02-15-2011 01:15 AM
We have 1 Master Server and 2 Media Servers and i am trying to configure NBAC to work with Active Directory.I am following the process mentioned in the Security and Encryption guide to set it up..Following are the steps i have done...
1. Run the command bpnbaz -setupmaster and it did execute successfully
2. Run the bpnbat -login to login to logon as security administrator
3. When i try to run bpnbaz -setupmedia -all -dryrun i am getting the following error...
No hosts selected for setup
One or more of your command line parameters is invalid or missing.bpnbaz: Please choose one of the following:
-[AddUser | DelUser] Group_Name Domain_Type:Domain_Name:User_Name [-OSGroup] [-S
erver server1.domain.com] [-CredFile Credential]-[AddGroup | DelGroup] Group_Name [-Server server1.domain.com] [-CredFile Creden
tial]-[AddPolicy | DelPolicy] Policy_Name [-Server server1.domain.com] [-CredFile Cre
dential]-[ListPerms | ListMainObjects | ListPolicyObjects | ListGroups|ShowAuthorizers]
[-Server server1.domain.com] [-CredFile Credential]-ListGroupMembers Group_Name [-Server server1.domain.com] [-CredFile Credential]
-AddPerms Permission_1[,Permission_2,...] -Group Group_Name -[Object|Policy] Ob
ject/Policy_Name [-Server server1.domain.com] [-CredFile Credential]-DelPerms [Permission_1,...] -Group Group_Name -[Object|Policy] Object/Policy_Na
me [[-Server server1.domain.com] -CredFileCredential]-[AllowAuthorization|DisallowAuthorization] Machine Name [-server server1.domain
.com]-SetupSecurity NBU.Master.Server.com [-Server server1.domain.com]
-CheckUpgrade -Server server1.domain.com
-Upgrade [-Silent] [-Server server1.domain.com]
-SetupMaster
-SetupMedia [ media.server.com [-out file] | -all [-out file] | -file progress.f
ile ] [-dryrun] [-disable]-SetupClient [ client.server.com [-out file] | -all [-images] [-out file] | -fil
e progress.file ] [-dryrun] [-disable]-GetConfiguredHosts [target.server.com [-out file] | -all [-out file] | -file pr
ogress.file] "
I get similar error when i try to run with the media server names instead of -all option.
Any clues on why this is happening?
Solved! Go to Solution.
02-15-2011 02:39 AM
02-15-2011 01:45 AM
NBAC instructions are different for each NBU version.
Please let us know which NBU version as well as OS version.
02-15-2011 02:11 AM
We are using NBU 7.0.1.OS is Windows 2003 SP2 x64.
02-15-2011 02:39 AM
Use
bpnbaz -setupmedia "media server name" -dryrun
02-15-2011 02:48 AM
Looks like it does not like the -all option.I tried setting up individual media servers and worked successfully.
I did also find a good document on configuring NBAC for Windows http://www.symantec.com/business/support/index?page=content&id=TECH126596
02-15-2011 03:00 AM
Luckily 7.1 will be out soon and we'll be rid of NBAC/VXSS!