NetBackup™ 10.0 Application Guide

Last Published:
Product(s): Appliances (2.1.4, 2.1.3, 2.1.2, 2.1.1, 2.1)
Platform: Flex Appliance OS
  1. Product overview
    1.  
      Introduction to NetBackup applications for Flex Appliance
    2.  
      About the Flex Appliance documentation
  2. Release notes
    1.  
      NetBackup 10.0 application new features, enhancements, and changes
    2.  
      Supported upgrade paths to this release
    3.  
      Operational notes
  3. Geting started
    1.  
      Prerequisites before you can create NetBackup application instances
    2.  
      Installing the NetBackup Administration Console and client packages
  4. Creating NetBackup application instances
    1. Creating application instances
      1.  
        Creating a NetBackup primary server instance
      2.  
        Creating a NetBackup media server instance
      3.  
        Creating a NetBackup WORM storage server instance
  5. Managing NetBackup application instances
    1.  
      Managing application instances from Flex Appliance and NetBackup
    2. Accessing NetBackup primary and media server instances for management tasks
      1. Managing users on a primary or media server instance
        1.  
          Adding and removing local users on a primary or media server instance
        2.  
          Connecting an Active Directory user domain to a primary or a media server instance
        3.  
          Connecting an LDAP user domain to a primary or a media server instance
        4.  
          Changing a user password on a primary or media server instance
      2. Running NetBackup commands on a primary or media server application instance
        1.  
          Creating a NetBackup touch file on a primary or media server application instance
        2.  
          Installing NetBackup notify scripts on a primary or media server application instance
      3.  
        Monitoring NetBackup services on a NetBackup primary server instance
      4.  
        Mounting an NFS share on a NetBackup primary server instance
      5.  
        Setting environment variables on primary and media server instances
      6.  
        Storing custom data on a primary or media server instance
      7.  
        Modifying or disabling the nbdeployutil utility on a primary server instance
      8.  
        Disabling SMB server signing on a media server instance
      9.  
        Establishing trust with a NetBackup 7.7.3 primary server instance
    3. Accessing NetBackup WORM storage server instances for management tasks
      1. About the NetBackup WORM storage server shell
        1.  
          About the dedupe command
        2.  
          About the retention command
        3.  
          About the setting command
        4.  
          About the support command
      2.  
        Configuring an isolated recovery environment on a Flex Appliance WORM storage server instance
      3.  
        Managing an isolated recovery environment on a Flex Appliance WORM storage server instance

Connecting an LDAP user domain to a primary or a media server instance

Use the following procedure to connect an LDAP user domain to a primary or a media server instance.

To connect an LDAP user domain

  1. From the Flex Appliance Console, verify that the instance is on the same network as the LDAP domain. If it is not, edit the settings so that the instance can reach the domain.
  2. Open the following port between the instance and the remote host if it is not already open:

    • If you want to enable SSL for the connection: port 389

    • If you do not want to enable SSL for the connection: port 636

  3. Open an SSH session to the instance as the appadmin user and run the following command to navigate to the SSSD configuration file:

    sudo vi /etc/sssd/sssd.conf.

  4. Run the following command to copy the file and create a backup:

    sudo cp /etc/sssd/sssd.conf /mnt/Nbdata/sssd.conf.orig

  5. In the sssd.conf file, locate and modify the following entries:

    • ldap_uri =

      Enter the LDAP server name and port. If you want to enable SSL for the connection, use port 636. If you do not want to enable SSL, use port 389.

      For example: ldap_uri = ldaps://example.veritas.com:636

    • ldap_search_base =

      Enter the LDAP search domain.

      For example: ldap_search_base = dc=example,dc=veritas,dc=com

    • ldap_tls_reqcert =

      If you want to enable SSL for the connection, enter hard.

      If you do not want to enable SSL for the connection, enter never.

      For example: ldap_tls_reqcert = hard

    Note:

    Other fields may also need to be modified depending on your LDAP configuration. Check the LDAP vendor documentation and follow those instructions if there are any differences.

  6. If you did not enable SSL, proceed to the next step.

    If you enabled SSL, perform the following additional steps:

    • Add the following lines to the sssd.conf file:

      • ldap_tls_cacertdir = /mnt/nbdata/sssd/certs

      • ldap_tls_cacert = /mnt/nbdata/sssd/certs/<CA certificate>

        Where <CA certificate> is the file name of the LDAP CA certificate.

    • Run the following command to create a directory for the LDAP certificates:

      sudo mkdir -p /mnt/nbdata/sssd/certs

    • Copy all LDAP certificate files to this directory.

    • Run the following command to navigate to the LDAP configuration file:

      sudo vi /etc/openldap/ldap.conf

    • Add the following entry to this file:

      TLS_CACERTDIR /mnt/nbdata/sssd/certs

  7. When the connection is complete, sign in to the instance as the appadmin user from the NetBackup web UI. Add and configure the remote users that you want to have access to the instance. See the NetBackup Web UI Security Administrator's Guide for details.

    Note:

    The username maintenance is not supported on application instances.