Veritas NetBackup™ Appliance Commands Reference Guide
- Overview
- Appendix A. Main > Appliance commands
- Appendix B. Main > Manage > FibreChannel commands
- Appendix C. Main > Manage > HighAvailability commands
- Appendix D. Main > Manage > Libraries commands
- Appendix E. Main > Manage > Libraries > Advanced > ACS commands
- Manage > Libraries > Advanced > ACS > ACS_CSI_HOSTPORT
- Manage > Libraries > Advanced > ACS > ACS_SEL_SOCKET
- Manage > Libraries > Advanced > ACS > ACS_SSI_HOSTNAME
- Manage > Libraries > Advanced > ACS > ACS_SSI_INET_PORT
- Manage > Libraries > Advanced > ACS > ACS_SSI_SOCKET
- Manage > Libraries > Advanced > ACS > ACS_TCP_RPCSERVICE
- Manage > Libraries > Advanced > ACS > ACS_UDP_RPCSERVICE
- Manage > Libraries > Advanced > ACS > API_BARCODE_RULES
- Manage > Libraries > Advanced > ACS > TestACS
- Manage > Libraries > Advanced > ACS > ViewVMconf
- Appendix F. Main > Manage > License commands
- Appendix G. Main > Manage > MountPoints commands
- Appendix H. Main > Manage > NetBackup CLI commands
- Appendix I. Main > Manage > OpenStorage commands
- Appendix J. Main > Manage > Software commands
- Manage > Software > Cancel
- Manage > Software > Delete
- Manage > Software > Download
- Manage > Software > DownloadAnalyzer
- Manage > Software > DownloadProgress
- Manage > Software > Firmware
- Manage > Software > Install
- Manage > Software > List
- Manage > Software > Readme
- Manage > Software > Rollback
- Manage > Software > Share
- Manage > Software > UpgradeReadinessCheck
- Manage > Software > UpgradeStatus
- Manage > Software > VxUpdate
- Appendix K. Main > Manage > Storage commands
- Appendix L. Main > Manage > Tapes commands
- Appendix M. Main > Monitor commands
- Appendix N. Main > Network commands
- Network > Configure
- Network > Date
- Network > DNS
- Network > Gateway
- Network > Hostname
- Network > Hosts
- Network > IPv4
- Network > IPv6
- Network > LinkAggregation
- Network > NetStat
- Network > NTPServer
- Network > Ping
- Network > SetProperty
- Network > Show
- Network > TimeZone
- Network > TraceRoute
- Network > Unconfigure
- Network > VLAN
- Network > WANOptimization
- Appendix O. Main > Network > Security commands (DeviceCert)
- Appendix P. Main > Reports commands
- Appendix Q. Main > Settings commands
- Settings > Deduplication
- Settings > FibreTransport
- Settings > iSCSI > Initiator
- Settings > iSCSI > Interface
- Settings > iSCSI > Target
- Settings > LifeCycle
- Settings > LogForwarding
- Settings > NetBackup
- Settings > NetBackup DNAT
- Settings > NetBackup NATServers
- Settings > Password
- Settings > Share
- Settings > SNMP
- Settings > Sysctl
- Settings > SystemLocale
- Appendix R. Main > Settings > Alerts commands
- Appendix S. Main > Settings > Notifications view commands
- Appendix T. Main > Settings > Security commands
- Settings > Security > Antimalware
- Settings > Security > Authorization
- Settings > Security > Authentication > AccountStatus
- Settings > Security > Authentication > ActiveDirectory
- Main > Settings > Security > Authentication > CIFSShare
- Settings > Security > Authentication > LDAP
- Settings > Security > Authentication > LocalUser
- Settings > Security > Authentication > MFA
- Settings > Security > Authentication > SingleSignOn
- Settings > Security > Authentication > SmartCard > SSH
- Settings > Security > Authentication > SmartCard
- Main > Settings > Security > Certificate
- Main > Settings > Security > Certificate > CertificateSigningRequest
- Main > Settings > Security > FIPS
- Settings > Security > NetworkAccessControl
- Main > Settings > Security > PasswordAge
- Main > Settings > Security > Ports
- Main > Settings > Security > SecurityLevel
- Main > Settings > Security > Sessions
- Main > Settings > Security > STIG
- Appendix U. Main > Support commands
- Support > Checkpoint
- Support > Cleanup > CleanMonInvData
- Support > Cleanup > RemoveShelfEntries
- Support > Cleanup > ResetDIMMErrors
- Support > Collect
- Support > DataCollect
- Support > Disk
- Support > Errors
- Support > FactoryReset
- Support > FibreTransport
- Support > ImportISO
