cancel
Showing results for 
Search instead for 
Did you mean: 

Java console - auth.conf issue

gustav
Level 5

Hello,

 

We have a windows master setup and we do a large amount of file restores which I am trying to move to the service desk. I have installed the java console on the Terminal servers that we use and I can logon and administer the master server.

I am trying to restrict access by placing an auth.conf file for a test user on the terminal server so access is only for BAR, but when I log on I have access to everything.

The documentation in the admin guide is very confusing and mostly relates to Unix systems in the admin guide (about auth.conf and java console)

Any ideas how I can get this to work? We are on 7.1.0.4

 

Thanks

 

 

1 ACCEPTED SOLUTION

Accepted Solutions

Marianne
Level 6
Partner    VIP    Accredited Certified

You need to create auth.conf on the master - no need to install Java Console.

Create Java folder: <install_path>\VERITAS\Java\ then create auth.conf.

Check that Windows text editor does not add .txt extension.

View solution in original post

6 REPLIES 6

RamNagalla
Moderator
Moderator
Partner    VIP    Certified

you need to have the  user name entries in the auth.conf below is the location in the Master server.

 <install_path>\VERITAS\Java\auth.conf

 

see the below tech note

http://www.symantec.com/business/support/index?page=content&id=TECH16924

Entry should be like below

<username> ADMIN=JBP JBP=BAR

ALL = Administration of all applications
AM = Activity Monitor
BMR = Bare Metal Restore
BPM = Backup Policy Management
BAR or JBP = Backup, Archive and Restore
CAT = Catalog
DM = Device Manager
HPD = Host Properties
MM = Media Management
REP = Reports
SUM = Storage Unit Management
VLT = Vault Management

Marianne
Level 6
Partner    VIP    Accredited Certified

but when I log on I have access to everything.

Do you logon with your own user name or as test user?

Check auth.conf entries for test user as per Nagalla's excellent post.

gustav
Level 5

Do I need to install Java admin console on master - because it's not at present.

 

I have entry

domain\<uname> ADMIN=JBP+HPD on auth.conf on Terminal Server but when I log on with that user it gives me everything.

 

thanks

 

 

 

Marianne
Level 6
Partner    VIP    Accredited Certified

You need to create auth.conf on the master - no need to install Java Console.

Create Java folder: <install_path>\VERITAS\Java\ then create auth.conf.

Check that Windows text editor does not add .txt extension.

Nicolai
Moderator
Moderator
Partner    VIP   

One problem with the Java auth.conf file is that all users can press the "cancel all jobs" bottom..

For a more granular setup consider using NBAC (netbackup access control).

gustav
Level 5

Thanks for your help - got it working now. I had auth.conf on N:drive where catalog and database was also needed putting in c:\pro*\Ver*

 

all sorted now smiley