Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  3. Veritas NetBackup™ Administrator's Guide, Volume I
  5. Section II. Configuring hosts
  7. Configuring Host Properties
  9. Configuration options for NetBackup servers
  11. AUTHENTICATION_DOMAIN option for NetBackup servers and clients
Veritas NetBackup™ Administrator's Guide, Volume I

AUTHENTICATION_DOMAIN option for NetBackup servers and clients

This option defines a set of NetBackup product authentication principles.

Table: AUTHENTICATION_DOMAIN information

Usage

Description

Where to use

A master server, media server, or client that uses NetBackup product authentication and authorization must have at least one AUTHENTICATION_DOMAIN entry listed for this option. More than one domain can be specified.

If a media server or client does not define an authentication domain, it uses the authentication domains of its master server.

How to use

Use the nbgetconfig and the nbsetconfig commands to view, add, or change the option.

For information about these commands, see the NetBackup Commands Reference Guide.

Use the following format:

AUTHENTICATION_DOMAIN = domain "comment" 
mechanism broker [port]

This option may appear more than once in the configuration file.

The following variables are defined:

  • domain is an Internet domain name or a Windows domain name.

  • "comment" is a quoted comment that describes the authentication domain.

  • mechanism is the authentication mechanism.

    The keywords for various mechanisms are as follows:

    • NIS: Network Information Service version 1

    • NIS+: Network Information Service version 2

    • PASSWD: Local UNIX password file on the specified broker

    • VXPD: The NetBackup product authentication and authorization private database

    • WINDOWS: Windows Active Directory or primary domain controller

  • broker is the host name or IP address of the authentication broker.

  • port is the port number of the authentication broker. The default is the standard port number for authentication brokers.

Example

 
AUTHENTICATION_DOMAIN = mycompany.com "Typical UNIX logins" 
NIS broker1.mycompany.com
AUTHENTICATION_DOMAIN = OurEnterprise "Typical Windows logins" 
WINDOWS broker2.mycompany.com 5544
AUTHENTICATION_DOMAIN = mycompany.com "VxSS-Only Identities" 
VXPD broker1.mycompany.com
AUTHENTICATION_DOMAIN = broker3.mycompany.com "Local 
UNIX Logins on host broker3" PASSWD broker3.mycompany.com

In this example:

  • mycompany.com is the Internet domain name and OurEnterprise is the Windows domain name.

  • The broker on host name broker1 handles both NIS and private authentication for NetBackup product authentication.

  • The broker on host name broker2 handles Windows authentication for NetBackup product authentication.

  • broker2 uses the non-standard port number 5544.

  • The broker on host name broker3 uses its local /etc/passwd file for NetBackup product authentication.

Equivalent Administration Console property

NetBackup Management > Host Properties > Click Master Servers, Media Servers, Clients > Double-click on server > Access Control > Authentication Domain.

See Authentication Domain tab of the Access Control properties.

Feedback

Was this page helpful?
Previous

ALLOW_MEDIA_OVERWRITE option for NetBackup servers

Next

AUTHORIZATION_SERVICE option for NetBackup servers

Feedback

Was this page helpful?