DOCUMENTATION: Upgrade Process for NetBackup with Access Control from NetBackup Version 5.1 / 6.0 to NetBackup 6.5.

Article:TECH57724  |  Created: 2008-01-15  |  Updated: 2008-01-15  |  Article URL http://www.symantec.com/docs/TECH57724
Article Type
Technical Solution

Product(s)

Environment

Issue



DOCUMENTATION: Upgrade Process for NetBackup with Access Control from NetBackup Version 5.1 / 6.0 to NetBackup 6.5.

Solution



Manual: Veritas NetBackup (tm) 5.x to NetBackup 6.5 Upgrade Guide, Version "A"


Modification Type: Supplement


Modification:
The following guide outlines how to upgrade the NetBackup Access Control (NBAC) / Veritas Security Services (VxSS) from NetBackup 5.1/6.0 to NetBackup 6.5 with Symantec Product Authentication and Authorization Services. This technote assumes the software is installed to the default locations and does not include the steps necessary to upgrade the NetBackup Software.  This Technote also assumes the Server has NetBackup(NBU) 6.0 with VxSS 4.2 or NetBackup 5.1 with VxSS 4.1 installed and configured correctly.

1. Insert NetBackup 6.5 Infrastructure Core Services Disk into the Master Server.  Run "VxSSVRTSatSetup.exe" from within the Authentication Directory. The installer will display a message stating it will perform an upgrade of the Authentication Service. Select Yes to continue. When prompted for a Root and Authentication password leave boxes blank and click "Next" to continue.

2. Run "VRTSazSetup.exe" from within the Authorization Directory. The installer will display a message stating it will perform an upgrade of the Authorization Service. Select Yes to continue.

3. Test the upgrade by accessing the NetBackup Administration Console. If the upgrade was successful the console will grant access and under "Help" menu, select "Current NBAC User". This should show the account logged into the console currently.

4. Set the Master server Access Control to "Prohibited" in the master server host properties. Restart the NetBackup Services.

5. Upgrade the server to NetBackup 6.5. Verify the Upgrade was successful prior to continuing.

6. Next, run the following commands from the Windows Command Prompt to upgrade the access control permissions for NetBackup 6.5.
Note: The NetBackup install drive/path may vary.

C:\Program Files\VERITAS\NetBackup\bin>bpnbat -login <use an administrator account to login>

C:\Program Files\VERITAS\NetBackup\bin\Admincmd>bpnbaz.exe -checkupgrade

Upgrade is required.

C:\Program Files\VERITAS\NetBackup\bin\Admincmd>bpnbaz.exe -upgrade
Update the NBU_Operator group with Read permission for NBU_RES_VolumeGroup and NBU_RES_VolumePool.
Perform this upgrade (y/n): y

Update the NBU_Operator group with Read permission for NBU_RES_DiskPool and NBU_RES_ServerGroup.
Perform this upgrade (y/n): y

Update the NBU_Admin group with administrative privileges for NBU_RES_DiskPool,
NBU_RES_FatClient, NBU_RES_FatServer, NBU_RES_Vault, and NBU_RES_ServerGroup.
Perform this upgrade (y/n): y

Update the Vault_Operator group with operator privileges for NBU_RES_Vault.
Perform this upgrade (y/n): y

Update the NBU_User group with Read permission for NBU_RES_HostProperties.
Perform this upgrade (y/n): y

Add new NBU_SAN Admin group for SAN Administrative tasks. No users will be added to this group at this time
Perform this upgrade (y/n): y

Operation completed successfully.

7.  The following commands can then be used to check that the upgrade of the access control permissions were successful.
C:\Program Files\VERITAS\NetBackup\bin\Admincmd>bpnbaz.exe -checkupgrade
Operation completed successfully.

C:\Program Files\VERITAS\NetBackup\bin\Admincmd>bpnbaz.exe -listgroups
NBU_User
NBU_Operator
NBU_Admin
NBU_Security Admin
Vault_Operator
NBU_SAN Admin
Operation completed successfully.

8.  Change the master server to use NetBackup Access control by accessing the "Host Properties", then select the master server.  Select "Access Control" and set the value to "Automatic".  No modifications should be needed. Click "Apply" then "Ok".

9.  Restart the NetBackup Services. Log into the console.

10.  Upgrade Authentication and Authorization clients on any remaining Media Servers and Remote Administration Consoles.

11.  Final, if Authentication is in use on any clients, those clients will need to have the Authentication Client upgraded as well.



Legacy ID



297881


Article URL http://www.symantec.com/docs/TECH57724


Terms of use for this information are found in Legal Notices