Enhanced Authentication and Authorization

Enhanced authentication allows each side of a NetBackup connection to verify the host and user on the other side of the connection. By default, NetBackup runs without enhanced authentication.

Enhanced authorization determines if authenticated users (or groups of users) have NetBackup administrative privileges. By default, NetBackup provides administrative privileges to UNIX root administrators or Windows system administrators on NetBackup servers. In order to use the enhanced authorization, you must configure and enable it.

• Common Configuration Elements
• Enhanced Authentication
• Enhanced Authorization

---

  Note    Access Management and Enhanced Authorization and Authentication are independent methods of access control. Access Management is the newest and will be the preferred method in future NetBackup releases. If both Access Management and Enhanced Authorization and Authentication are configured, Access Management takes precedence.

---

There are additional types of authorization outside of what is described in this chapter.

One of these is the appearance of MEDIA_SERVER entries in the bp.conf. The machine listed as a MEDIA_SERVER has media server privileges only and has no administrative privileges.

Another form of authorization concerns restricting administrative privileges when using the NetBackup Java Console (jnbSA) through entries in auth.conf.