manual backups not working with nbac user(NBU_Operator group user) after configuration nbac

[raviteja_yedlap]

Hi,

I am unable to take manual backups with nbac user(user added to NBU_Operator group), even though he has permissions to do manual backups.But it is working fine with "root".

bash-3.2$ /usr/openv/netbackup/bin/admincmd/bpdbjobs | head -8
JobID         Type      State Status                           Policy    Schedule              Client    Dest Media Svr Active PID FATPipe
14497 Image Delete       Done      1                                                                                         15798
14496       Backup       Done    219        solaris_x86_oam-bup_FILES           - solaris_x86_oam-bup
14495 Image Delete       Done      1                                                                                         29378
14494       Backup       Done    219        solaris_x86_oam-bup_FILES           - solaris_x86_oam-bup
14493 Image Delete       Done      1                                                                                         27843
14492 Image Delete       Done      1                                                                                         27495
14491       Backup       Done    219        solaris_x86_oam-bup_FILES           - solaris_x86_oam-bup
bash-3.2$
bash-3.2$ id
uid=575(bkpoperator) gid=573(bur)
bash-3.2$ /usr/openv/netbackup/bin/bpbackup -i -p solaris_x86_oam-bup_FILES -s daily -L /var/tmp/one.txt
bash-3.2$ /usr/openv/netbackup/bin/admincmd/bpdbjobs | head -8
JobID         Type      State Status                           Policy    Schedule              Client    Dest Media Svr Active PID FATPipe
14497 Image Delete       Done      1                                                                                         15798
14496       Backup       Done    219        solaris_x86_oam-bup_FILES           - solaris_x86_oam-bup
14495 Image Delete       Done      1                                                                                         29378
14494       Backup       Done    219        solaris_x86_oam-bup_FILES           - solaris_x86_oam-bup
14493 Image Delete       Done      1                                                                                         27843
14492 Image Delete       Done      1                                                                                         27495
14491       Backup       Done    219        solaris_x86_oam-bup_FILES           - solaris_x86_oam-bup
bash-3.2$

But it is working fine with "root".

bash-3.2# /usr/openv/netbackup/bin/admincmd/bpdbjobs | head -8
JobID         Type      State Status                           Policy    Schedule              Client    Dest Media Svr Active PID FATPipe
14497 Image Delete       Done      1                                                                                         15798
14496       Backup       Done    219        solaris_x86_oam-bup_FILES           - solaris_x86_oam-bup
14495 Image Delete       Done      1                                                                                         29378
14494       Backup       Done    219        solaris_x86_oam-bup_FILES           - solaris_x86_oam-bup
14493 Image Delete       Done      1                                                                                         27843
14492 Image Delete       Done      1                                                                                         27495
14491       Backup       Done    219        solaris_x86_oam-bup_FILES           - solaris_x86_oam-bup
bash-3.2# id
uid=0(root) gid=0(root)
bash-3.2# /usr/openv/netbackup/bin/bpbackup -i -p solaris_x86_oam-bup_FILES -s daily -L /var/tmp/one.txt

bash-3.2# /usr/openv/netbackup/bin/admincmd/bpdbjobs | head -8
JobID         Type      State Status                           Policy    Schedule              Client    Dest Media Svr Active PID FATPipe
14498       Backup       Done    237        solaris_x86_oam-bup_FILES       daily              *NULL*
14497 Image Delete       Done      1                                                                                         15798
14496       Backup       Done    219        solaris_x86_oam-bup_FILES           - solaris_x86_oam-bup
14495 Image Delete       Done      1                                                                                         29378
14494       Backup       Done    219        solaris_x86_oam-bup_FILES           - solaris_x86_oam-bup
14493 Image Delete       Done      1                                                                                         27843
14492 Image Delete       Done      1                                                                                         27495
bash-3.2#

Also please check attached file for permissions setup.

Please help me in resolving this issues.

Regards,

Raviteja

[Michal_Mikulik1]

Hello,

please review/attach also /var/tmp/one.txt log file.

When running bpbackup from command line, also execute permissions on the file is required.

Regards

Michal

[nbutech]

Looks operator does have permission to Backup...

Check the admin and bprd logs what is it saying...

you might then have to look at nbatd and nbaz log

Did you run bpnbaz -SetupClient on that system ?

bpnbaz -SetupClient [client.server.com] [-out file] | -all [-images] [-out file] | [-fileprogress_file] [-dryrun] [-disable]

https://www.veritas.com/support/en_US/article.000093147

[raviteja_yedlap]

Hi Michal,

1)This was log of /var/tmp/one.txt

bash-3.2# more one.txt
Backup started 06/13/2016 07:16:17

Progress logs may exist on individual clients

bash-3.2#

Hi nbutech,

Is bpnbaz -SetupClient really required? I have set my USE_VXSS parameter on master server to AUTOMATIC not to REQUIRED.

Regards,

Raviteja

[Michal_Mikulik1]

Hello,

ok what I wanna to say is that running NBU commands/utilities from the command line requires also permissions on OS level - so execute permissions on NetBackup scripts/commands, write permissions to log directories etc. And these are not controlled by NBAC and without root they can be missing.

So either 1/ fine tune these permissions or 2/run all NBU actions from the NBU console

Rgds

Michal

[raviteja_yedlap]

Hi , Michal,

Unfortunately, manual backups are not working from netbackup console either

Regards,

Raviteja