cancel
Showing results for 
Search instead for 
Did you mean: 

grant restore privilege to user over set of servers through java console

sa2
Level 4

Dear All , 

i have 3 file servers , there is daily restore requests that is being done by service desk fromay  the netbackup client on each server , but some times it is hanged .

i want to create a user on my solaris master server and give them privellge to restore from the 3 servers only  , and do the same 

to the exchange admin , so they can have access to Java administration consle with their acoounts and be able to restore .

is there any way to do this through ?

Thanks in advance 

1 ACCEPTED SOLUTION

Accepted Solutions

Nicolai
Moderator
Moderator
Partner    VIP   

What you require is object level access permissions - which is not possible until NBU > 8.1

In the meantime until Netbackup RBAC arrives, you can use the auth.conf file on the master server to provide some general roles to specific users. Theses roles can't be narrowed down to specific clients.

See: 

https://www.veritas.com/content/support/en_US/doc/18716246-126559472-0/v41641695-126559472

The role you want to assign to the restore user is BAR or JBP:

https://www.veritas.com/content/support/en_US/doc/18716246-126559472-0/v41641740-126559472

<my 5c>

That said - restore from the client is the right way to do it in my view. You don't want a lot of people to access and use the master server console. Instead of doing workaround of the hanging clients I would look into resolve the issue.

 </my 5c>

View solution in original post

3 REPLIES 3

DPeaco
Moderator
Moderator
   VIP   

Sa2,

My 1st question would be.....why are there "daily" restores from the 3 backup clients? Do you have client side people that are using backups as a means for additional storage? Are the client servers so short on storage that a need for daily restores have become a requirement?

My next question would be......why are the restore jobs "hanging"? Could it be that one restore is running and the other 2 restore requests are waiting on a tape? Is the tape still in the library? Was the tape pushed to the load port and is not part of the current tape library of active and available tapes?

More details would help us better understand your overall issue. :) 

Thanks,
Dennis

I just describe situation, restore is not hanged, I mean netbackup agent client some times hanged, and really it is annoyed to restore from the client side iteself
I want to make the restore request more easier I don't have any problems related to restore

Nicolai
Moderator
Moderator
Partner    VIP   

What you require is object level access permissions - which is not possible until NBU > 8.1

In the meantime until Netbackup RBAC arrives, you can use the auth.conf file on the master server to provide some general roles to specific users. Theses roles can't be narrowed down to specific clients.

See: 

https://www.veritas.com/content/support/en_US/doc/18716246-126559472-0/v41641695-126559472

The role you want to assign to the restore user is BAR or JBP:

https://www.veritas.com/content/support/en_US/doc/18716246-126559472-0/v41641740-126559472

<my 5c>

That said - restore from the client is the right way to do it in my view. You don't want a lot of people to access and use the master server console. Instead of doing workaround of the hanging clients I would look into resolve the issue.

 </my 5c>