Chat now with support
Chat with Support

NetVault 13.2 - Administration Guide

Introduction Getting started Configuring clients Managing catalog search Configuring storage devices
About storage devices SAN considerations Quest DR Series systems Quest QoreStor Object storage NetVault SmartDisk EMC Data Domain Systems Snapshot Array Manager Virtual Tape Libraries Virtual standalone drives Shared Virtual Tape Libraries Physical tape devices Storage tiers
Backing up data Managing policies Restoring data Managing NetVault dashboard Managing jobs Monitoring logs Managing storage devices
Monitoring device activity Managing disk-based storage devices in list view Managing disk-based storage devices in tree view Managing the Snapshot Array Manager Managing tape libraries in list view Managing tape libraries in tree view Managing tape drives in list view Managing tape drives in tree view Adding shared devices
Managing storage media Managing user and group accounts Monitoring events and configuring notifications Reporting in NetVault Working with client clusters Configuring default settings for NetVault
About configuring default settings Configuring encryption settings Configuring plug-in options Configuring default settings for post-scripts Configuring default settings for Verify Plug-in Configuring Deployment Manager Settings Configuring Job Manager settings Configuring Logging Daemon settings Configuring Media Manager settings Configuring Network Manager settings Configuring Process Manager settings Configuring RAS device settings Configuring Schedule Manager settings Configuring Web Service settings Configuring Auditor Daemon settings Configuring firewall settings Configuring general settings Configuring security settings Synchronizing NetVault Time Configuring default settings for global notification methods Configuring the reporting utility Configuring NetVault WebUI default settings Configuring NetVault to use a specific VSS provider Configuring default settings using Txtconfig
Diagnostic tracing Managing diagnostic data Using the deviceconfig utility NetVault processes Environment variables Network ports used by NetVault Troubleshooting
Common errors
NetVault Service fails to start on Windows NetVault Service fails to start after the machine is restarted NetVault Service starts, but stops immediately on Linux Login fails after any change in the server IP address Unexpected behavior of NetVault WebUI WebUI does not run in Compatibility View in Internet Explorer NetVault installer fails during push installation VSS-based backup fails Modifying TCP/IP socket buffer size on Windows Restores using Data Copy savesets fail on clients running NetVault 10.0.1 Restore fails on Itanium platforms if the index is larger than 2GB After upgrade, Data Copy and Consolidated backup job on Linux fails After upgrade, console error is displayed on WebUI pages Deployment task hangs on target Linux machine during push installation. Unable to add package store with hostname. Deployment task fails due to network configuration issues. Domain user is unable to login NetVault Server if the workstation attribute is set. Domain user is unable to login NetVault Server on Debian 9. Adding the target machine as a client fails, after successful push installation. Unable to install, uninstall or navigate catalog search page after manually uninstalling NetVault Client Host. Unable to install, uninstall catalog search on client after NetVault Server migration with the same or different server name External Azure AD user cannot add an external Azure AD user to NetVault Server Failed to verify target Windows machine from a Linux-based NetVault Server NetVault is unable to send reports as an email attachment in PDF format on RHEL 5.x platform Restore fails on NetVault Database backup When using RDA for backups, only four streams are used at once Unable to create large VTL on Linux Browsing a folder with a large number of files times out Push installation failed on Linux
Safe Mode in NetVault

User privileges

The following table provides a brief description of the types of user privileges in NetVault.

 
Table 107. User privileges in NetVault
Privilege
Description

Clients — Add/remove clients

Permission to add and remove NetVault Clients.

Clients — Add/remove virtual/clustered clients

Permission to add and remove virtual clients.

Clients — Administer client groups

Permission to create, modify, and delete client groups.

Clients — Configure client

Permission to configure clients.

Clients — Get client properties

Permission to view client properties.

Clients — Set firewall relationship

Permission to set firewall relationship between the NetVault Server and Client.

Device — Add or Update Snapshot Array

Permission to add or modify Snapshot Array.

Device —Manage Snapshot Array

Permission to manage snapshots using Explore Snapshot feature

Devices — Add libraries

Permission to add tape libraries to the NetVault Server.

