サポートと今すぐチャット
サポートとのチャット

NetVault 12.3 - Administration Guide

Introduction Getting started Configuring clients Managing catalog search Configuring storage devices Backing up data Managing policies Restoring data Managing NetVault Backup dashboard Managing jobs Monitoring logs Managing storage devices
Monitoring device activity Managing disk-based storage devices in list view Managing disk-based storage devices in tree view Managing the Snapshot Array Manager Managing tape libraries in list view Managing tape libraries in tree view Managing tape drives in list view Managing tape drives in tree view Adding shared devices
Managing storage media Managing user and group accounts
About user accounts About user and group privileges and presets Creating a user account Modifying a user account Deleting a user account Setting a user policy Using Secure Mode Using Presets User privileges Predefined Presets Integrating Active Directory with NetVault Backup Using Azure Active Directory as an identity provider
Monitoring events and configuring notifications Reporting in NetVault Backup Working with client clusters Configuring default settings for NetVault Backup
About configuring default settings Configuring encryption settings Configuring plug-in options Configuring default settings for post-scripts Configuring default settings for Verify Plug-in Configuring Deployment Manager Settings Configuring Job Manager settings Configuring Logging Daemon settings Configuring Media Manager settings Configuring Network Manager settings Configuring Process Manager settings Configuring RAS device settings Configuring Schedule Manager settings Configuring Web Service settings Configuring Auditor Daemon settings Configuring firewall settings Configuring general settings Configuring security settings Synchronizing NetVault Time Configuring default settings for global notification methods Configuring the reporting utility Configuring NetVault Backup WebUI default settings Configuring NetVault Backup to use a specific VSS provider Configuring default settings using Txtconfig
Diagnostic tracing Managing diagnostic data Using the deviceconfig utility NetVault Backup processes Environment variables Network ports used by NetVault Backup Troubleshooting
Common errors
NetVault Backup Service fails to start on Windows NetVault Backup Service fails to start after the machine is restarted NetVault Backup Service starts, but stops immediately on Linux Login fails after any change in the server IP address Unexpected behavior of NetVault Backup WebUI WebUI does not run in Compatibility View in Internet Explorer NetVault Backup installer fails during push installation VSS-based backup fails Modifying TCP/IP socket buffer size on Windows Restores using Data Copy savesets fail on clients running NetVault Backup 10.0.1 Restore fails on Itanium platforms if the index is larger than 2GB After upgrade, Data Copy and Consolidated backup job on Linux fails After upgrade, console error is displayed on WebUI pages Deployment task hangs on target Linux machine during push installation. Unable to add package store with hostname. Deployment task fails due to network configuration issues. Domain user is unable to login NetVault Backup Server if the workstation attribute is set. Domain user is unable to login NetVault Backup Server on Debian 9. Adding the target machine as a client fails, after successful push installation. Unable to install, uninstall or navigate catalog search page after manually uninstalling NetVault Backup Client Host. Unable to install, uninstall catalog search on client after NetVault Backup Server migration with the same or different server name External Azure AD user cannot add an external Azure AD user to NetVault Backup Server Failed to verify target Windows machine from a Linux-based NetVault Backup server
Safe Mode in NetVault Backup

User privileges

The following table provides a brief description of the types of user privileges in NetVault Backup.

 
Table 103. User privileges in NetVault Backup
Privilege
Description

Clients — Add/remove clients

Permission to add and remove NetVault Backup Clients.

Clients — Add/remove virtual/clustered clients

Permission to add and remove virtual clients.

Clients — Administer client groups

Permission to create, modify, and delete client groups.

Clients — Configure client

Permission to configure clients.

Clients — Get client properties

Permission to view client properties.

Clients — Set firewall relationship

Permission to set firewall relationship between the NetVault Backup Server and Client.

Device — Add or Update Snapshot Array

Permission to add or modify Snapshot Array.

Device —Manage Snapshot Array

Permission to manage snapshots using Explore Snapshot feature

Devices — Add libraries

Permission to add tape libraries to the NetVault Backup Server.

