Date: 02/2007
Affected Product & Version: NetVault Backup - All
Affected Module & Version - N/A
OS Version - All
Application Information - N/A
Description: If you disable security in the NetVault server, and do not set a password for the default user, the client can open the NetVault GUI in any NetVault Client Machine and act as a Domain Manager for the NetVault Server - without the need to enter any password.
Symptoms: The GUI can be opened from any NetVault Client Machine that was added to a NetVault Server that had the Security Disabled and have not set a password for the default user.
First: Make sure the NetVault Server does not have a check mark by the box "Disable Security in the NetVault Security Tab" when you open the NetVault Configurator in the NetVault Server.
Second: Make sure you set a password for the Machine in the same Tab above.
Third: Open the NetVault GUI in the NetVault Server and click on Administration, then select Access Control and make sure you set a password to all clients especially the admin and the default.
Fourth: You must click on "Client Management" and "Check Access" for all clients and input the newly created password in order to apply the changes.
Now, whenever the GUI is opened from a NetVault Client Machine, a Password must be entered for the Client to be able to act as a Domain Manager.