Devices — Add Random Access Store

Permission to add disk-based backup devices.

Devices — Add simple drives

Permission to add standalone drives to the NetVault Server.

Devices — Clean drives

Permission to run the Clean command for a drive.

Devices — Manage devices

Permission to perform device management tasks.

Devices — Open and close entry/exit ports

Permission to issue commands to open or close the entry/exit ports.

Devices — Open and close library doors

Permission to issue commands to open or close the library doors.

Devices — Perform device checks

Permission to run check off-line devices.

Devices — Reconfigure devices

Permission to reconfigure added devices.

Devices — Remove devices

Permission to remove devices from the NetVault Server.

Devices — Set drive cleaning properties

Permission to set the drive cleaning options.

Devices — Update Random Access Store

Permission to modify disk-based backup devices.

Jobs — Abort jobs

Permission to abort active jobs.

Jobs — Acknowledge policy errors

Permission to acknowledge policy errors and remove the error flags.

Jobs — Administer backup/restore sets

Permission to create, modify, and delete NetVault Sets.

Jobs — Administer policies

Permission to create and manage policies.

Jobs — Delete job

Permission to delete NetVault jobs.

Jobs — Delete scheduled phase

Permission to delete scheduled jobs.

Jobs — Hold job

Permission to place jobs on hold.

Jobs — Jobs owned by this user may run

Permission to submit and run NetVault jobs.

NOTE: This user privilege lets you submit or run a job, but it does not let you create or modify jobs. To create backup and restore jobs, you require the following user privileges:
•
Jobs — Submit/update backup Jobs
•
Jobs — Submit/update restore Jobs

Jobs — Quiesce policy

Permission to place backup policies in a quiesced state.

Jobs — Restart job

Permission to restart Plug-in for FileSystem backups.

Jobs — Resume job

Permission to resume jobs placed on hold.

Jobs — Run predefined jobs instantly

Permission to issue the Run Now command.

Jobs — Stop Job

Permission to stop active Plug-in for FileSystem backups.

Jobs — Submit/update backup jobs

Permission to create and modify backup jobs.

NOTE: This user privilege lets you create and modify backup jobs, but it does not let you run a backup job. To run a job, you require the user privilege Jobs — Jobs owned by this user may run.

Jobs — Submit/update restore jobs

Permission to create and modify restore jobs.

NOTE: This user privilege lets you create and modify restore jobs, but it does not let you run a restore job. To run a restore job, you require the user privilege Jobs — Jobs owned by this user may run.

Jobs — View backup jobs

Permission to view backup job definitions.

Jobs — View backup/restore sets

Permission to view set definitions.

Jobs — View policies

Permission to view policy definitions.

Jobs — View restore jobs

Permission to view restore job definitions.

Media — Blank ANSI media

Permission to blank ANSI media.

Media — Blank bad media

Permission to blank a bad media item.

Media — Blank media

Permission to blank media.

Media — Blank non-NetVault media

Permission to blank non-NetVault media.

Media — Export media

Permission to export media to entry/exit port.

Media — Get media or device item status

Permission to view device and media status.

Media — Import media

Permission to import NetApp VTL’s shadow tapes.

Media — List media

Permission to view media list.

Media — Load/unload media from drives

Permission to load and unload media from drives.

Media — Manage media requests

Permission to change media request priority and place media request on hold.

Media — Mark media for re-use

Permission to manually mark media for reuse.

Media — Modify backup expiry data

Permission to modify the retirement period for backups.

Media — Remove media

Permission to remove media information from the NetVault Database.

Media — Scan foreign media

Permission to scan foreign media items and import backups residing on them.

Media — View and diagnose media requests

Permission to view and diagnose Media requests.

Media — View backup expiry data

Permission to view the retirement period for backups.

Media — View media properties

Permission to view media properties.

Media — Write media labels

Permission to perform individual and bulk media labeling operations.

Reports — Modify/edit report Jobs

and components

Permission to create and modify user-defined reports and report components.

Reports — View and run reports

Permission to generate and view reports.