Devices — Add Random Access Store

Permission to add disk-based backup devices.

Devices — Add simple drives

Permission to add standalone drives to the NetVault Backup Server.

Devices — Clean drives

Permission to run the Clean command for a drive.

Devices — Manage devices

Permission to perform device management tasks.

Devices — Open and close entry/exit ports

Permission to issue commands to open or close the entry/exit ports.

Devices — Open and close library doors

Permission to issue commands to open or close the library doors.

Devices — Perform device checks

Permission to run check off-line devices.

Devices — Reconfigure devices

Permission to reconfigure added devices.

Devices — Remove devices

Permission to remove devices from the NetVault Backup Server.

Devices — Set drive cleaning properties

Permission to set the drive cleaning options.

Devices — Update Random Access Store

Permission to modify disk-based backup devices.

Jobs — Abort jobs

Permission to abort active jobs.

Jobs — Acknowledge policy errors

Permission to acknowledge policy errors and remove the error flags.

Jobs — Administer backup/restore sets

Permission to create, modify, and delete NetVault Backup Sets.

Jobs — Administer policies

Permission to create and manage policies.

Jobs — Delete job

Permission to delete NetVault Backup jobs.

Jobs — Delete scheduled phase

Permission to delete scheduled jobs.

Jobs — Hold job

Permission to place jobs on hold.

Jobs — Jobs owned by this user may run

Permission to submit and run NetVault Backup jobs.

NOTE: This user privilege lets you submit or run a job, but it does not let you create or modify jobs. To create backup and restore jobs, you require the following user privileges:
•
Jobs — Submit/update backup Jobs
•
Jobs — Submit/update restore Jobs

Jobs — Quiesce policy

Permission to place backup policies in a quiesced state.

Jobs — Restart job

Permission to restart Plug-in for FileSystem backups.

Jobs — Resume job

Permission to resume jobs placed on hold.

Jobs — Run predefined jobs instantly

Permission to issue the Run Now command.

Jobs — Stop Job

Permission to stop active Plug-in for FileSystem backups.

Jobs — Submit/update backup jobs

Permission to create and modify backup jobs.

NOTE: This user privilege lets you create and modify backup jobs, but it does not let you run a backup job. To run a job, you require the user privilege Jobs — Jobs owned by this user may run.

Jobs — Submit/update restore jobs

Permission to create and modify restore jobs.

NOTE: This user privilege lets you create and modify restore jobs, but it does not let you run a restore job. To run a restore job, you require the user privilege Jobs — Jobs owned by this user may run.

Jobs — View backup jobs

Permission to view backup job definitions.

Jobs — View backup/restore sets

Permission to view set definitions.

Jobs — View policies

Permission to view policy definitions.

Jobs — View restore jobs

Permission to view restore job definitions.

Media — Blank ANSI media

Permission to blank ANSI media.

Media — Blank bad media

Permission to blank a bad media item.

Media — Blank media

Permission to blank media.

Media — Blank non-NetVault media

Permission to blank non-NetVault Backup media.

Media — Export media

Permission to export media to entry/exit port.

Media — Get media or device item status

Permission to view device and media status.

Media — Import media

Permission to import NetApp VTL’s shadow tapes.

Media — List media

Permission to view media list.

Media — Load/unload media from drives

Permission to load and unload media from drives.

Media — Manage media requests

Permission to change media request priority and place media request on hold.

Media — Mark media for re-use

Permission to manually mark media for reuse.

Media — Modify backup expiry data

Permission to modify the retirement period for backups.

Media — Remove media

Permission to remove media information from the NetVault Database.

Media — Scan foreign media

Permission to scan foreign media items and import backups residing on them.

Media — View and diagnose media requests

Permission to view and diagnose Media requests.

Media — View backup expiry data

Permission to view the retirement period for backups.

Media — View media properties

Permission to view media properties.

Media — Write media labels

Permission to perform individual and bulk media labeling operations.

Reports — Modify/edit report Jobs

and components

Permission to create and modify user-defined reports and report components.

