[Veritas-bu] Managing Netbackup as non-root
2002-10-09 15:59:46
Subject: |
[Veritas-bu] Managing Netbackup as non-root |
From: |
david AT datastaff DOT com (David A. Chapa) |
Date: |
Wed, 9 Oct 2002 15:59:46 -0400 |
Mark:
> 1) Can Netbackup be installed as non-root?
No, must be root in order to install the product. However, you can allow non-
root users to "update" existing clients using the scripts.
> 2) Can Netbackup processes be stopped and started by non-root userids?
Yes (see #4), or you can use sudo as well.
> 3) How are other primary contacts for Netbackup supporting the product,
> Root vs Non-root userids?
Many of my clients have gone with sudo, its easily scripted and from an audit
perspective everything is logged.
> 4) Can all Netbackup commands be run with a non-root userid? Is this
> documented?
Yes and Yes, page 253 of the NB34 Admin Guide for Unix using Java or here's an
excerpt for the NBU 3.2 Admin Guide:
---BEGIN EXCERPT---
By default, you must be a root user to perform NetBackup administration
through xbpadm or bpadm. The following procedure describes a method for
authorizing nonroot users to use these utilities.
1. Create a distinct UNIX group (for example, nbadmin).
2. Execute the following commands as the root user on the NetBackup master
server:
cd /usr/openv/netbackup/bin
chgrp nbadmin bpadm xbpadm xbpmon initbprd bprd bpdbm xnb
chmod 4550 bpadm xbpadm xbpmon bprd initbprd bpdbm
cd admincmd
chgrp nbadmin *
---END EXCERPT---
David
Quoting markjessup AT northwesternmutual DOT com:
> We are in the process of implementing Netbackup 4.5 into a new HP-UX
> environment. Our Backup team is a separate group then our Unix Admin
> team. There is a move to limit root access to our Unix servers. This
> would apply to the Backup team also.
>
> My questions are:
>
> 1) Can Netbackup be installed as non-root?
> 2) Can Netbackup processes be stopped and started by non-root userids?
> 3) How are other primary contacts for Netbackup supporting the product,
> Root vs Non-root userids?
> 4) Can all Netbackup commands be run with a non-root userid? Is this
> documented?
>
> Any info on this topic would be greatly appreciated. Thanks!
>
>
>
> Mark Jessup
> IS Manager, Enterprise Storage and Output Management
> Northwestern Mutual
> (414) 665-3968
> markjessup AT northwesternmutual DOT com
>
>
>
|
|
|