Forum Discussion

cc1702004's avatar
cc1702004
Level 4
4 years ago

User Access to Netbackup Java Console

Dear Sir/Madam,

I need help. Currently for a customer netbackup 7.7.3 (Windows 2012 master server), I login to the Netbackup Java Console via a domaiin account. The account was added by previous administrator. May I know how can I add another domain user account so that another person can login to the Netbackup Java Console to manage the backup?

I tried to find the auth.conf file but I could only file the auth.conf.win.template in the netbackup\java folder

Hope someone can give some advice.

Thank you

 

7.7
windows server 2012

7 Replies

Sort By
  • StefanosM's avatar
    StefanosM
    Level 6
    4 years ago

    the easiest way is to add the domain user as local admin to the backup server

    • cc1702004's avatar
      cc1702004
      Level 4
      4 years ago

      I was checking this Access Management option in Netbackup Administration Java Console but it say that the feature is not installed. Is this Access Management only available if NBAC is enabled. Sorry i am not sure how this NBAC works..i was trying to read up on this. How do i know whether the customer netbackup has NBAC activated or not?

      • davidmoline's avatar
        davidmoline
        Level 6
        4 years ago

        Hi cc1702004 

        To determine if NBAC is running see if you can see anything under the "Access Management" section in the Java GUI. I would advise against trying to enable this unless you like pain. The feature is being depreciated and replaced in current versions of NetBackup with RBAC (which is much better). 

        To add additional users, although StefanosM is correct, IMHO a better way to allow a user to access the GUI is to add that user to the auth.conf file found in <INSTALL_PATH>\NetBackup\java\auth.conf - I am always reluctant to provide admin access to a server just to let the user use an application.

        With the auth.conf you have the ability to restrict what the user can see and do (it does not provide fine control though). Have a look at this past post with details on the various keywords used to provide access.
        https://vox.veritas.com/t5/NetBackup/Role-Based-Access-8-2/m-p/874827

        Cheers
        David

  • Slartybardfast's avatar
    Slartybardfast
    Level 5
    4 years ago

    Hi There 

    I wrote a PowerShell script which uses 2 AD groups to control access to the GUI, one for full backup administrators and one for operators. I run it on a schedule task to keep the group membership up to date. I hope this helps you or another person out. where you see reference to AD_GROUP_NAME_FULL" and "AD_GROUP_NAME_OPERATOR" just create 2 AD groups for example NetBackup_Full_Admin and NetBackup_operators, populate them with the users you wish to have full admin rights to the GUI. E.g

    Jane Smith member of NetBackup_Full_Admin

    John Down member of NetBackup_operators

    When Jane logs in she will have the full NetBackup GUI available and when John logs in he will only be able to access the BAR (Backup Archive and Restore) functionality. The script is attached as text file, just rename the txt to ps1.

    Hope this helps :)