Media Server Verification Points
The following sections describe procedures for UNIX media server verification.
Verify the Media Server
To determine which Authentication broker the media server is authenticated against, run bpnbat -whoami. For example:
bpnbat -whoami -cf /usr/openv/var/vxss/credentials/unix_media.min.com
Name: unix_media.min.com
Domain: NBU_Machines@unix_master.min.com
Issued by: /CN=broker/OU=root@unix_master.min.com/O=vx
Expiry Date: Nov 9 14:48:08 2004 GMT
Authentication method: VERITAS Private Security
Operation completed successfully.
Verify that the Server has Access to the Authorization Database
To make sure that the media server is able to access the Authorization database as it needs, run bpnbaz -ListGroups -CredFile "directory_containing_AZ_db"
For example:
bpnbaz -ListGroups -CredFile
/usr/openv/var/vxss/credentials/unix_media.min.com
NBU_User
NBU_Operator
NBU_Admin
NBU_Security Admin
Vault_Operator
Operation completed successfully.
If this command fails, run bpnbaz -AllowAuthorization on the master server that is the Authorization broker (unix_master).
Unable to Load Library Message
Verifying the media server and verifying that the media server has access to the proper database indirectly informs us that the VxSS client libraries for both At and Az are properly installed. If either of these procedures fail with messages pertaining to "unable to load libraries," check to make certain the Authentication and Authorization client libraries are installed. See the VERITAS Security Services Installation Guide on the VxSS installation CD.
You may also verify that the Authentication domains are correct by viewing the Access Control host properties for this media server, or by using cat(1)ing the bp.conf file.
|
