includes the user name, the domain, and the domain type of the
    authenticated user.
    If NetBackup Access Control (NBAC) is not used in an environment, administrators
    must have administrator (or root) privileges to configure and run NetBackup. In
    large environments, multiple administrators may share the same root logon.
     
    To differentiate between administrators in the audit report, NBAC must be
    configured. When NBAC is enabled, the audit report displays the actual user
    identities that are associated with audited actions. Information about NBAC
    installation and configuration is available in the NetBackup SecurityandEncryption
    Guide.