Adding MongoDB credentials in NetBackup
Note:
If you use the MongoDB configuration tool, these manual steps are not required.
To establish a seamless communication between MongoDB clusters and NetBackup for successful backup and restore operations, you must add and update MongoDB credentials to the NetBackup master server.
NetBackup supports the following authentication types for protecting the MongoDB data:
No authentication
Simple - Salted Challenge Response Authentication Mechanism (SCRAM)
Certificate-based - x.509
Different options are required for each of the authentication types when you add the credentials using the tpconfig command.
The following table describes the options that are required for each authentication type:
Table: Required options for authentication types
Options | Option description | No authentication | Simple authentication | Certificate-based authentication |
|---|---|---|---|---|
AppUserId | Specifies the user name that is required to log into the application server. | ✖ | ✔ | ✖ |
AppUserPassword | Specifies the user password that is required to log into the application server. | ✖ | ✔ | ✖ |
HostUser | Specify the host's user ID for SSH implementation. If the host user that you want to use is a non-root user or does not have root permissions for the MongoDB server then: | ✔ | ✔ | ✔ |
HostPassword | Specify the host's user password for SSH implementation. | ✔ | ✔ | ✔ |
HostRSAKey | RSA key is required to perform password-less remote operations. | ✔ | ✔ | ✔ |
ServerPemPath | Path to the PEM certificate file on the MongoDB node. | ✖ | ✖ | ✔ |
CAPemPath | Path to the CA PEM certificate file on the MongoDB node. | ✖ | ✖ | ✔ |
Passkey | Password of CA certificate. | ✖ | ✖ | ✔ |
CADir | Path to the CA certificate. | ✖ | ✖ | ✔ |
CARole | User role that is defined in the CA. | ✖ | ✖ | ✔ |
CertificateUser | Specifies the details fo the certificate user. | ✖ | ✖ | ✔ |
application_server_conf | Specifies a path to the credential configuration file that contains the authentication type, user details, and the directory paths for the CA security certificates. | ✔ | ✔ | ✔ |