NetBackup 4.5 -- How do you Delegate Admin to Non-Root Users

[Alzhy]

I may probably have not checked but it seems ROOT is the sole administrator of NetBackup Master Server. I'd ike to know how you delegate Netbackup Administration to Non Root users/groups? We are thinking SUDO so they can launch bpadm or jnbSA...

Any thoughts? Does NetBackup 5.0 allow administration/control using a non-root account?

[Sanjay_6]

Hi Nelson,

If you want to do this for the netbackup java GUI, edit the file /usr/openv/java/auth.conf and add the unix user id of the user. They syntax would be

unix_login_id ADMIN=ALL JBP=ALL

Try this link below,

http://seer.support.veritas.com/search_forms/SearchFrame.asp?SearchTerm=non%2droot%20user&Path=seer%2esupport%2everitas%2ecom%2fdocs%2f238228%2ehtm

Hope this helps.

Regds

[Camel_1]

we created a seperate group to allow netbackup administrator to execute the xbp## command, and setup sudo for them to start/shutdown the netbackup processes.

Simon

[Dave La Mar]

Nelson -
Our shop is rather locked down as far as security goes. We found giving admin priviledges via the gui opened us to security concerns. Primarily because the user could then restore any confidential document to another directory.
With that in mind, we do have a lot of scripted backups and wanted them to be able to perform certain functions.
In our case those functions included robot inventories, vmchange, vmupdate, bpmedialist.
With the help of Veritas support we performed the following, as per tehir instructions:

In order to allow a non-root user to issue commands from the command line:

1. Create a group with these users and root
2. chgrp on the bpmedialist, vmchange and vmupdate, vmcheckxxx commands to
be the group just created
3. chmod to 4550

Best of luck.

Regards,

dl