NBAC For Client Side is Mandatory???

[Anandha_Kannan_]

Hi All,

we are going to implement NBAC to our Admin console. I just want know whether is it mandatory to configure NetBackup Access Control

(NBAC) on clients side.? or configuring on master and media server is enough?

[RamNagalla]

hi ,

From my understnding .. it is not mandatory...... 

http://www.symantec.com/business/support/index?page=content&id=HOWTO46922#v32157262

Note that permissions are granted to individuals in user groups, not to individuals on a per-host basis. They can only operate to the extent that they are authorized to do so. No restrictions are based on computer names.

I may be not 100% correct... lets see if some one answers it.. 

[watsons · Accepted solution]

It is not mandatory. It's up to your requirement.

The simplest is to only setup NBAC on master server only, that basically protects the access to master server & GUI.

Additional setup to media server, and/or client is also available, depend on how secure you want your environment to be.

It's best to read up the NBU security admin guide (http://www.symantec.com/docs/DOC5185) before you implement it. Read more details on Chapter 1 of these 2 topics:

NBAC on master, media server and GUI security (page 38)

NBAC complete security (page 40)

Please note, the more secure you want, the more complex it is for the setup, maintenance and troubleshooting. So it is always best to try out the master server first, before you jump into "total security".

[Thiago_Pereira]

Like the post before this, It is not mandatory, but yout need to configure in "Host Properties" -> "Master Server" -> Client Attributes, forbidding that customers can perform backup and restore, otherwise they can open the console BAR (Backup, Archive and Restore) and perform these procedures.

[ashish_patil01]

It is not mandotary to configure NBAC on client it is only neccessary to configure NBAC on the master server. And after enabling the same you need to set the right permissions on the objects which you would like to restrict access to.

[Anandha_Kannan_]

Hi All,

I want to enable NBAC to master server alone ... Do i want to set USE_VXSS = AUTOMATIC or USE_VXSS = PROHIBITED...

Symantec support suggested that NBAC doesn't support for PD, MSDP and database server due to some certificates issue with these servers.

[huanglao2002]

NetBackup client can join NBAC domain,but it's not Mandatory.

[Anandha_Kannan_]

I am getting error as below when I run bpnbaz -setupmaster

C:\Program Files\Veritas\NetBackup\bin\admincmd>bpnbaz.exe -setupmaster

You will have to restart NetBackup services on this machine after the command completes successfully.

Do you want to continue(y/n)y

Gathering configuration information.

ERROR: Failed to configure security services - nbatd

Unable to fork child process.