StorageTier — Administer Storage Tier

Permission to create, modify, and delete storage tier.

StorageTier — List Storage Tier

Permission to view storage tier list.

System — Change global notification

profile

Permission to set up global notification profile for NetVault.

System — Dump log entries

Permission to generate log dumps in text, binary, or database table dump formats.

System — Install/remove software

packages

Permission to install and remove NetVault plug-ins.

System — Install license

Permission to install product license keys.

System — Manage dashboards

Permission to manage NetVault dashboard.

System — Permitted to use CLI tools

Permission to use the CLI utilities.

System — Purge log entries

Permission to delete log messages from the NetVault Database.

System — View dashboards

Permission to view NetVault dashboard.

Users — Administer user accounts

Permission to create, modify, or delete user accounts.

Users — Reset password for user

Permission to reset password for user accounts.

Server- Manage Server Settings

Permission to manage server settings.

Server - View Events

Permission to view events.

Server - View Logs

Permission to view logs.

Service - Administer and restart

Permission to administer and restart the NetVault services.

Predefined Presets

•
Administrator: This role allows the user to administer NetVault and perform all functions in NetVault.
•
Backup Administrator: This role allows the user to administer backup and restore jobs and perform device- and media-related functions.
•
Backup Operator: This role allows the user to run and manage backup jobs. This role also allows the user to administer restore jobs.
•
Helpdesk: This role allows the user to perform restore jobs.
•
Media Operator: This role allows the user to perform device- and media-related functions.
•
Monitor: This role allows the user to monitor clients, devices, jobs, and storage media.

The following table lists the privileges included in the predefined Presets.

 
Table 108. Predefined Presets
Privilege
Administrator
Backup Administrator
Backup Operator
Helpdesk
Media Operator
Monitor

Clients — Add/remove clients

X

 

 

 

 

 

Clients — Add/remove virtual/clustered clients

X

 

 

 

 

 

Clients — Administer client groups

X

 

 

 

 

 

Clients — Configure client

X

 

 

 

 

 

Clients — Get client properties

X

X

X

X

 

X

Clients — Set firewall relationship

X

X

 

 

 

 

Device — Add or Update Snapshot Array

X

X

 

 

 

 

Devices — Add libraries

X

X

 

 

 

 

Devices — Add Random Access Store

X

X

 

 

 

 

Devices — Add simple drives

X

X

 

 

 

 

Devices — Clean drives

X

X

 

 

X

 

Devices — Manage devices

X

X

 

 

 

 

Devices — Open and close entry/exit ports

X

X

 

 

X

 

Devices — Open and close library doors

X

X

 

 

X

 

Devices — Perform device checks

X

X

 

 

X

X

Devices — Reconfigure devices

X

X

 

 

 

 

Devices — Remove devices

X

X

 

 

 

 

Devices — Set drive cleaning properties

X

X

 

 

X

 

Devices — Update Random Access Store

X

X

 

 

 

 

Jobs — Abort jobs

X

X

X

 

 

 

Jobs — Acknowledge policy errors

X

X

X

 

 

 

Jobs — Administer backup/restore sets

X

X

X

X

 

 

Jobs — Administer policies

X

X

 

 

 

 

Jobs — Delete job

X

X

 

 

 

 

Jobs — Delete scheduled phase

X

X

X

 

 

 

Jobs — Hold job

X

X

X

 

 

 

Jobs — Jobs owned by this user may run

X

X

X

X

 

 

Jobs — Quiesce policy

X

X

X

 

 

 

Jobs — Restart job

X

X

X

 

 

 

Jobs — Resume job

X

X

X

 

 

 

Jobs — Run predefined jobs instantly

X

X

X

X

 

 

Jobs — Stop Job

X

X

X

 

 

 

Jobs — Submit/update backup jobs

X

X

X

 

 

 

Jobs — Submit/update restore jobs

X

X

X

X

 

 

Jobs — View backup jobs

X

X

X

X

 

X

Jobs — View backup/restore sets

X

X

X

X

 

X

Jobs — View policies

X

X

X

X

 

