cancel
Showing results for 
Search instead for 
Did you mean: 

backup appliance 2.6.0.3 and altnames file

watkinson
Level 1

Today i went to setup a new backup domain using a 2.6.0.3 appliance and when i went to configure the altnames files and couldn't elevate to root.

I can't seem to access anything to modify it from either from the NetBackup CLI or the menus. I haven't read all the new document so i could be looking for a solution that is already available, but the following link no longer works from i believe 2.6.0.2 on so it should probalby be noted or removed.

 

https://www-secure.symantec.com/connect/ko/forums/appliance-and-altnames

 

1 ACCEPTED SOLUTION

Accepted Solutions

SymTerry
Level 6
Employee Accredited

You should be able to do this from the command line logged in as admin. 

Marianne answered this in the post Appliance and altnames:

Use 'putty' or some other text-based terminal to logon as 'admin'.

Use the following commands to get to a normal Unix shell (case sensitive):
Support
Maintenance
elevate   (you will be prompted for admin password again).
 
You can now navigate the filesystem, create altnames folder (if it does not exist already) and create files for cluster members or create No.Restrictions touchfile.

View solution in original post

2 REPLIES 2

SymTerry
Level 6
Employee Accredited

You should be able to do this from the command line logged in as admin. 

Marianne answered this in the post Appliance and altnames:

Use 'putty' or some other text-based terminal to logon as 'admin'.

Use the following commands to get to a normal Unix shell (case sensitive):
Support
Maintenance
elevate   (you will be prompted for admin password again).
 
You can now navigate the filesystem, create altnames folder (if it does not exist already) and create files for cluster members or create No.Restrictions touchfile.

Marianne
Level 6
Partner    VIP    Accredited Certified

Extract from version 2.6..0.2 Security Guide: http://www.symantec.com/docs/DOC7350

Overriding the Symantec Intrusion Security policy (IPS)
For the version 2.6.0.2 and higher the NetBackup Appliance discourages accessing
the root account using the elevate command using the Support > Maintenance
menu. If you try to access the elevate command the following message is displayed:

Permission Denied !! Access to the root account requires
overriding the Symantec Intrusion Security Policy.
Please refer to the appliance security guide for
overriding instructions.

....
....

To override the Symantec Intrusion security policy:
1 Log on to the NetBackup Appliance Shell Menu as an Administrator.
2 Run the Support > Maintenance command.
3 To enter your Maintenance account, run the following command, and provide
the password when you receive a prompt.
NBAppl.Support > Maintenance
<!--Maintenance Mode--!>
maintenance’s password:
4 In the Maintenance mode, type the following command to override the Symantec
Intrusion Security Policy:
/opt/Symantec/scspagent/IPS/sisipsoverride.sh
The appliance displays the following message:
...
....

5 Enter your maintenance password.
The appliance then displays the following options:

Choose the type of override that you wish to perform:
......

See manual for the rest.