Enabling communication with a UNIX NetBackup master server
NetBackup Self Service uses Secure Shell (SSH) to communicate with a UNIX NetBackup master server. The configuration of SSH is outside the scope of this guide. NetBackup Self Service, however, requires the credentials to communicate with the SSH server on the master server.
By default SSH uses Port 22.
To specify a different port, set the server name to server_name:port_number. For example, MyServer:23.
The user account that NetBackup Self Service uses to logon to SSH on the master server needs sudo configuration:
The user account should not use requiretty.
The user account should not require a sudo password.
With sudo, the user account should run all commands in
/usr/openv/netbackup/binand/usr/openv/netbackup/bin/admincmd.
User authentication modes that are supported include:
Password
NetBackup Self Service passes the user name and password at logon.
Public key
The public key of the user is stored in the
authorized_keysfor the user on the master server. The private key of the user is stored in OpenSSH format in the NetBackup Self Service portal.Keyboard-interactive
NetBackup Self Service sends the password for the user to a keyboard-interactive ssh session. The password is sent in response to a configurable password prompt. The default password prompt is Password:.
To configure NetBackup Self Service and the NetBackup master server for public key authentication
- Create a Public Private key pair using a key generator like
PuTTYgen. - Log on to the master server as the required master server user
- Add the public key to the user's
authorized_keysfile in the master server's operating system format. - Convert the Private key into OpenSSH format encrypted with a passphrase
-----BEGIN RSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,997295A8E365412F SIKdyjX4UoDm03kprqfkCGQYc/thmNIlWYztEomjyRaMyEYlh0ZIC9Kx7XnMNnSk ... MUxIcZW8d8fF3P4s+OLidxG03H6C/AsGLzJtpecjPQA= -----END RSA PRIVATE KEY-----
- When you create the backup server in NetBackup Self Service:
Choose Public Key for the Authentication.
Enter the user account to connect to the master server in User Account.
Paste the encrypted OpenSSH format private key in OpenSSH Private Key.
Enter the passphrase in Password and Confirm Password.
More information about testing the connection once you have created your first backup server is available.