Veritas-bu

[Veritas-bu] non root bpbackup

2003-08-12 16:36:52
Subject: [Veritas-bu] non root bpbackup
From: Mark.Donaldson AT experianems DOT com (Donaldson, Mark)
Date: Tue, 12 Aug 2003 14:36:52 -0600
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C36111.76991CB0
Content-Type: text/plain

You can set Netbackup to automatically backup the catalog after every backup
set.  Might be a good setting in this matter.
 
Your Progress DB username, whatever it is, should be able to call bpbackup
and send its own files.  We do this with Oracle & the oracle login.
 
-m

-----Original Message-----
From: Karl.Rossing AT Federated DOT CA [mailto:Karl.Rossing AT Federated DOT CA]
Sent: Tuesday, August 12, 2003 2:27 PM
Cc: veritas-bu AT mailman.eng.auburn DOT edu;
veritas-bu-admin AT mailman.eng.auburn DOT edu
Subject: RE: [Veritas-bu] non root bpbackup



veritas-bu-admin AT mailman.eng.auburn DOT edu wrote on 08/12/2003 03:20:39 PM:

> bpbackup isn't normally a privileged command.  It is, however, 
> limited to reading the files/directories that Unix permissions 
> allow.  bpbackupdb is a root-only command but I suppose you could 
> just chmod it to a SUID program & open the execution permissions.   
>   
> Why allow the user to backup the catalog? 
>   
See i have a DB/Netbackup server. I use cron to run the DB shutdown, then
bpbackup, then start up the db again and submit bpbackupdb. 

I'm moving netbackup to a separate server. I don't want to do root ssh/rsh.
I want to control everything from the DB server. 

Karl 
PS: db server is running progress.


------_=_NextPart_001_01C36111.76991CB0
Content-Type: text/html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=US-ASCII">


<META content="MSHTML 5.50.4926.2500" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=781343520-12082003><FONT face=Arial color=#0000ff size=2>You 
can set Netbackup to automatically backup the catalog after every backup 
set.&nbsp; Might be a good setting in this matter.</FONT></SPAN></DIV>
<DIV><SPAN class=781343520-12082003><FONT face=Arial color=#0000ff 
size=2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=781343520-12082003><FONT face=Arial color=#0000ff size=2>Your 
Progress DB username, whatever it is, should be able to call bpbackup and send 
its own files.&nbsp; We do this with Oracle &amp; the oracle 
login.</FONT></SPAN></DIV>
<DIV><SPAN class=781343520-12082003><FONT face=Arial color=#0000ff 
size=2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=781343520-12082003><FONT face=Arial color=#0000ff 
size=2>-m</FONT></SPAN></DIV>
<BLOCKQUOTE>
  <DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma 
  size=2>-----Original Message-----<BR><B>From:</B> Karl.Rossing AT Federated 
DOT CA 
  [mailto:Karl.Rossing AT Federated DOT CA]<BR><B>Sent:</B> Tuesday, August 12, 
2003 
  2:27 PM<BR><B>Cc:</B> veritas-bu AT mailman.eng.auburn DOT edu; 
  veritas-bu-admin AT mailman.eng.auburn DOT edu<BR><B>Subject:</B> RE: 
[Veritas-bu] 
  non root bpbackup<BR><BR></FONT></DIV><BR><FONT 
  size=2><TT>veritas-bu-admin AT mailman.eng.auburn DOT edu wrote on 08/12/2003 
  03:20:39 PM:<BR><BR>&gt; bpbackup isn't normally a privileged command. 
  &nbsp;It is, however, <BR>&gt; limited to reading the files/directories that 
  Unix permissions <BR>&gt; allow. &nbsp;bpbackupdb is a root-only command but 
I 
  suppose you could <BR>&gt; just chmod it to a SUID program &amp; open the 
  execution permissions. &nbsp;</TT></FONT> <BR><FONT size=2><TT>&gt; 
  &nbsp;</TT></FONT> <BR><FONT size=2><TT>&gt; Why allow the user to backup the 
  catalog?</TT></FONT> <BR><FONT size=2><TT>&gt; &nbsp;</TT></FONT> <BR><FONT 
  size=2><TT>See i have a DB/Netbackup server. I use cron to run the DB 
  shutdown, then bpbackup, then start up the db again and submit 
  bpbackupdb.</TT></FONT> <BR><BR><FONT size=2><TT>I'm moving netbackup to a 
  separate server. I don't want to do root ssh/rsh. I want to control 
everything 
  from the DB server.</TT></FONT> <BR><BR><FONT size=2><TT>Karl</TT></FONT> 
  <BR><FONT size=2><TT>PS: db server is running 
progress.</TT></FONT></BLOCKQUOTE></BODY></HTML>

------_=_NextPart_001_01C36111.76991CB0--

<Prev in Thread] Current Thread [Next in Thread>