Reports — View and run reports

Permission to generate and view reports.

System — Change global notification

profile

Permission to set up global notification profile for NetVault Backup.

System — Dump log entries

Permission to generate log dumps in text, binary, or database table dump formats.

System — Install/remove software

packages

Permission to install and remove NetVault Backup plug-ins.

System — Install license key

Permission to install product license keys.

System — Manage dashboards

Permission to manage NetVault Backup dashboard.

System — Permitted to use CLI tools

Permission to use the CLI utilities.

System — Purge log entries

Permission to delete log messages from the NetVault Database.

System — View dashboards

Permission to view NetVault Backup dashboard.

Users — Administer user accounts

Permission to create, modify, or delete user accounts.

Users — Reset password for user

Permission to reset password for user accounts.

Server- Manage Server Settings

Permission to manage server settings.

Server - View Events

Permission to view events.

Server - View Logs

Permission to view logs.

Service - Administer and restart

Permission to administer and restart the NetVault Backup services.

Predefined Presets

•
Administrator: This role allows the user to administer NetVault Backup and perform all functions in NetVault Backup.
•
Backup Administrator: This role allows the user to administer backup and restore jobs and perform device- and media-related functions.
•
Backup Operator: This role allows the user to run and manage backup jobs. This role also allows the user to administer restore jobs.
•
Helpdesk: This role allows the user to perform restore jobs.
•
Media Operator: This role allows the user to perform device- and media-related functions.
•
Monitor: This role allows the user to monitor clients, devices, jobs, and storage media.

The following table lists the privileges included in the predefined Presets.

 
Table 104. Predefined Presets
Privilege
Administrator
Backup Administrator
Backup Operator
Helpdesk
Media Operator
Monitor

Clients — Add/remove clients

X

 

 

 

 

 

Clients — Add/remove virtual/clustered clients

X

 

 

 

 

 

Clients — Administer client groups

X

 

 

 

 

 

Clients — Configure client

X

 

 

 

 

 

Clients — Get client properties

X

X

X

X

 

X

Clients — Set firewall relationship

X

X

 

 

 

 

Device — Add or Update Snapshot Array

X

X

 

 

 

 

Devices — Add libraries

X

X

 

 

 

 

Devices — Add Random Access Store

X

X

 

 

 

 

Devices — Add simple drives

X

X

 

 

 

 

Devices — Clean drives

X

X

 

 

X

 

Devices — Manage devices

X

X

 

 

 

 

Devices — Open and close entry/exit ports

X

X

 

 

X

 

Devices — Open and close library doors

X

X

 

 

X

 

Devices — Perform device checks

X

X

 

 

X

X

Devices — Reconfigure devices

X

X

 

 

 

 

Devices — Remove devices

X

X

 

 

 

 

Devices — Set drive cleaning properties

X

X

 

 

X

 

Devices — Update Random Access Store

X

X

 

 

 

 

Jobs — Abort jobs

X

X

X

 

 

 

Jobs — Acknowledge policy errors

X

X

X

 

 

 

Jobs — Administer backup/restore sets

X

X

X

X

 

 

Jobs — Administer policies

X

X

 

 

 

 

Jobs — Delete job

X

X

 

 

 

 

Jobs — Delete scheduled phase

X

X

X

 

 

 

Jobs — Hold job

X

X

X

 

 

 

Jobs — Jobs owned by this user may run

X

X

X

X

 

 

Jobs — Quiesce policy

X

X

X

 

 

 

Jobs — Restart job

X

X

X

 

 

 

Jobs — Resume job

X

X

X

 

 

 

Jobs — Run predefined jobs instantly

X

X

X

X

 

 

Jobs — Stop Job

X

X

X

 

 

 

Jobs — Submit/update backup jobs

X

X

X

 

 

 

Jobs — Submit/update restore jobs

X

X

X

X

 

 

Jobs — View backup jobs

X

X

X

X

 

X

Jobs — View backup/restore sets

X

X

X

X

 

X

Jobs — View policies

X

X

X

X

 

