ADSM-L

Re: [ADSM-L] Securing TSM Client

2010-05-11 17:44:52
Subject: Re: [ADSM-L] Securing TSM Client
From: "Huebner,Andy,FORT WORTH,IT" <Andy.Huebner AT ALCONLABS DOT COM>
To: ADSM-L AT VM.MARIST DOT EDU
Date: Tue, 11 May 2010 16:44:04 -0500
When you install TSM, only grant execute access to the TSM team and the account 
the backup runs under.

Andy Huebner

-----Original Message-----
From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf Of 
Leandro Mazur
Sent: Tuesday, May 11, 2010 3:08 PM
To: ADSM-L AT VM.MARIST DOT EDU
Subject: [ADSM-L] Securing TSM Client

Hello everyone !

I don't know if somebody has this kind of problem, but I have the following
situation in the company I work for:

- We have a TSM team to install, configure and maintain the whole backup
process, server and client;
- We have sysadmins that take care of the operational system and the
applications;
- When there's a need for any action to do with backup, they should open a
ticket for the TSM team;

The problem that we have is that the sysadmins are doing backups/archives
and restores/retrieves without our knowledge, with great impact on our
database (among other things...). We would like to block the access on the
client, but we were not successful. If we use "password generate" on
dsm.sys, the password is prompted only at first access. If we use "password
prompt", the scheduler doesn't work (ANS2050E)...
Any sugestions from the experts ? Maybe it could be a improvement to IBM
implement on the future...
__________________________________
Leandro Mazur

This e-mail (including any attachments) is confidential and may be legally 
privileged. If you are not an intended recipient or an authorized 
representative of an intended recipient, you are prohibited from using, copying 
or distributing the information in this e-mail or its attachments. If you have 
received this e-mail in error, please notify the sender immediately by return 
e-mail and delete all copies of this message and any attachments.

Thank you.

<Prev in Thread] Current Thread [Next in Thread>