Using BackupExec Agent on HPUX

[Tim Nelson]

Bill,

1) When attempting to re-direct the restore to a different path there was issue. It complained that it could not find any files. Almost like it was looking for the new destination directory on the backup itself. ( i.e. bug ). Restoring to the exact same directory that the backup orgionated from works fine.

2) Using the HP Trusted, /tcb/files/auth. The interesting part here is that the legacy agent works and the new 11d agent does not ( like the code was there once upon a time and was taken away ).

[Martin Gravel · Accepted solution]

Same issue here, running BE 12 with RALUS agent on HP-UX 11.11. Works fine in regular /etc/passwd mode, I tried C2 trusted mode, and also the ShadowPassword module, which only purpose is to move encrypted passwords from the /etc/passwd to the more restricted /etc/shadow file. Once installed, I run the "pwconv" command to convert the /etc/passwd. As soon as it is finished, the BackupExec server cannot connect to the Ralus agent, even after a stop/start of the BERemote service. If I run the "pwunconv" command to rollback the change, then the BE console can connect to the HP-UX server and list the directories.

Have you got any answer from Symantec? Can you tell me exactly which legacy version you're using, and how you got it?

Thanks in advance.

[Tim Nelson]

I believe I downloaded the legacy agent from symantecs website. It is simply the UNIX agent for release 10.

Symantec's answer was that they were not going to fix anything. I must be the only customer that is using it and they do not care.

It might help if every that is having an issue open a call and complain. Maybe then symantec would realize that more than one person is trying to use their product ?

I am currently in the process of replacing all of our backup exec installations with HP Data Protector. It does the same thing and also works across platforms;) It is probably even cheaper.

Hey if HP is going to help then why not give them my money instead of Symantec.

[Martin Gravel]

We used to run HP Data protector (OmniBack were the first versions of the program).

If you can afford it, the software is great, but our monthly license and support fees were very high (3 servers, the bill ran for over 700$ per month).

Using already Symantec's BackupExec on Windows with a tape library, it made sense to have the HP boxes join the parade. Works great until we are audited by security specialists who urge us to safeguard the passwd file.

I'll try to find the RALUS agent version 10, and see how it goes. Thanks for the input, after a year and a half of this thread being idle, I'm very pleased to get an answer so soon!.

I will definitely place a service call to Symantec, there will be twice as much customers involved! :)

I'll post my findings soon hopefully.

[Bill Sadvary]

Just adding my two cents..

I lost the security battle and had to convert from a trusted password database to having passwords in the /etc/passwd. The servers are secured on an internal VLAN and behind a firewall, etc, so I'm not losing a whole lot of sleep over it.

We're running 11.23 and..

Symantec Backup Exec for Windows Servers Remote Agent for Linux/Unix Servers 11.00.7170

Which came from this file that I got from the Windows admin..

BEWS_11D.7170_LINUX-UNIX-MAC-NT4_AGENTS.2.tar

As well as these two patches (which didn't seem to make a whole lot of difference)...

HF51-HP-UX.tar
VRTSralusPatch.tar

It's been running fine for about a month now.

I also logged a call with Symantec, about a year ago. So that makes three of us now.

Inch by inch..

-Bill

[Tim Nelson]

Martin,

I still have this thread on email alerts cuz you never know when someone has something to add...

Now that we have 3 people interested maybe Symantec will step it up.

Here is the biggest argument. The 10d / Legacy agent works with HPUX Trusted password systems. 11d and onward does not. It is obvious to me that someone broke something.

By geezus batman, take the code from the legacy agent, port it into the new agents and be done with it.. Don't even have to reinvent anything.

.....

[Tricia Sambrano]

I am also having trouble installing the BackupExec agent onto HP-UX 11.23. In addition I am on Itanium. I installed the v11.7170 but I cannot get it to connect to the BackupExec Server. Would anyone be able to post their ralus.cfg or any sort of tweaks they had to do to get it to work?

Absolutely amazing the lack of support Symantec gives!

Thanks!
Trish

[Tim Nelson]

The backup exec ralus unix agent does not work with HPUX using the trusted password db.

I have not tested it with HPUX shadow password though.

Other options:

1)Use the legacy agent. It works well with the exception that you must restore to the same server same directory from where the backup was taken.

2) Do not enable trusted password db.

[Martin Gravel]

According to Symantec's support, the legacy agent is not compatible with BackupExec 12 and beyond, so if you decide to go that way, it will prevent you from upgrading your Windows installation to the latest version of Backup Exec...

We run on BE 12.5, still got the issue with trusted database, and Symantec cannot even promise that it will be fixed in next major release (13.0)...

[Tim Nelson]

Probably a case and point Martin.

If you have an enterprise that includes HPUX then find an enterprise backup solution that supports it.

My case with Symantec was opened when 11d first came out. I do not believe Symantec has any interest in supporting HPUX.