Installing and Configuring Access Control for Media Servers

The following steps describe configuring NetBackup Access Control for a media server in a NetBackup configuration. A media server requires Authentication Client software and Authorization Client software.

1. Complete all NetBackup media server installations or upgrades.
2. Using the VxSS installation CD, install Authentication Client software on the system.
3. Using the VxSS installation CD, install the Authorization Client software on the media server.
4. On the master server, create a machine account for the media server. Make sure that the Authentication and the Authorization services are running. See UNIX Verification Points or Windows Verification Points.

   The command in this step must be run as either root (UNIX) or as a member of the local Administrator group (Windows) on the Root+AB Authentication broker. For more information about this step, see

   bpnbat is located in directory /usr/openv/netbackup/bin

   On the master server, run:

   
      bpnbat -addmachine
      Does this machine use Dynamic Host Configuration Protocol (DHCP)? (y/n) n
      Authentication Broker: win_master
      Authentication port[ Enter = default]:
      Machine Name: win_media
      Password: *******
      Password: *******
      Operation completed successfully.
5. Log in to the machine account for the media server.

   For more information about this step, see

   On the media server, run:

   
      bpnbat -LoginMachine
      Does this machine use Dynamic Host Configuration Protocol (DHCP)? (y/n) n
      Authentication Broker: win_master
      Authentication port[ Enter = default]:
      Machine Name: win_media
      Password: *******
      Operation completed successfully.

   ---

     Note    Repeat this step for each alias used by NetBackup.

   ---

6. Add the media server as a host authorized to perform Authorization checks.

   For more information about this step, see

   bpnbaz is located in directory /usr/openv/netbackup/bin/admincmd

   On the master server, run:

   
      bpnbaz -AllowAuthorization win_media
      Operation completed successfully.
7. Set up the proper Access Control host properties for the media server. The properties are described in .
   1. Open Access Control host properties for the media server (win_media) through the master server. In the NetBackup Administration Console, select NetBackup Management > Host Properties > Media Server > Select media server win_media > Access Control.
   • Set VxSS mode to Required. If some clients will not use NetBackup Access Control, set to Automatic.
   • Add authentication domains based on the systems where you have installed Authentication servers and the Authentication methods supported.
     For example, given a Windows system configured for Authentication using domain WINUSER, and a UNIX system configured for Authentication using the NIS domain my.min.com, the tab would look like the following:

   

   Click the thumbnail above to view full-sized image.

   • On the Authorization Services tab, indicate the host that will perform authorization for this media server.
   2. Configure Access Control on the master server (win_master) for the media server:

   On the VxSS tab, add win_media.min.com to the VxSS Network list as Required.