Veritas-bu

Re: [Veritas-bu] NBU & Java GUI authentication on AIX

2008-07-14 19:42:22
Subject: Re: [Veritas-bu] NBU & Java GUI authentication on AIX
From: <Mark.Donaldson AT cexp DOT com>
To: <briandiven AT northwesternmutual DOT com>, <VERITAS-BU AT mailman.eng.auburn DOT edu>
Date: Mon, 14 Jul 2008 17:22:02 -0600
We use "sudo" for granting command-line privileges to NB commands to our
operators.

Used to have a menu-driven script for the general tasks for our
operators, too - just grant privs to the script. 

-----Original Message-----
From: veritas-bu-bounces AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of
briandiven AT northwesternmutual DOT com
Sent: Monday, July 14, 2008 4:42 PM
To: VERITAS-BU AT mailman.eng.auburn DOT edu
Subject: [Veritas-bu] NBU & Java GUI authentication on AIX

We are looking at re-designing our Master/Media OS environment and have
considered AIX (currently HP-UX).  We have also struggled with VxSS as
have several of you - so we have continued to rely on the non-root admin
capabilities.  Our initial exposure to AIX gave us issues with the Java
GUI.  

This comes from a tech note:
"At this time NetBackup does not support LDAP with AIX.  As NetBackup is
compiled to work with AIX 5 (5.1, 5.2, 5.3), it has to be built against
the most common version.  The AIX 5.1 (which NetBackup is complied
against) and AIX 5.2 did not (by default) contain the LDAP / PAM
authentication libraries, and this is why the NetBackup Java GUI will
not work with LDAP on AIX platforms. 


If a customer is not satisfied with this feature of NetBackup and
requires NetBackup to work with LDAP and AIX, please raise an
enhancement request by visiting "

We are not allowed to give root access to the NBU admins, however SESU
is OK.  We have approximately 80+ DB admins, Operations personnel, and
tape librarians that I rely on the Java GUI to control their access
using non-root admin and the auth.conf file in /opt/openv/java.

Can anyone suggest viable options that would pass the security and audit
departments.  Is VxSS capable of this and is this my only option?

TIA

Brian

This e-mail and any attachments may contain confidential information of
Northwestern Mutual. If you are not the intended recipient of this
message, be aware that any disclosure, copying, distribution or use of
this e-mail and any attachments is prohibited. If you have received this
e-mail in error, please notify Northwestern Mutual immediately by
returning it to the sender and delete all copies from your system.
Please be advised that communications received via the Northwestern
Mutual Secure Message Center are secure. Communications that are not
received via the Northwestern Mutual Secure Message Center may not be
secure and could be observed by a third party. Thank you for your
cooperation.


_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu