Veritas NetBackup™ Virtual Appliance Documentation
- Getting to know the NetBackup Virtual Appliance
- NetBackup Virtual Appliance product description
- NetBackup Virtual Appliance supported features
- About the NetBackup Virtual Appliance documentation
- NetBackup Virtual Appliance 5.1.1 new features, enhancements, and changes
- Known limitations of the NetBackup Virtual Appliance 5.1.1 release
- Operational Notes for the NetBackup Virtual Appliance 5.1.1 release
- Preparing to deploy the appliance
- Deploying and configuring the appliance
- Post initial configuration procedures
- Appliance common tasks
- Storage management
- About NetBackup Virtual Appliance storage configuration
- About viewing storage space information using the Show command
- Resizing a partition
- Troubleshooting resize-related issues
- Moving a partition
- Monitoring the progress of storage manipulation tasks
- Scanning storage devices using the NetBackup Virtual Appliance Shell Menu
- Adding storage space for the NetBackup Virtual Appliance
- Removing an existing storage disk
- About OpenStorage plugin installation
- About NetBackup Virtual Appliance storage configuration
- Deduplication pool catalog backup and recovery
- About the NetBackup Virtual Appliance deduplication pool catalog backup policy
- Automatic configuration of the NetBackup Virtual Appliance deduplication pool catalog backup policy
- Manually configuring the NetBackup Virtual Appliance deduplication pool catalog backup policy
- Manually updating the NetBackup Virtual Appliance deduplication pool catalog backup policy
- Recovering the NetBackup Virtual Appliance deduplication pool catalog
- Network connection management
- About IPv4-IPv6-based network support
- Network settings for the NetBackup Virtual Appliance
- Configuring DNS and host name mapping for the NetBackup Virtual Appliance
- Setting the date and time on a NetBackup Virtual Appliance
- Configuring static routes on the NetBackup Virtual Appliance
- Expanding the bandwidth on the NetBackup Virtual Appliance
- Managing users
- About managing NetBackup Virtual Appliance users
- About NetBackup Virtual Appliance account types
- Adding NetBackup Virtual Appliance users
- Deleting NetBackup Virtual Appliance users
- Adding NetBackup Virtual Appliance user groups
- Deleting NetBackup Virtual Appliance user groups
- Granting roles to NetBackup Virtual Appliance users and user groups
- Revoking roles from NetBackup Virtual Appliance users and user groups
- About user name and password specifications
- Changing NetBackup Virtual Appliance user passwords
- About password management and recovery
- About authenticating LDAP users
- Adding or modifying an LDAP server configuration on the NetBackup Virtual Appliance
- Importing an LDAP server configuration for the NetBackup Virtual Appliance
- Setting the SSL certification for LDAP on the NetBackup Virtual Appliance
- Exporting an LDAP server configuration from the NetBackup Virtual Appliance
- Unconfiguring LDAP user authentication on the NetBackup Virtual Appliance
- Disabling LDAP user authentication on the NetBackup Virtual Appliance
- Enabling LDAP user authentication on the NetBackup Virtual Appliance
- Adding an LDAP attribute mapping on the NetBackup Virtual Appliance
- Deleting an LDAP attribute mapping on the NetBackup Virtual Appliance
- About authenticating Active Directory users
- About authentication using smart cards and digital certificates
- Generic user authentication guidelines
- About user authorization on the NetBackup Virtual Appliance
- Creating NetBackup administrator user accounts
- Deleting NetBackup administrator user accounts
- Using the appliance
- About configuring Host parameters for your appliance on the NetBackup Virtual Appliance
- About Copilot functionality and Share management
- About NetBackup Virtual Appliance as a VMware backup host
- About running NetBackup commands from the appliance
- Running NetBackup commands from the NetBackup Virtual Appliance
- Creating a NetBackup touch file from the NetBackup Virtual Appliance
- Best practices for running NetBackup commands from the NetBackup Virtual Appliance
- About NetBackup operating system commands
- Known limitations of running NetBackup commands from the NetBackup Virtual Appliance
- About mounting a remote NFS
