10-13-2010 06:42 AM
Hi All,
I want to install Netbackup Access management on my netbackup system ., netbackup 7.0 system is Windows HA for Master server ,
there is two Nodes for Master server layer so how I can install NBAC?
Regards.
10-13-2010 07:59 AM
Hi,
Here is all the info you need. Its 6.5 but should be the same on 7.0.
http://www.symantec.com/docs/HOWTO31149
R
10-14-2010 09:16 PM
Hi Ialahmad
You can read install guide
NBAC for Windows Quick Install Guide.pdf
NBU 7.0 Security and Encryption.pdf
11-02-2010 10:32 PM
Access Control configuration on NetBackup, so please feel free to share your knowledge if anything is wrong or missing.
Reference: NetBackup 7.0 Security and Encryption Guide
Note: We will configure Access Control using Active Directory.
Open a command prompt and go inside the following path:
%ProgramFiles(x86)%VERITASSecurityAuthenticationbin (on a x64 Server)
and issue the command:
vssat showbrokermode
You should be able to see an output similar to this:
showbrokermode
———————-
———————-
Broker mode is : 3
———————-
Run the following command (Command Prompt):
bpnbaz -setupmaster
Enter y when asked to continue,
When asked, enter your user password which you logged on your windows server with. (Administrator password in our setup). After this point the system begings to gather configuration information.
After the command is completed restart all NetBackup services on your netbackup master server. (bpdown/bpup)
After this point, you can configure your groups and users inside “NetBackup Administration Console -> Master Server -> Access Management.
11-03-2010 05:49 PM
Installed NBAC on UNIX master.
Host Properties -> Master -> Access Control, select Authentication Domains, added a new domain (Windows AD domain). What system do you use as a broker? Just pick one of the domain controllers? And does the port number need to be defined?
Tried this, then tried to add a new user to the NBU_Admin group (in the NBU Admin Console GUI), specified a user in the AD domain and get an "Unable to contact Authentication Server" message.
I'm sure its something simple, but I can't seem to find any other documentation on how to get a UNIX master to talk with Windows AD... or is it even possible?