Veritas-bu

Re: [Veritas-bu] Anyone successfully implemented VXSS?

2007-08-27 12:59:46
Subject: Re: [Veritas-bu] Anyone successfully implemented VXSS?
From: Kyle Oliver <k_f_o AT yahoo DOT com>
To: Justin Piszcz <jpiszcz AT lucidpixels DOT com>
Date: Mon, 27 Aug 2007 09:28:21 -0700 (PDT)
I have the need to run some netbackup commands as a non-root user.

I have posted about this numerous times on this forum, and still no luck.

Here is one of my previous posts with more detail of what I am trying to do.

Hello all,
    I am having some troubles trying to get the enhanced
authentication to work as I would like.  I have a small subset of
commands that I am trying to run as a non-root user in NetBackup.  For
reasons that escape me at the moment, Veritas has made this task
extremely difficult and multi-part.  If I add the user to the
authorize.txt file in /usr/openv/var/, some of the commands that I need
to work, do.  Other commands give an error about the user ID is not
superuser.  All of the errors go away for backups of the master server
if I add ALL : <master server> to the methods_allow.txt file and
run a bpauthsync. Backups of clients break with a cannot connect on
socket error.  I can't imagine that I need to go out and touch each of
the clients, that is ugly.

Here are the commands that are problematic:
bppllist, bperror, bpimmedia

Thoughts?

Thanks,
Kyle


----- Original Message ----
From: Justin Piszcz <jpiszcz AT lucidpixels DOT com>
To: Kyle Oliver <k_f_o AT yahoo DOT com>
Cc: veritas-bu AT mailman.eng.auburn DOT edu
Sent: Monday, August 27, 2007 12:02:22 PM
Subject: Re: [Veritas-bu] Anyone successfully implemented VXSS?



On Mon, 27 Aug 2007, Kyle Oliver wrote:

>
> Everything I read out on the web suggests the setting up of VXSS is a 
> perilous task.  Has anyone successfully set it up?
>
> Thanks,
> Kyle
>
>
>
> _______________________________________________
> Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
> http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
>

Or the real question, what are you trying to Achieve?  You may want to use 
NBU Reporter or NBU NOM and assign lower levels of permission that way.

Justin.




_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu