01-26-2018 04:12 AM
Dear All ,
i have 3 file servers , there is daily restore requests that is being done by service desk fromay the netbackup client on each server , but some times it is hanged .
i want to create a user on my solaris master server and give them privellge to restore from the 3 servers only , and do the same
to the exchange admin , so they can have access to Java administration consle with their acoounts and be able to restore .
is there any way to do this through ?
Thanks in advance
Solved! Go to Solution.
01-29-2018 06:41 AM - edited 01-29-2018 06:45 AM
What you require is object level access permissions - which is not possible until NBU > 8.1
In the meantime until Netbackup RBAC arrives, you can use the auth.conf file on the master server to provide some general roles to specific users. Theses roles can't be narrowed down to specific clients.
See:
https://www.veritas.com/content/support/en_US/doc/18716246-126559472-0/v41641695-126559472
The role you want to assign to the restore user is BAR or JBP:
https://www.veritas.com/content/support/en_US/doc/18716246-126559472-0/v41641740-126559472
<my 5c>
That said - restore from the client is the right way to do it in my view. You don't want a lot of people to access and use the master server console. Instead of doing workaround of the hanging clients I would look into resolve the issue.
</my 5c>
01-26-2018 07:34 AM
Sa2,
My 1st question would be.....why are there "daily" restores from the 3 backup clients? Do you have client side people that are using backups as a means for additional storage? Are the client servers so short on storage that a need for daily restores have become a requirement?
My next question would be......why are the restore jobs "hanging"? Could it be that one restore is running and the other 2 restore requests are waiting on a tape? Is the tape still in the library? Was the tape pushed to the load port and is not part of the current tape library of active and available tapes?
More details would help us better understand your overall issue. :)
01-26-2018 07:42 AM
01-29-2018 06:41 AM - edited 01-29-2018 06:45 AM
What you require is object level access permissions - which is not possible until NBU > 8.1
In the meantime until Netbackup RBAC arrives, you can use the auth.conf file on the master server to provide some general roles to specific users. Theses roles can't be narrowed down to specific clients.
See:
https://www.veritas.com/content/support/en_US/doc/18716246-126559472-0/v41641695-126559472
The role you want to assign to the restore user is BAR or JBP:
https://www.veritas.com/content/support/en_US/doc/18716246-126559472-0/v41641740-126559472
<my 5c>
That said - restore from the client is the right way to do it in my view. You don't want a lot of people to access and use the master server console. Instead of doing workaround of the hanging clients I would look into resolve the issue.
</my 5c>