NetBackup™ 10.0 Application Guide
- Product overview
- Release notes
- Geting started
- Creating NetBackup application instances
- Managing NetBackup application instances
- Accessing NetBackup primary and media server instances for management tasks
- Managing users on a primary or media server instance
- Running NetBackup commands on a primary or media server application instance
- Accessing NetBackup WORM storage server instances for management tasks
Connecting an Active Directory user domain to a primary or a media server instance
Use the following procedure to connect an Active Directory (AD) user domain to a primary or a media server instance.
To connect an AD user domain
- From the Flex Appliance Console, verify that the instance is on the same network as the AD domain. If it is not, edit the settings so that the instance can reach the domain.
- Open the following ports between the instance and the remote host if they are not already open:
139
145
- Open an SSH session to the instance as the appadmin user and run the following command:
sudo realm join <domain name> -v -U <domain administrator>
Where <domain name> is the domain that you want to connect, and <domain administrator> is the username of an administrator user on that domain.
Enter the appadmin user password when prompted.
- When the following prompts appear, enter the password for the domain administrator user:
Password for Administrator:
Enter Administrator's password:
- Wait for the process to complete. The following message should appear:
Successfully enrolled machine in realm
Run the following command to confirm:
sudo realm list
- If you need to add user groups from this domain in the NetBackup web UI, you must modify the
sssd.conf
file before you can add the groups. If you do not need to add user groups and plan to add each user individually, do not perform this step.To modify the
sssd.conf
file:Navigate to
/etc/sssd/sssd.conf
on the instance and locate the following section:[domain/<domain name>]
Add the following directive to this section:
enumerate = True
Note:
If you have a large AD environment, you may need to perform additional tuning of the
sssd.conf
file. Refer to the Red Hat documentation or contact Veritas Technical Support. - When the connection is complete, sign in to the instance as the appadmin user from the NetBackup web UI. Add and configure the remote users that you want to have access to the instance. See the NetBackup Web UI Security Administrator's Guide for details.
Note:
The username maintenance is not supported on application instances.