cancel
Showing results for 
Search instead for 
Did you mean: 

Root SSH access to NBU Appliance

Nayabsk
Level 6
Partner Accredited

Hi All,

I have admin access to my NBU appliance but not the root access , Could anybody help me with how to enable ROOT SSH access ?

I have tried searching WEB for it but i found no proper procedure to do .

Thanks,

Nayab

1 ACCEPTED SOLUTION

Accepted Solutions

RiaanBadenhorst
Moderator
Moderator
Partner    VIP    Accredited Certified

Hello,

 

That is not supported. You have to login as admin, then if you want to elevate you need to use support > maintenance.

 

If you're running 2.6.0.x you'll need to override the IPS too.

View solution in original post

10 REPLIES 10

RiaanBadenhorst
Moderator
Moderator
Partner    VIP    Accredited Certified

Hello,

 

That is not supported. You have to login as admin, then if you want to elevate you need to use support > maintenance.

 

If you're running 2.6.0.x you'll need to override the IPS too.

Nayabsk
Level 6
Partner Accredited

Hey Riaan,

Thanks so much for the quick reply , So you mean to say SSH is not supported on NBU Appliane only have to use MAINTENANCE mode if want to perform any ROOT tasks ? Am i right to say that.

Override the IPS to access as ADMIN ? How it can be done. 

Now actually what i need to do is to CONFIGURE KMS Encryption on my NBU Appliance , I already have procedure to do it is there any things i need to consider is the KMS for Appliance differes from the legacy NBU configuration ?

 

Thanks, 

Nayab

 

RiaanBadenhorst
Moderator
Moderator
Partner    VIP    Accredited Certified

Connecting the appliance with SSH is supported for the admin user, or any CLI user you create.

 

You can check in the NetBackup Appliance Security guide for instructions to override IPS to gain access to CLI (please note this appliance only to versions 7.6.0.x/2.6.0.x).

Nayabsk
Level 6
Partner Accredited

Thanks , I will check the security guide 

So how about the root access to NBU appliance as i understand certain tasks can be performed only through ROOT access ? , Is admin access would be sufficient ?

Nayabsk
Level 6
Partner Accredited

Ok I understood MAINTENANCE is the root access to the Appliance ...... And also Maintenance means do i need to have downtime ?

Andrew_Madsen
Level 6
Partner

maintenance is a user not a function. You do some maintenance on the machine like cleaning up /tmp periodically by using the user maintenance but again it is not a function. 

RiaanBadenhorst
Moderator
Moderator
Partner    VIP    Accredited Certified

No, its just a term. No need for downtime.

VoropaevPavel
Level 4
Partner Accredited

You may run following from the Maintainance command line.

/opt/Symantec/scspagent/IPS/sisipsoverride.sh

ftp://ftp.symantec.com/public/english_us_canada/products/symantec_critical_system_protection/5.0/man...

After that you will be able to elevate to root.

 

But for root ssh access you will need to move /root/.bash_profile and  /root/.bashrc somewhere, change PermitRootLogin parameter in /etc/ssh/sshd_config and run service sshd reload.

 

However all of above is not recommended, unless you are know exactly, what are you doing.

Marianne
Moderator
Moderator
Partner    VIP    Accredited Certified

So how about the root access to NBU appliance...

As per Riaan's post - you need to 'elevate' from 'Support -> maintenance' menu.

Maybe you would like to download some documentation?

 NetBackup 52xx Appliance Documentation: http://www.symantec.com/docs/DOC2792  

Symantec NetBackup 52xx and 5330 Appliance Command Reference Guide: DOC8010 

Symantec NetBackup 52xx and 5330 Appliance Security Guide: DOC8013 

Or else attend Appliance training available to Symantec Partners?
(Speak to your local SE)

 

sdo
Moderator
Moderator
Partner    VIP    Certified

FYI - NetBackup KMS is only supported on appliances running v2.6.0.1 and above:

https://www-secure.symantec.com/connect/forums/netbackup-kms-when-appliance-mastermedia