Configure NetBackup Flex Appliances for Data Collection
To configure NetBackup Flex Appliances for data collection, you must first create a new user account on the Flex primary server and grant sudo access to the user account in /etc/sudoers.d and /mnt/nbdata/vxos/etc/sudoers.d, as described in the procedure below. You must also obtain the REST API key from the NetBackup UI.
- Open a SSH session to the NetBackup instance as an admin or root user to create an appadmin user.
- Create a local user account:
sudo useradd <username> sudo passwd <username>
- Grant sudo access to the local user account created above in
/etc/sudoers.d:Create
sudoersfile in/etc/sudoers.d, substituting the name of the user you created for <username>.sudo visudo -f /etc/sudoers.d/<username>
Add these permissions in the interactive editor.
To allows unrestricted access to all the permissions:
Defaults:<username> !requiretty <username> ALL=(ALL) NOPASSWD: \ /usr/openv/netbackup/bin/admincmd/* ,\ /usr/openv/volmgr/bin/* ,\ /usr/openv/netbackup/bin/*
Or to further restrict access to NetBackup administrative commands, use the following:
Defaults:<username> !requiretty <username> ALL=(ALL) NOPASSWD: /usr/openv/netbackup/bin/admincmd/bpgetconfig ,\ /usr/openv/netbackup/bin/admincmd/bpcoverage ,\ /usr/openv/netbackup/bin/admincmd/bpdbjobs ,\ /usr/openv/netbackup/bin/admincmd/bpimagelist ,\ /usr/openv/netbackup/bin/admincmd/bperror ,\ /usr/openv/netbackup/bin/admincmd/bpminlicense ,\ /usr/openv/netbackup/bin/admincmd/bppllist ,\ /usr/openv/netbackup/bin/admincmd/bpretlevel ,\ /usr/openv/netbackup/bin/admincmd/bpplclients ,\ /usr/openv/netbackup/bin/admincmd/bpmedialist ,\ /usr/openv/netbackup/bin/admincmd/bpstulist ,\ /usr/openv/netbackup/bin/admincmd/nbdevquery ,\ /usr/openv/netbackup/bin/admincmd/nbauditreport ,\ /usr/openv/netbackup/bin/admincmd/nbstl ,\ /usr/openv/netbackup/bin/admincmd/nbstlutil ,\ /usr/openv/netbackup/bin/admincmd/bpstsinfo ,\ /usr/openv/volmgr/bin/vmquery ,\ /usr/openv/volmgr/bin/vmpool ,\ /usr/openv/volmgr/bin/vmglob ,\ /usr/openv/volmgr/bin/vmcheckxxx ,\ /usr/openv/volmgr/bin/vmoprcmd ,\ /usr/openv/volmgr/bin/tpconfig ,\ /usr/openv/netbackup/bin/bplist ,\ /usr/openv/netbackup/bin/nbsqladm ,\ /usr/openv/netbackup/bin/nboraadm
Save and exit the interactive editor.
- Grant sudo access to the local user account created above in
/mnt/nbdata/vxos/etc/sudoers.d:Create
sudoersfile in/mnt/nbdata/vxos/etc/sudoers.d.sudo visudo -f /mnt/nbdata/vxos/etc/sudoers.d/<username>
Add these permissions in the interactive editor.
To allows unrestricted access to all the permissions:
Defaults:<username> !requiretty <username> ALL=(ALL) NOPASSWD: \ /usr/openv/netbackup/bin/admincmd/* ,\ /usr/openv/volmgr/bin/* ,\ /usr/openv/netbackup/bin/*
Or to further restrict access to NetBackup administrative commands, use the following:
Defaults:<username> !requiretty <username> ALL=(ALL) NOPASSWD: /usr/openv/netbackup/bin/admincmd/bpgetconfig ,\ /usr/openv/netbackup/bin/admincmd/bpcoverage ,\ /usr/openv/netbackup/bin/admincmd/bpdbjobs ,\ /usr/openv/netbackup/bin/admincmd/bpimagelist ,\ /usr/openv/netbackup/bin/admincmd/bperror ,\ /usr/openv/netbackup/bin/admincmd/bpminlicense ,\ /usr/openv/netbackup/bin/admincmd/bppllist ,\ /usr/openv/netbackup/bin/admincmd/bpretlevel ,\ /usr/openv/netbackup/bin/admincmd/bpplclients ,\ /usr/openv/netbackup/bin/admincmd/bpmedialist ,\ /usr/openv/netbackup/bin/admincmd/bpstulist ,\ /usr/openv/netbackup/bin/admincmd/nbdevquery ,\ /usr/openv/netbackup/bin/admincmd/nbauditreport ,\ /usr/openv/netbackup/bin/admincmd/nbstl ,\ /usr/openv/netbackup/bin/admincmd/nbstlutil ,\ /usr/openv/netbackup/bin/admincmd/bpstsinfo ,\ /usr/openv/volmgr/bin/vmquery ,\ /usr/openv/volmgr/bin/vmpool ,\ /usr/openv/volmgr/bin/vmglob ,\ /usr/openv/volmgr/bin/vmcheckxxx ,\ /usr/openv/volmgr/bin/vmoprcmd ,\ /usr/openv/volmgr/bin/tpconfig ,\ /usr/openv/netbackup/bin/bplist ,\ /usr/openv/netbackup/bin/nbsqladm ,\ /usr/openv/netbackup/bin/nboraadm
Save and exit the interactive editor.
- Obtain the REST API key from the NetBackup UI and copy it in the API key field. The API key field appears on Add Backup Server or Edit Backup Server popup that is displayed when you click Add or Edit on the Veritas NetBackup Data Collector Policy window.