Veritas-bu

Re: [Veritas-bu] Support of NetBackup with RBAC

2009-04-28 17:04:59
Subject: Re: [Veritas-bu] Support of NetBackup with RBAC
From: "Nardello, John" <john.nardello AT wamu DOT net>
To: "Chapman, Scott" <Scott.Chapman AT icbc DOT com>, <VERITAS-BU AT MAILMAN.ENG.AUBURN DOT EDU>
Date: Tue, 28 Apr 2009 14:01:27 -0700
Probably depends on how Veritas/Symantec has NetBackup coded, as to
whether it checks your effective authorization when you run the command,
or does some kind of check on whether your UID=0. 'man rbac' had a bunch
of info on how to modify code for that, no idea if they read it though.
=) 

If you really want to know whether it works for your environment though,
setup a test server, have them give you full permissions via RBAC, and
see if the CLI commands work. Less than full permissions isn't going to
cut it for Tier 3/4 folks though if that was their goal - too much
catalog manipulation and installation/patching work. 

- John Nardello


-----Original Message-----
From: veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Chapman,
Scott
Sent: Monday, April 27, 2009 1:46 PM
To: VERITAS-BU AT MAILMAN.ENG.AUBURN DOT EDU
Subject: [Veritas-bu] Support of NetBackup with RBAC

We are being pushed to support our netbackup environment, with servers
running on solaris10, using Role Based Access Control (RBAC).  I'm
wondering if anyone out there is doing this?  

It has always been my understanding that netbackup needed to be
installed and supported by the user "root" and NOTHING else.....
Thoughts??

Thanks!

Scott
------------------------------------------------------------
This email and any attachments are intended only for the named
recipient and may contain confidential and/or privileged material.
Any unauthorized copying, dissemination or other use by a person
other than the named recipient of this communication is prohibited.
 If you received this in error or are not named as a recipient,
please notify the sender and destroy all copies of this email
immediately.

_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu