Veritas NetBackup™ Virtual Appliance Documentation
- Getting to know the NetBackup Virtual Appliance
- NetBackup Virtual Appliance product description
- Preparing to deploy the appliance
- Deploying and configuring the appliance
- How to deploy and configure a NetBackup Virtual Appliance combined master and media server
- How to deploy and configure a NetBackup Virtual Appliance media server
- How to deploy and configure a NetBackup Virtual Appliance master server
- How to deploy and configure a NetBackup Virtual Appliance CloudCatalyst
- How to deploy and configure a NetBackup Virtual Appliance combined master and media server
- Post initial configuration procedures
- Appliance common tasks
- Storage management
- About NetBackup Virtual Appliance storage configuration
- About viewing storage space information using the Show command
- About OpenStorage plugin installation
- About NetBackup Virtual Appliance storage configuration
- Deduplication pool catalog backup and recovery
- Network connection management
- Managing users
- About user name and password specifications
- About authenticating LDAP users
- About authenticating Active Directory users
- About authenticating Kerberos-NIS users
- About user authorization on the NetBackup Virtual Appliance
- Creating NetBackup administrator user accounts
- Using the appliance
- About configuring Host parameters for your appliance on the NetBackup Virtual Appliance
- About Copilot functionality and Share management
- About NetBackup Virtual Appliance as a VMware backup host
- About running NetBackup commands from the appliance
- About mounting a remote NFS
- About Auto Image Replication from a NetBackup Virtual Appliance
- Monitoring the appliance
- About SNMP
- About Call Home
- Appliance security
- About Symantec Data Center Security on the NetBackup Virtual Appliance
- Setting the appliance login banner
- Upgrading the appliance
- About upgrading to NetBackup Virtual Appliance software version 3.2
- Requirements and best practices for upgrading NetBackup appliances
- Methods for downloading appliance software release updates
- NetBackup client upgrades with VxUpdate
- Appliance restore
- Decommissioning and Reconfiguring
- Troubleshooting
- About disaster recovery
- About NetBackup support utilities
- Appliance logging
- Commands overview
- Appendix A. Appliance commands
- Appendix B. Manage commands
- Appendix C. Monitor commands
- Appendix D. Network commands
- Appendix E. Reports commands
- Appendix F. Settings commands
- Appendix G. Support commands
About user name and password specifications
The user name for the NetBackup Virtual Appliance user account must be in the format that the selected authentication system accepts. Table: User name specifications lists the user name specifications for each user type.
Note:
The Manage > NetBackupCLI > Create command is used to create local users with the NetBackupCLI role. All the local user and password specifications apply to these users.
Table: User name specifications
Description | Administrator (local user) | NetBackupCLI (local user) | Registered remote user |
---|---|---|---|
Maximum length | No restrictions applied | No restrictions applied | Determined by the LDAP, AD, or NIS policy |
Minimum length | 2 characters | 2 characters | Determined by the LDAP, AD, or NIS policy |
Restrictions | User names must not start with:
| User names must not start with:
| Determined by the LDAP, AD, or NIS policy |
Space inclusion | User names must not include spaces. | User names must not include spaces. | Determined by the LDAP, AD, or NIS policy |
The password for the appliance user account must be in the format that the selected authentication system accepts. Table: Password specifications lists the password specifications for each user type.
Table: Password specifications
Description | Administrator (local user) | NetBackupCLI (local user) | Registered remote user |
---|---|---|---|
Maximum length | No restrictions applied | No restrictions applied | Determined by the LDAP, AD, or NIS policy |
Minimum length | Passwords must contain at least eight characters. | Passwords must contain at least eight characters. | Determined by the LDAP, AD, or NIS policy |
Requirements |
|
| Determined by the LDAP, AD, or NIS policy |
Space inclusion | Passwords must not include spaces. | Passwords must not include spaces. | Determined by the LDAP, AD, or NIS policy |
Minimum password age | 0 day | 0 day Note: You can manage the user password age using the Manage > NetBackupCLI > PasswordExpiry command from the NetBackup Virtual Appliance Shell Menu. See Managing NetBackup administrator user account passwords. | Determined by the LDAP, AD, or NIS policy |
Maximum password age | 99999 days (doesn't expire) | 99999 days (doesn't expire) | Determined by the LDAP, AD, or NIS policy |
Password history | The last seven passwords cannot be reused and the new password cannot be similar to previous passwords. | The last seven passwords cannot be reused and the new password cannot be similar to previous passwords. | Determined by the LDAP, AD, or NIS policy |
Password expiry | Not applicable as the password does not expire | Use the Manage > NetBackupCLI > PasswordExpiry command to manage NetBackupCLI user passwords. See Managing NetBackup administrator user account passwords. | Determined by the LDAP, AD, or NIS policy |
Password lockout | None | None | Determined by the LDAP, AD, or NIS policy |
Lockout duration | None | None | Determined by the LDAP, AD, or NIS policy |
Note:
To increase the security of your appliance environment, Veritas recommends that you change the default admin and maintenance account passwords upon initial login to the appliance. You can use the Settings > Password command from the NetBackup Virtual Appliance Shell Menu to change the password. See Changing NetBackup Virtual Appliance user passwords.
Warning:
The NetBackup Virtual Appliance does not support setting the Maintenance account password using commands like passwd. A password that is set in this fashion is overwritten once the system is upgraded. You should use the NetBackup Virtual Appliance Shell Menu to change the Maintenance account password.
The NetBackup Virtual Appliance uses the following password protection measures:
The SHA-512 hashing algorithm is used for protecting the passwords of all customer-accessible local appliance users (local users, NetBackupCLI users, the Administrator user, and the Maintenance user). Whenever you create a new local appliance user, or change an existing local appliance user password, the password is hashed using SHA-512.
The password history is set to 7, meaning that the old passwords are protected and logged up to seven times. If you try to use the old password as the new password, the appliance displays a token manipulation error.
Passwords in transit include the following:
An SSH login where the password is protected by the SSH protocol.