Changing a server across NetBackup domains
For Enhanced Auditing, when you perform a Change Server operation from a master or media server in one NetBackup domain to a host (master or media server or client) in another NetBackup domain, you must execute additional steps on each NetBackup server. You must also set up a trust on both master servers.
Note:
Executing these steps is a one-time activity.
The following steps help you to change the server and set up the trust on both master servers.
To change server from a master to master server
- We have two NetBackup domains, NetBackup Domain 1 and NetBackup Domain 2.
Consider two master servers, Master_nbu_dom1 and Master_nbu_dom2. Master_nbu_dom1 has media servers Media1_nbu_dom1, Media2_nbu_dom1, MediaN_nbu_dom1, and a set of clients. Similarly, Master_nbu_dom2 has media servers Media1_nbu_dom2, Media2_nbu_dom2, MediaM_nbu_dom2, and a set of clients as shown in the image:
The user is connected to one of the servers in NetBackup Domain 1 (either master or media), for example, Master_server_nbu_dom1, and wants to do a change server to one of the hosts on NetBackup Domain 2, for example Host_nbu_dom2. It is mandatory that both the master servers (Master_nbu_dom1 and Master_nbu_dom2 here) establish a trust. Host_nbu_dom2 must set up a trust with Master_server_nbu_dom1.
- To set up the trust, you must invoke a set of commands on UNIX and Windows:
On UNIX and Linux:
/usr/openv/netbackup/sec/at/bin/vssat setuptrust - b
Master_server_nbu_dom1:1556:nbatd -s high on Host_nbu_dom2.
On Windows:
InstallPath\Veritas\NetBackup\sec\at\bin\vssat.bat
- You must add an additional server entry in Host_nbu_dom2 for the Master_server_nbu_dom1 in the bp.conf file. Run the following command:
SERVER = Master_server_nbu_dom1 /*this should __not__ be the first SERVER entry*/
You can also add the additional server entry by connecting to the target master server through the NetBackup Administration Console.
- The host that has the NetBackup Administration Console or the remote Java Administration console is also required to trust the X.509 NBATD certificate on the Master_server_nbu_dom2.
The trust can be set up by directly connecting to the Master_server_nbu_dom2master server through the GUI.
You can also invoke /usr/openv/java/sec/at/bin/vssat setuptrust -b
Master_server_nbu_dom2:1556:nbatd -s high on the NetBackup Administration Console host.
