Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Java console - auth.conf issue

Created: 23 Oct 2013 • Updated: 23 Oct 2013 | 6 comments
This issue has been solved. See solution.

Hello,

We have a windows master setup and we do a large amount of file restores which I am trying to move to the service desk. I have installed the java console on the Terminal servers that we use and I can logon and administer the master server.

I am trying to restrict access by placing an auth.conf file for a test user on the terminal server so access is only for BAR, but when I log on I have access to everything.

The documentation in the admin guide is very confusing and mostly relates to Unix systems in the admin guide (about auth.conf and java console)

Any ideas how I can get this to work? We are on 7.1.0.4

Thanks

Operating Systems:

Comments 6 CommentsJump to latest comment

RamNagalla's picture

you need to have the  user name entries in the auth.conf below is the location in the Master server.

 <install_path>\VERITAS\Java\auth.conf

see the below tech note

http://www.symantec.com/business/support/index?page=content&id=TECH16924

Entry should be like below

<username> ADMIN=JBP JBP=BAR

ALL = Administration of all applications
AM = Activity Monitor
BMR = Bare Metal Restore
BPM = Backup Policy Management
BAR or JBP = Backup, Archive and Restore
CAT = Catalog
DM = Device Manager
HPD = Host Properties
MM = Media Management
REP = Reports
SUM = Storage Unit Management
VLT = Vault Management

Marianne's picture

but when I log on I have access to everything.

Do you logon with your own user name or as test user?

Check auth.conf entries for test user as per Nagalla's excellent post.

Supporting Storage Foundation and VCS on Unix and Windows as well as NetBackup on Unix and Windows
Handy NBU Links

gustav's picture

Do I need to install Java admin console on master - because it's not at present.

I have entry

domain\<uname> ADMIN=JBP+HPD on auth.conf on Terminal Server but when I log on with that user it gives me everything.

thanks

Marianne's picture

You need to create auth.conf on the master - no need to install Java Console.

Create Java folder: <install_path>\VERITAS\Java\ then create auth.conf.

Check that Windows text editor does not add .txt extension.

Supporting Storage Foundation and VCS on Unix and Windows as well as NetBackup on Unix and Windows
Handy NBU Links

SOLUTION
Nicolai's picture

One problem with the Java auth.conf file is that all users can press the "cancel all jobs" bottom..

For a more granular setup consider using NBAC (netbackup access control).

Assumption is the mother of all mess ups.

If this post answered your'e qustion -  Please mark as a soloution.

gustav's picture

Thanks for your help - got it working now. I had auth.conf on N:drive where catalog and database was also needed putting in c:\pro*\Ver*

all sorted now smiley