Veritas-bu

[Veritas-bu] Configuring NBAC for OpsCentre Audit Trails

2011-12-01 18:14:42
Subject: [Veritas-bu] Configuring NBAC for OpsCentre Audit Trails
From: Tristan49 <nbu-forum AT backupcentral DOT com>
To: VERITAS-BU AT MAILMAN.ENG.AUBURN DOT EDU
Date: Thu, 01 Dec 2011 11:58:44 -0800
Version:  NetBackup Enterprise 7.1.0.2, OpsCentre (Basic); 1 Master/Media & 2 
additional Media servers.
OS:  Windows 2008 R2 Standard

We have recently upgraded to NBU 7.1.0.2 from 6.5.6  One of the features that 
we wanted to use in our environment was the Ops Centre (Basic) "Monitor" 
function called "Audit Trails" to track who makes changes to Policies, Jobs, 
etc..  According to a tech note 
(http://www.symantec.com/business/support/index?page=content&id=TECH159387), if 
we want to see the actual user, rather than simply 'administrator' we must 
configure NetBackup Access Control (NBAC).

The configuration of NBAC is detailed in the NetBackup Security and Encryption 
Guide (http://www.symantec.com/business/support/index?page=content&id=DOC3655), 
providing various scenarios of configuration, however, not specifically 
mentioning or addressing requirements for Audit Trail functionality.

Three Questions:

1.  Do I need to extend NBAC to all my clients that I am backing up, or just 
configure on my Master & Media servers, if all I want is to track are the user 
id's in OpsCentre Audit Trails, and not restrict or control access to the 
clients for the User ID's or Groups I will be setting up with NBAC?  I would 
prefer not to have to configure the clients if at all possible.  

2. Once I run the command to enable NBAC, is my system still wide open until 
such time as I restrict with the users and groups I am setting up?

3. Has anyone encountered any 'gotchas' with configuring NBAC?

Your assistance with this issue is much appreciated.

Thanks,
Linda

+----------------------------------------------------------------------
|This was sent by Linda.Boughner AT durham DOT ca via Backup Central.
|Forward SPAM to abuse AT backupcentral DOT com.
+----------------------------------------------------------------------


_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

<Prev in Thread] Current Thread [Next in Thread>
  • [Veritas-bu] Configuring NBAC for OpsCentre Audit Trails, Tristan49 <=