- Support > InfraServices
- Support > InstantAccess
- Support > iostat
- Support > IPMI
- Support > KillRemoteCall
- Support > LogBrowser
- Support > Logs
- Support > Maintenance
- Support > Messages
- Support > NBDNA
- Support > Nbperfchk
- Support > NBSU
- Support > Processes
- Support > RAID
- Support > Reboot
- Support > RecoverStorage
- Support > Service
- Support > ShelfOrdering
- Support > SHMCLI
- Support > Show
- Support > Shutdown
- Support > Storage ClearReservations
- Support > Storage SanityCheck
- Support > Storage Show
- Support > System
- Support > Test
Name
Main > Settings > Security > Authentication > SmartCard > SSH — Configure and manage authentication in the NetBackup Appliance Shell Menu (SSH) with smart cards.
SYNOPSIS
Check
Configure
Disable
Enable
PWauth
Show
DESCRIPTION
Use the SmartCard > SSH command to configure and manage smart card user authentication for the NetBackup Appliance Shell Menu (shell menu) interface as follows:
Check the public key for a specific user.
Configure the mapping attribute to determine which field in the remote database is used to search for the public key. To add the public key, copy and paste the content from the associated certificate file, or copy and paste the public key from the certificate file.
Disable smart card authentication. This command lets you turn off the feature but does not change any other settings in DNS, Certificate Authority (CA) certificates, LDAP, or smart card. You can use the enable command to turn on smart card authentication immediately.
Enable smart card authentication.
Enable or disable password authentication for SSH login.
Show the values for the mapping attribute and whether the feature is currently enabled or disabled.
Note:
For instructions on logging in to the appliance shell menu with a smart card, see the NetBackup Appliance Administrator's Guide. Refer to the topic "Logging into the NetBackup Appliance Shell Menu".
OPTIONS
The following commands and options are available under Authentication > SmartCard > SSH:
- Check <username>
Shows the public key for the specified user.
- Configure MappingAttribute CN/UPN
Here, MappingAttribute is either CN or UPN. This attribute determines which field in the remote database is used to search for the public key.
- Configure PublicKey Add filetype <username>
Add a public key for a local user. Here, filetype is either CertificateFile or PublickeyFile.
For CertificateFile configurations, copy and paste the certificate content directly. For PublickeyFile configurations, locate the public key in the certificate file and copy it, then paste it directly.
Note:
Before you can add a public key, you must first enable SSH smart card authentication with the Enable command described further below.
- Configure PublicKey Remove <username>
Remove a public key for a local user. When you run the Remove option, the command output shows the public key for the specified user, and a prompt for you to confirm its removal.
- Disable
Disables smart card authentication if it is enabled.
- Enable
Enables smart card authentication.
Note:
Before you can add a public key, you must first run this command to enable SSH smart card authentication.
- PWauth
Enable or disable password authentication for SSH login.
- Show
Shows the values of the mapping attribute and status of the smart card authentication. The following shows an example of the output for the Show command.
nbapp2b1.SmartCard> SSH Show Smart Card Configuration Status for SSH login +-----------------------------------------------------------------------------+ | Smart Card Authentication | Enabled | +-----------------------------------------------------------------------------+ | Mapping Attribute | UPN | +-----------------------------------------------------------------------------+ | Password Authentication | Disabled | +-----------------------------------------------------------------------------+ | List of SSH users with Password Authentication enabled | admin, nbcliuser | | +-------------------------------+---------------------------------------------+