NBAC Implementation on the Netbackup 7.6.0.1

[Kernal]

Hello Everyone,

I have been assigned to implement Access Management on the current release. I have questions about implementing NBAC

1- When I issue the commands to implement this, what happens to our users current access?

2- Will they be able to view policies and monitor work until I move them to an appropriate group?

3- We plan on connecting these groups using LDAP. The initial id used to implement NBAC, can that be an LDAP ID?

Please i need answers to the above questions.

Thanks

K

[sdo · Accepted solution]

To answer your questions:

1) Old access methods will immediately cease to work.

2) No.  They won't be able to do anything until NBAC users are properly configured.

3) No.  You have to be root to implement NBAC.

.

These should help you:

https://www-secure.symantec.com/connect/forums/ldap-authentication-nbac

https://www-secure.symantec.com/connect/forums/netbackup-and-ldap-authentication

...and the official tech note:

https://www.veritas.com/support/en_US/article.TECH199281

...and some very nice notes here:

http://worldhistory.wiki/pages/Authentication_Services_for_NetBackup

.

If you are able to, try to take Nicolai's advice... and try your plan on a dummy test system first.

[sdo]

Is your master clustered?  If so, heed Marianne's advice here:

https://www-secure.symantec.com/connect/forums/nbac-configuration-0

.

And the best advice I can give is to read the manual/guide first.  It's highly likely that you will fail if you don't read, absorb, and plan for your specific environment.  Apologies, but there is no super simple "just do this" type of instructions that anyone can give you.  Your plan is utterly dependent upon, and will be utterly specific, to your specific environments - of which, we have no visibility.

[Kernal]

Thanks SDO,

Your Proivded information helped me.

Regards,

K

[sdo]

No worries.  Congratulations on your first post - and welcome to the forum - although you appear to have been a member for over a year.  :)   See you around more, we hope.

[Kernal]

Hi sdo,

Well yeah, usually tackle cases by R&D so for this needed specific answers. I have the guide already and have implemented in the test environment.

Appreciated.

K