Hi Gary,
I had an in house conversation about this one, (as we use accounts other
than root to have limited access to our backup system) with a reliable
source. He advised should you wish to administer Netbackup with a user
other than root; you would need to change the owner of your library, drives,
etc. Then when you applied a patch, these would then be reverted to root
ownership (well, most of the time!).
IMHO, if your backup administrator is trusted to be responsible for
safeguarding your companies' data, then they should be trusted to have root
privilege.
Met vriendelijke groet / Kind regards,
Louise
-__--__--
Message: 8
From: "Sperano, Gary" <Gary.Sperano AT T-Mobile DOT com>
To: Ryan Anderson <Ryan.Anderson AT udlp DOT com>,
veritas-bu AT mailman.eng.auburn DOT edu
Subject: RE: [Veritas-bu] Administering Netbackup without root or root pas
sword
Date: Mon, 28 Oct 2002 04:33:30 -0800
I think you may have missed my point. "FULLY" administer Netbackup is what
I am looking for not just from the JAVA side. This includes executing any
command line option and having the ability to read, write, execute, create,
etc. any and all necessary files.
Any ideas now?
Gary A. Sperano Jr.
Technical Specialist II
T-Mobile USA - Atlanta
(770) 604-3165 Desk
(404) 610-9566 Cell
gary.sperano AT t-mobile DOT com
-----Original Message-----
From: Ryan Anderson [mailto:Ryan.Anderson AT udlp DOT com]
Sent: Friday, October 25, 2002 4:11 PM
To: veritas-bu AT mailman.eng.auburn DOT edu; Gary.Sperano AT T-Mobile DOT com
Subject: Re: [Veritas-bu] Administering Netbackup without root or root
password
Yes. You just need to edit the /usr/openv/java/auth.conf (as root ;-)
appropriately to give a non-root user the ability to do all NBU
functions. For user 'billybo' to have all administrator functions would
have an entry like this:
billybob ADMIN=ALL JBP=ALL
This is for using the Java GUI, jnbSA.
RCA
--
Ryan C. Anderson
Unix Administrator
United Defense L.P.
desk 763.572.6684
pager 952.235.9936
mobile 612.419.9362
>>> "Sperano, Gary" <Gary.Sperano AT T-Mobile DOT com> 10/25/02 01:14PM >>>
Is there anybody out there that is FULLY administering Veritas
Netbackup who
is not a UNIX administrator nor has the ability to become root or has
the
root password. If so...how are you able to accomplish this?
Gary A. Sperano Jr.
Technical Specialist II
T-Mobile USA - Atlanta
(770) 604-3165 Desk
(404) 610-9566 Cell
gary.sperano AT t-mobile DOT com
_______________________________________________
Veritas-bu maillist - Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
--__--__--
===========================================================
De verzonden informatie is uitsluitend bestemd voor de geadresseerde
natuurlijke persoon of rechtspersoon en bevat mogelijk vertrouwelijke en/of
geprivilegeerde gegevens. Met uitzondering van de geadresseerde persoon is
het niet toegestaan de informatie openbaar te maken, te kopieren, te
verspreiden of anderszins actie te ondernemen op basis van de informatie.
Indien u de informatie abusievelijk heeft ontvangen, neem dan contact op met
de afzender en verwijder de informatie uit alle computers. Dutchtone staat
niet in voor de juiste en complete verzending van de informatie, noch is zij
aansprakelijk voor de vertraagde ontvangst hiervan.
The information transmitted is intended exclusively for the person or entity
to which it is addressed and may contain confidential and/or privileged
material. Any disclosure, copying, distribution or other action based upon
the information by persons or entities other than the intended recipient is
prohibited. If you receive this information in error, please contact the
sender and delete the material from any and all computers. Dutchtone does
not warrant a proper and complete transmission of this information, nor does
it accept liability for any delays.
===========================================================
|
