08-09-2016 08:22 AM
Hello colleagues,
I have a extrange behaviour in our Netbackup 7.6.1.1 environment (Master and media servers installed in AIX7.1) after enabling Access Control. After running the "bpnbaz -setupmaster" and configure NBAC on the media servers (without any errors) we experienced a low Netbackup console access (from Windows Console and using Java Console from the master server), login to the console takes almost 10-15 minutes, and navigate the menues is painful.
We unconfigure NBAC and the console back to normal. The master is clustered with Infoscale Availability version 7.1.
Anybody has experienced such behaviour?
Thanks and best regards
Osvaldo
08-09-2016 11:35 PM
08-10-2016 01:13 AM - edited 08-10-2016 04:13 AM
It is one of the great problems with NBAC - it is notorious difficult to debug.
My recommendation are as follows:
Upgrade to 7.7 and use the "Advanced Auditing".
advanced auditing allow non-root user to be Netbackup Administrators. Where NBAC allow/disallow access on a group level, advanced auditing is a "admin" or "non admin" style.
Wait for NBU 8.
NBAC will be replaced with RBAC - total rewritten, built-in, not possible to disable.
08-10-2016 01:18 AM
08-10-2016 05:45 AM
Thanks for your responses.
Marianne, yes I had also bad experiences with NBAC before, however, this time the only issue that I see is with the console. I think also that the documentation is not good enough, I followed the instructions from "Netbackup Security and Encryption Guide", Configuring Netbackup Access Control (NBAC) on a clustered master server, page 130. Opening a case with support about the slow of the console operation is a bit difficult to debug and confirm.
Nicolai, thanks for the advice about migration to 7.7 version, I will try the upgrade and open a case if it doesn't work.
Nurgul, thanks for the information, I had found this note, I will excecute the indicated procedure and test NBAC one more time.
Thanks to all, and best regards
Osvaldo
09-19-2019 11:28 AM