Allowing users to view NetBackup Datacentre ?

Hi there,

Is it possible under Veritas Netbackup Datacentre (V3.4.1 on
Windows2K) to have the concept of user accounts ?

I want to allow a user (our tape monkey, but don't call them that! :-)
to fire up the NetBackup GUI and only be able to view the settings and
not be able to change/damage anything ? Basically I want them to be
able to see where media is physically located (though thinking about
it if they could modify the location string of media that would be
handy)

Any ideas ?

Thanks

Mark

3.4.1 is several years ago in my experience but I believe you can.
It's all in the java auth file.

~F

On 6 Oct 2003 15:08:54 -0700, (Mark Smith)
wrote:

Hi there,

Is it possible under Veritas Netbackup Datacentre (V3.4.1 on
Windows2K) to have the concept of user accounts ?

I want to allow a user (our tape monkey, but don't call them that! :-)
to fire up the NetBackup GUI and only be able to view the settings and
not be able to change/damage anything ? Basically I want them to be
able to see where media is physically located (though thinking about
it if they could modify the location string of media that would be
handy)

Any ideas ?

Thanks

Mark

Faeandar wrote in message ws.com...
3.4.1 is several years ago in my experience but I believe you can.
It's all in the java auth file.

~F

Ahhh, yes that's the one :-)

Security seems to suck though doesn't it ? From what I'm reading
about in the manual, I install the Java client onto a Win2K client
machine, then I edit the auth.conf file on that machine to grant/deny
access to the various netbackup modules ... doesn't that mean that a
user on that client could edit the auth.conf file themselves to gain
access to the other modules ?

Again thinking about it (got to give up this bad habit) I could change
the file permissions to read only to everyone except administrator.

Thanks

Mark

Well, there's the rub isn't it?

Generally that auth.conf file is only modifiable by root anyway so you
should be ok. We are talking about /usr/openv/java/auth.conf on the
server correct? It's server only so unless your TM has root access
(you gotta be kidding) you've got no worries.

~F

On 7 Oct 2003 15:52:40 -0700, (Mark Smith)
wrote:

Faeandar wrote in message ws.com...
3.4.1 is several years ago in my experience but I believe you can.
It's all in the java auth file.

~F

Ahhh, yes that's the one :-)

Security seems to suck though doesn't it ? From what I'm reading
about in the manual, I install the Java client onto a Win2K client
machine, then I edit the auth.conf file on that machine to grant/deny
access to the various netbackup modules ... doesn't that mean that a
user on that client could edit the auth.conf file themselves to gain
access to the other modules ?

Again thinking about it (got to give up this bad habit) I could change
the file permissions to read only to everyone except administrator.

Thanks

Mark

Hmm, the way the manual describes it the files are on the client side ?!?

I've looked on our NetBack server (Win2K) and there is no auth.conf file
anywhere ... I wouldn't have thought that by installing the GUI on a client
I'd automagically get the appearing, I think it's a client side file ...
I'll try it and see as soon as I can find the install CD :-)

Thanks

Mark


"Faeandar" wrote in message
s.com...
Well, there's the rub isn't it?

Generally that auth.conf file is only modifiable by root anyway so you
should be ok. We are talking about /usr/openv/java/auth.conf on the
server correct? It's server only so unless your TM has root access
(you gotta be kidding) you've got no worries.

~F

On 7 Oct 2003 15:52:40 -0700, (Mark Smith)
wrote:

Faeandar wrote in message
ws.com...
3.4.1 is several years ago in my experience but I believe you can.
It's all in the java auth file.

~F

Ahhh, yes that's the one :-)

Security seems to suck though doesn't it ? From what I'm reading
about in the manual, I install the Java client onto a Win2K client
machine, then I edit the auth.conf file on that machine to grant/deny
access to the various netbackup modules ... doesn't that mean that a
user on that client could edit the auth.conf file themselves to gain
access to the other modules ?

Again thinking about it (got to give up this bad habit) I could change
the file permissions to read only to everyone except administrator.

Thanks

Mark

Ach, dunno how it works on Win2k, sorry. On unix it's a server side
auth file that resides in /usr/openv/java. Modify the permissions
there and when anyone logs in it reads the file and verifies access.

Good luck on that windows thingy....

~F

On Wed, 8 Oct 2003 19:00:56 +1300, "Mark" wrote:

Hmm, the way the manual describes it the files are on the client side ?!?

I've looked on our NetBack server (Win2K) and there is no auth.conf file
anywhere ... I wouldn't have thought that by installing the GUI on a client
I'd automagically get the appearing, I think it's a client side file ...
I'll try it and see as soon as I can find the install CD :-)

Thanks

Mark


"Faeandar" wrote in message
ws.com...
Well, there's the rub isn't it?

Generally that auth.conf file is only modifiable by root anyway so you
should be ok. We are talking about /usr/openv/java/auth.conf on the
server correct? It's server only so unless your TM has root access
(you gotta be kidding) you've got no worries.

~F

On 7 Oct 2003 15:52:40 -0700, (Mark Smith)
wrote:

Faeandar wrote in message
ews.com...
3.4.1 is several years ago in my experience but I believe you can.
It's all in the java auth file.

~F

Ahhh, yes that's the one :-)

Security seems to suck though doesn't it ? From what I'm reading
about in the manual, I install the Java client onto a Win2K client
machine, then I edit the auth.conf file on that machine to grant/deny
access to the various netbackup modules ... doesn't that mean that a
user on that client could edit the auth.conf file themselves to gain
access to the other modules ?

Again thinking about it (got to give up this bad habit) I could change
the file permissions to read only to everyone except administrator.

Thanks

Mark