Installing and Configuring Access Control for Clients

The following steps describe configuring NetBackup Access Control for a client in a NetBackup configuration. A client requires Authentication Client software.

1. Install NetBackup client software on the system.
2. Using the VxSS installation CD, install Authentication client software on the system.

   Using bpnbat, register the client with the Authentication Broker, as described in step 2.

   For example, if registering a machine (win_client) with the Authentication Broker (win_master), run the following command on the At server (win_master).

   1. To add the client locally to the private domain, run the following command on the master server:
   
      bpnbat -AddMachine
      Does the machine use Dynamic Host Configuration Protocol (DHCP)? (y/n) n
      Authentication Broker: win_master.min.com
      Authentication Port: [Enter = Default]:
      Name: win_client.min.com
      Password:  [any password]
      Password:  [enter password again]
      Operation completed successfully.
   2. To create a credential for the client, run the following command on the client:

   Run the following command on the At client (win_client).

   
      bpnbat -loginmachine
      Does this machine use Dynamic Host Configuration Protocol (DHCP)? (y/n) n
      Authentication Broker: win_master.min.com
      Authentication port[ Enter = default]:
      Name: win_client.min.com
      Password: [same password as in step a]
      Operation completed successfully.
3. Set up the proper Access Control host properties for the client. The properties are described in .
   1. Open Access Control host properties for the client (win_client) through the master server. In the NetBackup Administration Console, select NetBackup Management > Host Properties > Clients > Select client win_master > Access Control.
   • Set VxSS mode to Required.
   • Add authentication domains based on the systems where you have installed Authentication servers and the Authentication methods supported.
     For example, given a Windows system configured for Authentication using domain WINUSER, and a UNIX system configured for Authentication using the NIS domain my.min.com, the tab would look like the following:

   

   Click the thumbnail above to view full-sized image.

   2. Set up Access Control on the master server (win_master) for the client:

   On the VxSS tab, add win_client.min.com to the VxSS Network list as Required.