X

Jobs — View restore jobs

X

X

X

X

 

X

Media — Blank ANSI media

X

X

 

 

X

 

Media — Blank bad media

X

X

 

 

X

 

Media — Blank media

X

X

 

 

 

 

Media — Blank non-NetVault media

X

X

 

 

 

 

Media — Export media

X

X

 

 

X

 

Media — Get media or device item status

X

X

 

 

X

 

Media — Import media

X

X

 

 

X

 

Media — List media

X

X

X

X

X

X

Media — Load/unload media from drives

X

X

X

 

X

 

Media — Manage media requests

X

X

 

 

X

 

Media — Mark media for re-use

X

X

 

 

X

 

Media — Modify backup expiry data

X

X

 

 

X

 

Media — Remove media

X

X

 

 

X

 

Media — Scan foreign media

X

X

 

 

X

 

Media — View and diagnose media requests

X

X

X

 

X

X

Media — View backup expiry data

X

X

 

 

X

 

Media — View media properties

X

X

X

 

X

X

Media — Write media labels

X

X

 

 

X

 

Reports — Modify/edit report Jobs and components

X

X

 

 

 

X

Reports — View and run reports

X

X

 

 

 

X

System — Change global notification

profile

X

X

 

 

 

 

System — Dump log entries

X

X

X

 

 

 

System — Install/remove software packages

X

 

 

 

 

 

System — Install license key

X

 

 

 

 

 

System — Manage dashboards

X

 

 

 

 

 

System — Permitted to use CLI tools

X

X

 

 

 

 

System — Purge log entries

X

X

 

 

 

 

System — View dashboards

X

X

X

X

X

X

Users — Administer user accounts

X

 

 

 

 

 

Users — Reset password for user

X

 

 

 

 

 

Integrating Active Directory with NetVault Backup

NetVault Backup installed on a Windows or Linux machine can communicate with Microsoft Active Directory (AD). Additionally, NetVault Backup installed on a Linux machine can communicate with OpenLDAP Directory Services and Samba Active Directory. Integrating AD with NetVault Backup enables role-based access control in NetVault Backup. It lets users log in to NetVault Backup using their AD credentials. It also lets AD users manage NetVault Backup users.

 
* 
IMPORTANT: During Active Directory integration with NetVault Backup, the Active Directory service must always be available. Additionally, the NetVault Backup Server should be a member of the domain.

Adding an AD group to NetVault Backup and specifying privileges, levels of access, and notifications for the group ensures that members of the group have the corresponding access from the first time that they log on.

•
Considerations for Linux-based NetVault Backup
•
Managing AD users
•
Managing AD groups

Considerations for Linux-based NetVault Backup

Before you integrate Active Directory (AD) with a Linux-based installation of NetVault Backup, consider the following conditions and prerequisites:

•
To let the Linux server communicate with AD, integrate NetVault Backup with the domain controller using Samba Winbind or System Security Services Daemon (SSSD).
•
Host name of the Linux machine should be set to its FQDN. (For example, mymachine.mydomain.com)
•
Enable the use of fully qualified domain names on the Linux machine on which NetVault Backup is installed. Short names are not permitted.
•
Samba Winbind: Under the [global] section, smb.conf must have the following entry:
winbind use default domain = no
•
SSSD: under the [domain/<domain name>] section, sssd.conf must have the following entry:
use_fully_qualified_names = True
•
On the Linux machine where NetVault Backup is installed, to retrieve all domain controller groups, enable enumeration of group databases.
•
Samba Winbind: Under the [global] section, smb.conf must have the following entry:
winbind enum groups = yes
•
SSSD: Under the [domain/<domain name>], to retrieve domain controller groups and to fetch groups from child and trusted domains, respectively, the sssd.conf must have the following entries:
enumerate = True
subdomain_enumerate = all
•
While logging in or adding a domain user, using the DNS suffix with the domain name is recommended; for example, domain.local\user or username@dns.local.
関連ドキュメント

The document was helpful.

評価を選択

I easily found the information I needed.

評価を選択