Media server verification points for Windows

Article:HOWTO46912  |  Created: 2011-03-24  |  Updated: 2011-03-25  |  Article URL http://www.symantec.com/docs/HOWTO46912
Article Type
How To


Environment

Subject


Media server verification points for Windows

The following topics describe the media server verification procedures for Windows:

  • Verify the media server.

  • Verify that the server has access to the authorization database.

  • Unable to load library message

The following table describes the media server verification procedures for Windows.

Table: Media server verification procedures for Windows

Procedure

Description

Verify the media server

To determine which authentication broker the media server is authenticated against, run bpnbat -whoami with -cf for the media server's credential file. The server credentials are located in the c:\Program Files\Veritas\Netbackup\var\vxss\credentials\... directory.

For example:

    bpnbat -whoami -cf "c:\Program 
    Files\Veritas\Netbackup\var\vxss\credentials\
     win_media.company.com"
    Name: win_media.company.com
    Domain: NBU_Machines@win_master.company.com
    Issued by: /CN=broker/OU=root@win_master.company.com/
     O=vx
    Expiry Date: Oct 31 20:11:40 2007 GMT
    Authentication method: Veritas Private Security
    Operation completed successfully.

If the domain listed is not NBU_Machines@win_master.company.com, consider running bpnbat -addmachine for the name in question (win_media). This command is run on the computer with the authentication broker that serves the NBU_Machines domain (win_master).

Then, on the computer where we want to place the certificate (win_media), run:

bpnbat -loginmachine

Verify that the server has access to the authorization database

To make sure that the media server is able to access the authorization database as it needs, run bpnbaz -ListGroups -CredFile "machine_credential_file"

For example:

    bpnbaz -ListGroups -CredFile "C:\Program 
    Files\Veritas\NetBackup\var\vxss\credentials\
     win_media.company.com"
    NBU_Operator
    NBU_Admin
    NBU_SAN Admin
    NBU_User
    NBU_Security Admin
    Vault_Operator
    Operation completed successfully.

If this command fails, run bpnbaz -AllowAuthorization on the master server that is the authorization server (win_master.company.com).

Unable to load library message

Verify the media server and that it has access to the proper database. This verification indirectly informs you that the NetBackup Authentication and Authorization client libraries for both authentication and authorization are properly installed. If either of these procedures fail with a message "unable to load libraries": Check to make certain the authentication client libraries and authorization client libraries are installed.

You may also verify that the authentication domains are correct by viewing the access control host properties for this media server.

See About using NetBackup Access Control (NBAC)


Legacy ID



v32156896_v54411808


Article URL http://www.symantec.com/docs/HOWTO46912


Terms of use for this information are found in Legal Notices