How to reset/uninstall NBAC (NetBackup Access Control) on UNIX/Linux Master Servers in NetBackup 7.1/7.5

Article:TECH175054  |  Created: 2011-11-22  |  Updated: 2013-11-14  |  Article URL http://www.symantec.com/docs/TECH175054
Article Type
Technical Solution


Issue



In some cases it may be necessary to reset NBAC (NetBackup Access Control) to default.  Since NetBackup 7.1, NBAC has been included in the basic NetBackup install which means that resetting or uninstalling NBAC requires additional steps.  This process is accomplished through the following steps.


Solution



1.  Stop NetBackup:
# /usr/openv/netbackup/bin/goodies/netbackup stop

2.  Stop PBX:
# /opt/VRTSpbx/bin/vxpbx_exchanged stop

3.  Confirm that all NetBackup processes are done:
# /usr/openv/netbackup/bin/bpps -x

4.  Move the VRTSatlocal.conf.tmplt up one directory:
# mv /usr/openv/var/global/vxss/eab/data/root/.VRTSat/profile/VRTSatlocal.conf.tmplt
/usr/openv/var/global/vxss/eab/data/root/.VRTSat/VRTSatlocal.conf.tmplt

5.  Remove contents of /usr/openv/var/global/vxss/eab/data/root/.VRTSat/profile/:
#  rm -rf /usr/openv/var/global/vxss/eab/data/root/.VRTSat/profile

6.  Copy VRTSatlocal.conf.tmplt to VRTSatlocal.conf within the profile directory:
# cp /usr/openv/var/global/vxss/eab/data/root/.VRTSat/VRTSatlocal.conf.tmplt
/usr/openv/var/global/vxss/eab/data/root/.VRTSat/profile/VRTSatlocal.conf

7.  Remove contents of /usr/openv/var/vxss and $HOME/.vxss:
# rm -rf /usr/openv/var/vxss
# rm -rf $HOME/.vxss

8.  Move NBAZDB.db and NBAZDB.log:
# mv /usr/openv/db/data/NBAZDB.db /usr/openv/db/data/NBAZDB.db.old
# mv /usr/openv/db/data/NBAZDB.log /usr/openv/db/data/NBAZDB.log.old

9.  Edit /usr/openv/db/data/vxdbms.conf:
# vi /usr/openv/db/data/vxdbms.conf

10.  Remove the following line:
AZ_DB_PASSWORD = <VALUE>

11.  Copy NBAZDB.db.template to NBAZDB.db
# cp /usr/openv/db/data/NBAZDB.db.template /usr/openv/db/data/NBAZDB.db

12. Edit /usr/openv/netbackup/bp.conf:
# vi /usr/openv/netbackup/bp.conf

13.  Remove the following lines:
AUTHENTICATION_DOMAIN = nbmaster1.symantec.com
AUTHORIZATION_SERVICE = nbmaster1 0

14.  Change USE_VXSS to PROHIBITED within bp.conf:
USE_VXSS=PROHIBITED

15.  Restart PBX:
# /opt/VRTSpbx/bin/vxpbx_exchanged start

16.  Restart NetBackup:
# /usr/openv/netbackup/bin/goodies/netbackup start

17. Load NBDB environment:
# .  /usr/openv/db/vxdbms_env.sh
(Note: There is a space between the first dot and first slash)

18.  Create new NBAZDB.log:
# /usr/openv/db/bin/dblog -q -t NBAZDB.log NBAZDB.db

19.  Reset NBAZDB password:
# /usr/openv/db/bin/nbdb_admin -dba nbusql

The master server's NBAC configuration should now be returned to its defaults. 

From this point, NBAC can be set up again by running:
# /usr/openv/netbackup/bin/admincmd/bpnbaz -setupMaster [-fsa [<domain type>:<domain name>:]<user name>]




Article URL http://www.symantec.com/docs/TECH175054


Terms of use for this information are found in Legal Notices