NetBackup IT Analytics System Administrator Guide
- Introduction
- Preparing for updates
- Backing up and restoring data
- Monitoring NetBackup IT Analytics
- Accessing NetBackup IT Analytics reports with the REST API
- Defining NetBackup estimated tape capacity
- Automating host group management
- Categorize host operating systems by platform and version
- Bulk load utilities
- Automate NetBackup utilities
- Scheduling utilities to run automatically
- Attribute management
- Importing generic backup data
- Backup job overrides
- Managing host data collection
- System configuration in the portal
- Custom parameters
- Performance profile schedule customization
- Configuring AD/LDAP
- Configuring single sign-on (SSO) using security assertion markup language (SAML)
- Change Oracle database user passwords
- Integrate with CyberArk
- Tuning NetBackup IT Analytics
- Working with log files
- Portal and data collector log files - reduce logging
- Data collector log file naming conventions
- Portal log files
- Defining report metrics
- SNMP trap alerting
- SSL certificate configuration
- Configure virtual hosts for portal and / or data collection SSL
- Keystore on the portal server
- Portal properties: Format and portal customizations
- Data retention periods for SDK database objects
- Troubleshooting
- Appendix A. Configure TLS-enabled Oracle database on NetBackup IT Analytics Portal and data receiver
Users and groups in the external LDAP directory
When using an external authentication service, there are two areas that require setup for a synchronization between the two systems to occur:
User profiles in the external directory must have specific attributes set
Group names in the external directory must match User Group names in the NetBackup IT Analytics Portal for privilege inheritance
Set the following attributes for each user in the external LDAP directory. For each attribute, the properties name and friendlyName must be present and have values populated. These attributes must be exposed by both the external LDAP directory and the IDP server. The names of attributes are as follows:
displayName: <first_name> <last_name> For example Jane Smith
email: email address
mobile: cell phone or mobile number
telephoneNumber: work phone or home phone number
sAMAccountName: the unique user name that is used as a login
memberOf: List of group names to which the user belongs.
Note:
The attribute memberOf requires customization for a Microsoft Azure IDP. It is recommended to set Groups Assigned to the application instead of All groups or Security groups for "memberOf" attribute. Click here for more details.
Before an external user can use SSO to log into the Portal, they must belong to one external directory group that also exists as a User Group in the NetBackup IT Analytics Portal. If the setup criteria is met, when the user logs into the Portal for the first time, their user profile will be synchronized from the external directory. They will also inherit all privileges assigned to the User Group.