Configuring NetBackup Access Control (NBAC) on a clustered master server

Article:HOWTO46972  |  Created: 2011-03-24  |  Updated: 2011-03-25  |  Article URL http://www.symantec.com/docs/HOWTO46972
Article Type
How To


Environment

Subject


Configuring NetBackup Access Control (NBAC) on a clustered master server

Note:

In a Windows clustered environment, after setup master is run, theAUTHENTICATION_DOMAIN entry in the passive nodes can be the same as the active node name. After a fail over on a passive node, when MFC UI is launched (using <[local machine name] > \[Administrator user]), an authentication-related pop-up error message is displayed. The work-around for this issue is to update the AUTHENTICATION_DOMAIN on passive nodes with the local node name after setup master (before fail over). Before updating the value of AUTHENTICATION_DOMAIN, get the current value using theC:\Program Files\Veritas\NetBackup\bin\admincmd\bpgetconfig command. Replace the active node name with the local node name and set the new value using the C:\Program Files\Veritas\NetBackup\bin\admincmd\bpsetconfig command. Then press Ctrl + Z Enter to save and quit.

Note:

Reverting the NBAC mode from REQUIRED to PROHIBITED on the active node of a cluster, can lead the cluster into a faulted state. The workaround for this issue is to do the following. On an active node run the bpclusterutil -disableSvc nbazd command followed by the bpclusterutil -disableSvc nbatd command. Change the bp.conf USE_VXSS=AUTOMATIC or REQUIRED value to PROHIBITED using the bpsetconfig command. Run the bpclusterutil -enableSvc nbazd command followed by the bpclusterutil -enableSvc nbatd command on the active node while turning NBAC to REQUIRED mode to monitor the security services.

You can use the following procedure to configure NetBackup Access Control (NBAC) on a clustered master server.

Configuring NetBackup Access Control (NBAC) on a clustered master server

  1. Log on to the primary cluster node.

  2. If you use Windows, open a command console.

  3. For UNIX, change the directory to /usr/openv/netbackup/bin/admincmd. For Windows, change the directory toC:\Program Files\Veritas\NetBackup\bin\admincmd.

  4. Run bpnbaz -setupmaster on the active node.

  5. Log on to the master server console GUI.

  6. Restart the NetBackup services to ensure that the NBAC settings take place.

See About using NetBackup Access Control (NBAC)

See Installing the NetBackup 7.1 master server highly available on a cluster


Legacy ID



v33431736_v54411808


Article URL http://www.symantec.com/docs/HOWTO46972


Terms of use for this information are found in Legal Notices