Veritas NetBackup™ Self Service Configuration Guide

Last Published:
Product(s): NetBackup (8.3)
  1. Licensing
    1.  
      Applying the full License
  2. Configuring a Self Service solution
    1.  
      About configuring a Self Service solution
    2.  
      Self Service scheduled backup
    3.  
      Configuration checklist
  3. Configuring a NetBackup master server
    1.  
      About configuring the NetBackup master server
    2.  
      Enabling communication with a Windows NetBackup master server
    3.  
      Enabling communication with a UNIX NetBackup master server
    4.  
      Enabling communication with a NetBackup appliance
    5.  
      Enabling communication with a NetBackup master server using the REST API
    6.  
      Creating NetBackup Template Policies
  4. Configuring Self Service
    1.  
      About Self Service configuration
    2.  
      Configuring backup servers
    3.  
      Configuring protection
    4.  
      Configuring the Backup Now form
    5.  
      Configuring tenants
    6.  
      Access rights
    7.  
      Registering computers
    8. Configuring the home page
      1.  
        Home page integration settings
  5. Customizing Self Service
    1.  
      Language settings
    2.  
      Creating or customizing a request form
    3.  
      Themes
    4.  
      Notices
  6. User authentication methods
    1.  
      About user authentication methods
    2.  
      Forms based authentication
    3.  
      Windows Authentication
    4.  
      Active Directory Import
    5.  
      Configuring Self Service to use Federated Single Sign-On
  7. Troubleshooting
    1.  
      About troubleshooting
    2.  
      Where to find troubleshooting information
    3.  
      Impersonation of a tenant user
    4.  
      Issues with Remote PowerShell to Windows master servers
  8. Appendix A. NetBackup policy types
    1.  
      List of NetBackup policy types
  9. Appendix B. Dashboard traffic light status and usage
    1.  
      About dashboard traffic light status and usage
    2.  
      Assets with a protection type
    3.  
      Assets without a Protection Type
    4.  
      Usage and Charging
  10. Appendix C. Synchronizing data from NetBackup
    1.  
      About synchronizing data from NetBackup
  11. Appendix D. NetBackup Self Service data caching process
    1.  
      About NetBackup Self Service data caching process
    2.  
      NetBackup Data Synchronization
    3.  
      Backup Now
    4.  
      Protect
    5.  
      Unprotect
  12. Appendix E. Integration settings
    1.  
      About integration settings
    2.  
      NetBackup Adapter
    3.  
      NetBackup Adapter Usage
    4.  
      NetBackup Adapter Access Rights
    5.  
      Action Request Types
    6.  
      vCloud Director import
  13. Appendix F. REST API
    1.  
      About the REST API
  14. Appendix G. Glossary
    1.  
      Glossary

Enabling communication with a UNIX NetBackup master server

NetBackup Self Service uses Secure Shell (SSH) to communicate with a UNIX NetBackup master server. The configuration of SSH is outside the scope of this guide. NetBackup Self Service, however, requires the credentials to communicate with the SSH server on the master server.

  • By default SSH uses Port 22.

    To specify a different port, set the server name to server_name:port_number. For example, MyServer:23.

  • The user account that NetBackup Self Service uses to logon to SSH on the master server needs sudo configuration:

    • The user account should not use requiretty.

    • The user account should not require a sudo password.

    • With sudo, the user account should run all commands in /usr/openv/netbackup/bin and /usr/openv/netbackup/bin/admincmd.

User authentication modes that are supported include:

  • Password

    NetBackup Self Service passes the user name and password at logon.

  • Public key

    The public key of the user is stored in the authorized_keys for the user on the master server. The private key of the user is stored in OpenSSH format in the NetBackup Self Service portal.

  • Keyboard-interactive

    NetBackup Self Service sends the password for the user to a keyboard-interactive ssh session. The password is sent in response to a configurable password prompt. The default password prompt is Password:.

To configure NetBackup Self Service and the NetBackup master server for public key authentication

  1. Create a Public Private key pair using a key generator like PuTTYgen.
  2. Log on to the master server as the required master server user
  3. Add the public key to the user's authorized_keys file in the master server's operating system format.
  4. Convert the Private key into OpenSSH format encrypted with a passphrase
    -----BEGIN RSA PRIVATE KEY-----
    Proc-Type: 4,ENCRYPTED
    DEK-Info: DES-EDE3-CBC,997295A8E365412F
    
    SIKdyjX4UoDm03kprqfkCGQYc/thmNIlWYztEomjyRaMyEYlh0ZIC9Kx7XnMNnSk
    ...
    MUxIcZW8d8fF3P4s+OLidxG03H6C/AsGLzJtpecjPQA=
    -----END RSA PRIVATE KEY-----
  5. When you create the backup server in NetBackup Self Service:
    • Choose Public Key for the Authentication.

    • Enter the user account to connect to the master server in User Account.

    • Paste the encrypted OpenSSH format private key in OpenSSH Private Key.

    • Enter the passphrase in Password and Confirm Password.

More information about testing the connection once you have created your first backup server is available.

See Configuring backup servers.