Configuring NetBackup Access Control (NBAC) on a clustered master server

Article:HOWTO70345  |  Created: 2012-02-07  |  Updated: 2013-03-01  |  Article URL http://www.symantec.com/docs/HOWTO70345
Article Type
How To


Environment

Subject


Configuring NetBackup Access Control (NBAC) on a clustered master server

Note:

In a Windows clustered environment, after setup master is run, theAUTHENTICATION_DOMAIN entry in the passive nodes can be the same as the active node name. This is not acceptable. After a fail over on a passive node, when MFC UI is launched (using <[local machine name] > \[Administrator user]), an authentication-related pop-up error message is displayed. The work-around for this issue is to add the local node name as authentication domain into the AUTHENTICATION_DOMAIN on passive nodes after setup master (before fail over). Before updating the value of AUTHENTICATION_DOMAIN, get the current value using theC:\Program Files\Veritas\NetBackup\bin\admincmd\bpgetconfig command. Then add the local node name as authentication domain in the existing domain list using the C:\Program Files\Veritas\NetBackup\bin\admincmd\bpsetconfig command. To exit and save from the bpsetconfig command prompt press Ctrl + Z and then press theEnter key.

Note:

Reverting the NBAC mode from REQUIRED to PROHIBITED on the active node of a cluster, can lead the cluster into a faulted state. The workaround for this issue is to do the following. On an active node run the bpclusterutil -disableSvc nbazd command followed by the bpclusterutil -disableSvc nbatd command. Change the bp.conf USE_VXSS=AUTOMATIC or REQUIRED value to PROHIBITED using the bpsetconfig command. Run the bpclusterutil -enableSvc nbazd command followed by the bpclusterutil -enableSvc nbatd command on the active node while turning NBAC to REQUIRED mode to monitor the security services.

You can use the following procedure to configure NetBackup Access Control (NBAC) on a clustered master server.

Configuring NetBackup Access Control (NBAC) on a clustered master server

  1. Log on to the primary cluster node.

  2. If you use Windows, open a command console.

  3. For UNIX, change the directory to /usr/openv/netbackup/bin/admincmd. For Windows, change the directory toC:\Program Files\Veritas\NetBackup\bin\admincmd.

  4. Run bpnbaz -setupmaster on the active node.

  5. Log on to the master server console GUI.

  6. Restart the NetBackup services to ensure that the NBAC settings take place.

See About using NetBackup Access Control (NBAC)

See Installing the NetBackup 7.5 master server highly available on a cluster


Legacy ID



v33431736_v71360082


Article URL http://www.symantec.com/docs/HOWTO70345


Terms of use for this information are found in Legal Notices