Veritas-bu

Re: [Veritas-bu] Windows Admin Console

2009-06-11 15:00:55
Subject: Re: [Veritas-bu] Windows Admin Console
From: "Cornely, David" <David_Cornely AT intuit DOT com>
To: <veritas-bu AT mailman.eng.auburn DOT edu>
Date: Thu, 11 Jun 2009 11:57:41 -0700

Yeah, I’ve already added the system to bp.conf but no luck.

The user I’m logged in as on the Windows box doesn’t have admin privileges there but I don’t have any issue providing that user root login on the master server, which is the account I’m using when providing credentials via the admin console.

I’ll check the port config guide, I’m thinking I missed a port somewhere…

 

 

From: Rusty.Major AT sungard DOT com [mailto:Rusty.Major AT sungard DOT com]
Sent: Thursday, June 11, 2009 11:54
To: Cornely, David
Subject: Re: [Veritas-bu] Windows Admin Console

 


David,
The port configuration guide does a pretty good job at showing what ports are required. For the Windows Admin Console, I think you'll have to use Media Server ports as it's a stripped down Media Server.

I've not tried using AD, but the authorization for Windows Admin Consoles requires SERVER= entries in bp.conf, again because it's an almost Media Server. Without NBAC, I don't think you can get around letting this admin log on without anything other than root priviledges, but then again, I've not tried to lock anyone down before.

Rusty Major, MCSE, BCFP, VCS ▪ Sr. Storage Engineer ▪ SunGard Availability Services ▪ 757 N. Eldridge Suite 200, Houston TX 77079 ▪ 281-584-4693
Keeping People and Information Connected® ▪ http://availability.sungard.com/
P Think before you print
CONFIDENTIALITY:  This e-mail (including any attachments) may contain confidential, proprietary and privileged information, and unauthorized disclosure or use is prohibited.  If you received this e-mail in error, please notify the sender and delete this e-mail from your system.

"Cornely, David" <David_Cornely AT intuit DOT com>
Sent by: veritas-bu-bounces AT mailman.eng.auburn DOT edu

06/11/2009 01:03 PM

To

<veritas-bu AT mailman.eng.auburn DOT edu>

cc

Subject

[Veritas-bu] Windows Admin Console

 




So I’ve tried tracking down the process for doing this but have come up empty in both the admin guides and Symantec knowledge base.  I’ve opened a case with Symantec but it’s a 6 hour callback so I figured maybe someone here has this info or can refer me to a specific procedure in one of the guides that I’ve missed.
 
Environment:
NBU v6.5.3  on master server running Oracle Enterprise Linux (really just a useless version of RHEL).
 
Specifically, I’m trying to configure the remote Windows admin console on a 64- bit W2K3 server to be used by a non-admin user with relying on Active Directory for authorization.  Oh yeah, this is behind a firewall too.
 
The authorization configuration on the master server is rather cryptic and there just isn’t a clear step-by-step process on how to do this (from the packages I need installed on the master to the firewall ports to open to the actual config on the master).  I would have used the Java console instead but discovered there isn’t one for 64-bit Windows until 6.5.4 is realease.
 
TIA,
 
-Dave
 _______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
<Prev in Thread] Current Thread [Next in Thread>