- About Auto Image Replication from a NetBackup Virtual Appliance
- Generating certificates
- Monitoring the appliance
- About NetBackup Virtual Appliance alerts
- Setting up email notifications for a NetBackup Virtual Appliance
- Setting up SNMP notifications for a NetBackup Virtual Appliance
- Enabling and disabling Call Home from the appliance shell menu
- Configuring a Call Home proxy server from the NetBackup Virtual Appliance Shell Menu
- About SNMP
- About Call Home
- About AutoSupport
- About storage email alerts
- Appliance security
- About Symantec Data Center Security on the NetBackup Virtual Appliance
- About data security
- About data integrity
- About data classification
- About data encryption
- About SSL usage
- About implementing external certificates
- About the NetBackup Virtual Appliance intrusion detection system
- About the NetBackup Virtual Appliance intrusion prevention system
- Major components of the NetBackup Virtual Appliance OS
- OS STIG hardening for NetBackup Virtual Appliance
- FIPS 140-2 conformance for NetBackup Virtual Appliance
- Disable user access to the NetBackup appliance operating system
- Manage support access to the maintenance shell
- About the appliance login banner
- Setting the appliance login banner
- Log Forwarding feature overview
- Upgrading the appliance
- About upgrading to NetBackup Virtual Appliance software version 5.1.1
- Requirements and best practices for upgrading NetBackup appliances
- Pre-upgrade tasks for appliance upgrades
- Methods for downloading appliance software release updates
- Installing a NetBackup Virtual Appliance software update using the NetBackup Virtual Appliance Shell Menu
- Troubleshooting upgrade issues
- NetBackup client upgrades with VxUpdate
- Appliance restore
- Decommissioning and Reconfiguring
- Troubleshooting
- About troubleshooting the NetBackup Virtual Appliance
- About contacting Technical Support
- Determining the NetBackup Virtual Appliance serial number
- About disaster recovery
- About NetBackup support utilities
- Troubleshooting NetBackup Virtual Appliance deployment or initial configuration issues
- Error messages displayed on the NetBackup Virtual Appliance Shell Menu
- NetBackup status codes applicable for NetBackup Virtual Appliance
- Installing an EEB
- Rolling back an EEB using the NetBackup Virtual Appliance Shell Menu
- Appliance logging
- About NetBackup Virtual Appliance log files
- Viewing log files using the Support command
- Where to find NetBackup Virtual Appliance log files using the Browse command
- Enabling and disabling VxMS logging
- Gathering device logs on a NetBackup virtual appliance
- Moving the log data
- About forwarding logs to an external server
- Commands overview
- Appendix A. Appliance commands
- Appendix B. Manage commands
- Manage > Software > Delete
- Manage > Software > Download
- Manage > Software > List
- Manage > Software > Install
- Manage > Software > Share
- Manage > Software > Readme
- Manage > Software > Rollback
- Manage > Software > Cancel
- Manage > Software > DownloadAnalyzer
- Manage > Software > DownloadProgress
- Manage > Software > UpgradeStatus
- Manage > Software > VxUpdate
- Manage > Storage > Show
- Manage > Storage > Add
- Manage > Storage > Create
- Manage > Storage > Delete
- Manage > Storage > Edit
- Manage > Storage > Monitor
- Manage > Storage > Move
- Manage > Storage > Remove
- Manage > Storage > Resize
- Manage > Storage > Scan
- Manage > OpenStorage > Install
- Manage > OpenStorage > List
- Manage > OpenStorage > Readme
- Manage > OpenStorage > Share
- Manage > OpenStorage > Uninstall
- Manage > MountPoints > List
- Manage > MountPoints > Mount
- Manage > MountPoints > Unmount
- Manage > License
- Manage > Certificates > Generate
- Manage > Certificates > Delete
- Manage > NetBackupCLI > Create
- Manage > NetBackupCLI > Delete
- Manage > NetBackupCLI > List
- Appendix C. Monitor commands
- Appendix D. Network commands
- Network > Configure
- Network > Date
- Network > DNS
- Network > Gateway
- Network > Hostname
- Network > Hosts
- Network > IPv4
- Network > IPv6
- Network > LinkAggregation
- Network > NetStat
- Network > NTPServer
- Network > Ping
- Network > SetProperty
- Network > Show
- Network > TimeZone
- Network > TraceRoute
- Network > Unconfigure
- Network > WANOptimization
- Appendix E. Reports commands
