cancel
Showing results for 
Search instead for 
Did you mean: 

Unable to configure NBAC

kasvis
Level 3

We have 1 Master Server and 2 Media Servers and i am trying to configure NBAC to work with Active Directory.I am following the process mentioned in the Security and Encryption guide to set it up..Following are the steps i have done...

1. Run the command bpnbaz -setupmaster and it did execute successfully

2. Run the bpnbat -login to login to logon as security administrator

3. When i try to run  bpnbaz -setupmedia -all -dryrun i am getting the following error...

No hosts selected for setup
One or more of your command line parameters is invalid or missing.

bpnbaz: Please choose one of the following:

-[AddUser | DelUser] Group_Name Domain_Type:Domain_Name:User_Name [-OSGroup] [-S
erver server1.domain.com] [-CredFile Credential]

-[AddGroup | DelGroup] Group_Name [-Server server1.domain.com] [-CredFile Creden
tial]

-[AddPolicy | DelPolicy] Policy_Name [-Server server1.domain.com] [-CredFile Cre
dential]

-[ListPerms | ListMainObjects | ListPolicyObjects | ListGroups|ShowAuthorizers]
[-Server server1.domain.com] [-CredFile Credential]

-ListGroupMembers Group_Name [-Server server1.domain.com] [-CredFile Credential]


-AddPerms  Permission_1[,Permission_2,...] -Group Group_Name -[Object|Policy] Ob
ject/Policy_Name [-Server server1.domain.com] [-CredFile Credential]

-DelPerms [Permission_1,...] -Group Group_Name -[Object|Policy] Object/Policy_Na
me [[-Server server1.domain.com] -CredFileCredential]

-[AllowAuthorization|DisallowAuthorization] Machine Name [-server server1.domain
.com]

-SetupSecurity NBU.Master.Server.com [-Server server1.domain.com]

-CheckUpgrade -Server server1.domain.com

-Upgrade [-Silent] [-Server server1.domain.com]

-SetupMaster

-SetupMedia [ media.server.com [-out file] | -all [-out file] | -file progress.f
ile ] [-dryrun] [-disable]

-SetupClient [ client.server.com [-out file] | -all [-images] [-out file] | -fil
e progress.file ] [-dryrun] [-disable]

-GetConfiguredHosts [target.server.com [-out file] | -all [-out file] | -file pr
ogress.file]   "

      I get similar error when i try to run with the media server names instead of -all option.

     Any clues on why this is happening?

1 ACCEPTED SOLUTION

Accepted Solutions

RiaanBadenhorst
Moderator
Moderator
Partner    VIP    Accredited Certified

Use

 

bpnbaz -setupmedia "media server name" -dryrun

View solution in original post

5 REPLIES 5

Marianne
Level 6
Partner    VIP    Accredited Certified

NBAC instructions are different for each NBU version.

Please let us know which NBU version as well as OS version.

kasvis
Level 3

We are using NBU 7.0.1.OS is Windows 2003 SP2 x64.

RiaanBadenhorst
Moderator
Moderator
Partner    VIP    Accredited Certified

Use

 

bpnbaz -setupmedia "media server name" -dryrun

kasvis
Level 3

Looks like it does not like the -all option.I tried setting up individual media servers and worked successfully.

I did also find a good document on configuring NBAC for Windows http://www.symantec.com/business/support/index?page=content&id=TECH126596

RiaanBadenhorst
Moderator
Moderator
Partner    VIP    Accredited Certified

Luckily 7.1 will be out soon and we'll be rid of NBAC/VXSS!