How does nbcmdrun function
To run a NetBackup command with nbcmdrun, the nbcmdrun command and service user must be enabled on the NetBackup host.
By default, the nbcmdrun command is enabled. However, if nbcmdrun is disabled, you can reenable it.
See Reenable the nbcmdrun command.
You should do a web login in the current NetBackup domain using the bpnbat -login -loginType web command. The current NetBackup domain is commonly referred to as the domain of the first server entry in the NetBackup configuration (bp.conf file on UNIX or Windows registry).
You should run nbcmdrun from a directory on which you have read and write access. You need to provide the base name of the command, followed by the command arguments.
For example: nbcmdrun mklogdir -create bpcd.
nbcmdrun validates the input command and retrieves the JSON web token (JWT) of the user.
nbcmdrun connects to NBPas and presents the user JWT to NBPas.
NBPas validates the user JWT, input command, and arguments. It invokes the input command in the service user context or the privileged user context.
The commands that are run by NBpas are audited.
Caution:
When a NetBackup command is run using nbcmdrun, the password that is provided for certain commands may be visible on the screen.