- Appendix F. Settings commands
- Settings > Deduplication
- Settings > LifeCycle
- Settings > LogForwarding
- Settings > NetBackup
- Settings > NetBackup DNAT
- Settings > NetBackup NATServers
- Settings > Password
- Settings > SystemLocale
- Settings > Share
- Settings > Sysctl
- Settings > Notifications > LoginBanner
- Settings > Security > Authentication > AccountStatus
- Settings > Security > Authentication > LDAP
- Settings > Security > Authentication > ActiveDirectory
- Settings > Security > Authentication > LocalUser
- Main > Settings > Security > Authentication > CIFSShare
- Settings > Security > Authorization
- Main > Settings > Security > Certificate
- Main > Settings > Security > Certificate > CertificateSigningRequest
- Main > Settings > Security > STIG
- Main > Settings > Security > FIPS
- Main > Settings > Security > SecurityLevel
- Main > Settings > Security > Sessions
- Settings > Alerts > CallHome
- Settings > Alerts > SNMP
- Settings > Alerts > Email
- Settings > Alerts > Hardware
- Appendix G. Support commands
- Support > Checkpoint
- Support > Cleanup > CleanMonInvData
- Support > DataCollect
- Support > Disk
- Support > Errors
- Support > FactoryReset
- Support > InfraServices
- Support > InstantAccess
- Support > iostat
- Support > LogBrowser
- Support > Logs
- Support > Maintenance
- Support > Messages
- Support > NBDNA
- Support > Nbperfchk
- Support > NBSU
- Support > Processes
- Support > Reboot
- Support > Service
- Support > Shutdown
- Support > Storage Create LogPartition
- Support > Storage Create NDMPLogPartition
- Support > Storage SanityCheck
- Support > Storage Reset
- Support > System
- Support > Test
- Appendix H. Available commands for a NetBackupCLI user
Smart card Authentication for NetBackup Web UI
The NetBackup Web UI supports authentication of Active Directory (AD) or Lightweight Directory Access Protocol (LDAP) domain users with a digital certificate or smart card, including CAC and PIV. This authentication method only supports one AD or LDAP domain for each appliance primary server domain and is not available for local domain users.
Note:
Perform this configuration separately for each appliance primary server domain where you want to use this authentication method.
Ensure that you add the AD or the LDAP domain before you add access rules for domain users or configure the domain for smart card authentication. Use the vssat command to add AD or LDAP domains.
To add the AD or the LDAP domain for NetBackup
- Log on to the appliance primary server as a NetBackupCLI user.
- Run the vssat command.
vssat addldapdomain -d DomainName -s server_URL -u user_base_DN -g group_base_DN -t schema_type -m admin_user_DN
Replace the variables in the above command as per the following descriptions:
DomainName is a symbolic name that uniquely identifies an LDAP domain.
server_URL is the URL of the LDAP directory server for the given domain. The LDAP server URL must start with either
ldap://orldaps://. Starting withldaps://indicates that the given LDAP server requires SSL connection. For exampleldaps://my-server.myorg.com:636.user_base_DN is the LDAP-distinguished name for the user container. For example,
ou=user,dc=mydomain,dc=myenterprise,dc=com.group_base_DN is the LDAP-distinguished name for the group container. For
example, ou=group,dc=mydomain,dc=myenterprise,dc=com.schema_type specifies which type of LDAP schema to use. The two default schema types that are supported are rfc2307 or msad.
admin_user_DN is a string that contains the DN of the administrative user or any user that has search permission to the user container, or user subtree as specified by UserBaseDN. If the user container is searchable by anyone including an anonymous user, you can configure this option as an empty string. For example, --admin_user=. This configuration allows anyone to search the user container.
- Verify that the specified AD or LDAP domain was successfully added using vssat validateprpl. Note that you can also use the vssat command with the following options:
vssat removeldapdomain removes an LDAP domain from the authentication broker.
vssat validategroup checks the existence of a user group in domain provided.
vssat validateprpl checks the existence of a user in domain provided.
For more details on the vssat command, see the Veritas NetBackup Commands Reference Guide