Adding MongoDB credentials in NetBackup
Note:
If you use the MongoDB configuration tool, these manual steps are not required.
To establish a seamless communication between MongoDB clusters and NetBackup for successful backup and restore operations, you must add and update MongoDB credentials to the NetBackup primary server.
NetBackup supports the following authentication types for protecting the MongoDB data:
No authentication
Simple - Salted Challenge Response Authentication Mechanism (SCRAM)
Certificate-based - x.509
Different options are required for each of the authentication types when you add the credentials using the tpconfig command.
The following table describes the options that are required for each authentication type:
Table: Required options for authentication types
Options | Option description | No authentication | Simple authentication | Certificate-based authentication |
|---|---|---|---|---|
AppUserId | Specifies the username that is required to log into the application server. | ✖ | ✔ | ✖ |
AppUserPassword | Specifies the user password that is required to log into the application server. | ✖ | ✔ | ✖ |
HostUser | Specify the host's user ID for SSH implementation. | ✔ | ✔ | ✔ |
HostPassword | Specify the host's user password for SSH implementation. | ✔ | ✔ | ✔ |
HostRSAKey | RSA key is required to perform password-less remote operations. | ✔ | ✔ | ✔ |
ServerPemPath | Path to the PEM certificate file on the MongoDB node. | ✖ | ✖ | ✔ |
CAPemPath | Path to the CA PEM certificate file on the MongoDB node. | ✖ | ✖ | ✔ |
Passkey | Password of CA certificate. | ✖ | ✖ | ✔ |
CADir | Path to the CA certificate. | ✖ | ✖ | ✔ |
CARole | User role that is defined in the CA. | ✖ | ✖ | ✔ |
CertificateUser | Specifies the details for the certificate user. | ✖ | ✖ | ✔ |
application_server_conf | Specifies a path to the credential configuration file that contains the authentication type, user details, and the directory paths for the CA security certificates. | ✔ | ✔ | ✔ |