Veritas Access Administrator's Guide

To configure the Object Store server

1. Log on to Veritas Access using the Veritas Access command-line interface.
2. You can either use an existing pool or create a default storage pool (at least one) on the cluster.

   You can see the list of existing pools using the storage pool list command.

   You can create a new pool using the storage create pool command.

   storage> pool create pool1 disk1,disk2,disk3,disk4

3. Use the storage pool that was created in Step 2 as the default object access pool.

   You need to set the default pool, as it is required for enabling the Object Store server.

   objectaccess> set pools pool1

   Note:

   Based on your storage requirements, you can configure different types of storage pools by using the Object Store group commands.

4. Verify the configured storage pool.

   objectaccess> show

5. Enable and start the Object Store server.

   objectaccess> server enable

   objectaccess> server start

6. Configure the cluster using any authentication server (AD, LDAP, or NIS).

   See the following manual pages for more information on configuring AD, LDAP, or NIS:

   • CLISH> network man ldap

   • CLISH> network man ad

   • CLISH> network man nis

7. Create the access and secret keys for the authorized user, or any user in the authentication server.

   You have two options for creating the access and the secret keys, either using the Veritas Access RESTful APIs or by using the Veritas Access helper script.

   Create the access and secret keys using the Veritas Access RESTful APIs:

   • Before using the Veritas Access RESTful APIs, set the host name resolution for the host as shown in the objectaccess> show output against ADMIN_URL.

   • See the Veritas Access Object Access API Guide on the SORT site for accessing the Object Store server (S3) user management APIs.

   • After creating your access and secret key, you can create a bucket using the S3 API.

   Create the access and the secret keys using the Veritas Access helper script:

   • Add the ADMIN_URL name in your /etc/hosts file.

     where the ADMIN_URL is admin.<cluster_name> and the port is 8144. This url should point to the Veritas Access management console IP address.

   • Location of the helper script: /opt/VRTSnas/scripts/utils/objectaccess/objectaccess_client.py

   • The Veritas Access helper script can be used from any client system that has Python installed.

   • To run the script, your S3 client needs to have the argparse and requests Python modules.

     If these modules are missing, install both these modules using pip or easy_install.

   • If the Object Store server is enabled without the SSL option, you need to add the --insecure option.

     clus_01 ~# ./objectaccess_client.py --server 
     admin.clus:8144 --username <uname> --create_key --insecure

   • Create the access and the secret key using the Veritas Access helper script by providing the user name, password, and ADMIN_URL (check the online Help of the Veritas Access helper script for all of the provided operations like list key and delete key).

     Create a secret key:

     clus_01:~ # ./objectaccess_client.py --create_key 
     --server admin.clus:8144 --username localuser1 --password root123 
     --insecure
     UserName                : localuser1
     AccessKeyId             : Y2FkODU2NTU2MjVhYzV
     Status                  : Active
     SecretAccessKey         : ODk0YzQxMDhkMmRjM2M5OTUzNjI5OWIzMDgyNzY

     The <localuser1> is the local user created on both the Veritas Access cluster nodes with same unique ID.

     List a secret key for the specified user:

     clus_01:~ # ./objectaccess_client.py --list_key --server 
     admin.clus:8144 --username localuser2 --password root123 --insecure

     Delete a secret key for the specified user:

     clus_01:~ # ./objectaccess_client.py --delete_key 
     ZTkyNDdjZTViM2EyMWZ --server admin.clus:8144 --username localuser2 
     --password root123 --insecure

8. Use the following objectaccess command to see all the existing access and secret keys in the Veritas Access cluster:

   objectaccess> account user show

To use the group option

1. Create a group in the authentication server (AD/LDAP/NIS) and add the required users to that group.
2. Set the group specific configuration for the group created in the authentication server.
3. Set or unset the defaults per your requirements.

   objectaccess>  group set fs_type simple VRTS-grp
   ACCESS ObjectAccess INFO V-288-0 Group set fs-type successful.

   objectaccess> group set pool VRTS-grp pool1
   ACCESS ObjectAccess INFO V-288-0 Success.

   objectaccess>  group show
   Group Name   Fs Sharing   Fs Size   Fs Type   Pool(s)
   ===========  ===========  ========  ========  ========
   VRTS-grp     -            -         simple    pool1

   objectaccess> group show
   Group Name   Fs Sharing   Fs Size   Fs Type   Pool(s)
   ===========  ===========  ========  ========  ========
   VRTS-grp     -            -         -         pool1