X

Jobs — View restore jobs

X

X

X

X

 

X

Media — Blank ANSI media

X

X

 

 

X

 

Media — Blank bad media

X

X

 

 

X

 

Media — Blank media

X

X

 

 

 

 

Media — Blank non-NetVault media

X

X

 

 

 

 

Media — Export media

X

X

 

 

X

 

Media — Get media or device item status

X

X

 

 

X

 

Media — Import media

X

X

 

 

X

 

Media — List media

X

X

X

X

X

X

Media — Load/unload media from drives

X

X

X

 

X

 

Media — Manage media requests

X

X

 

 

X

 

Media — Mark media for re-use

X

X

 

 

X

 

Media — Modify backup expiry data

X

X

 

 

X

 

Media — Remove media

X

X

 

 

X

 

Media — Scan foreign media

X

X

 

 

X

 

Media — View and diagnose media requests

X

X

X

 

X

X

Media — View backup expiry data

X

X

 

 

X

 

Media — View media properties

X

X

X

 

X

X

Media — Write media labels

X

X

 

 

X

 

Reports — Modify/edit report Jobs and components

X

X

 

 

 

X

Reports — View and run reports

X

X

 

 

 

X

Storage Tier — Administer storage tier

X

X

 

 

X

 

Storage Tier — List storage tier

X

X

X

 

X

X

System — Change global notification

profile

X

X

 

 

 

 

System — Dump log entries

X

X

X

 

 

 

System — Install/remove software packages

X

 

 

 

 

 

System — Install license

X

 

 

 

 

 

System — Manage dashboards

X

 

 

 

 

 

System — Permitted to use CLI tools

X

X

 

 

 

 

System — Purge log entries

X

X

 

 

 

 

System — View dashboards

X

X

X

X

X

X

Users — Administer user accounts

X

 

 

 

 

 

Users — Reset password for user

X

 

 

 

 

 

Integrating Active Directory with NetVault

NetVault installed on a Windows or Linux machine can communicate with Microsoft Active Directory (AD). Additionally, NetVault installed on a Linux machine can communicate with OpenLDAP Directory Services and Samba Active Directory. Integrating AD with NetVault enables role-based access control in NetVault. It lets users log in to NetVault using their AD credentials. It also lets AD users manage NetVault users.

 
* 
NOTE: NetVault Server supports Secure Light Directory Access Protocol (LDAPS) protocol for both Microsoft Active Directory (AD) and OpenLDAP Directory.
 
* 
IMPORTANT: During Active Directory integration with NetVault, the Active Directory service must always be available. Additionally, the NetVault Server should be a member of the domain.

Adding an AD group to NetVault and specifying privileges, levels of access, and notifications for the group ensures that members of the group have the corresponding access from the first time that they log on.

•
Considerations for Linux-based NetVault
•
Managing AD users
•
Managing AD groups

Considerations for Linux-based NetVault

Before you integrate Active Directory (AD) with a Linux-based installation of NetVault, consider the following conditions and prerequisites:

•
To let the Linux server communicate with AD, integrate NetVault with the domain controller using Samba Winbind or System Security Services Daemon (SSSD).
•
Host name of the Linux machine should be set to its FQDN. (For example, mymachine.mydomain.com)
•
Enable the use of fully qualified domain names on the Linux machine on which NetVault is installed. Short names are not permitted.
•
Samba Winbind: Under the [global] section, smb.conf must have the following entry:
winbind use default domain = no
•
SSSD: under the [domain/<domain name>] section, sssd.conf must have the following entry:
use_fully_qualified_names = True
•
On the Linux machine where NetVault is installed, to retrieve all domain controller groups, enable enumeration of group databases.
•
Samba Winbind: Under the [global] section, smb.conf must have the following entry:
winbind enum groups = yes
•
SSSD: Under the [domain/<domain name>], to retrieve domain controller groups and to fetch groups from child and trusted domains, respectively, the sssd.conf must have the following entries:
enumerate = True
subdomain_enumerate = all
•
While logging in or adding a domain user, using the DNS suffix with the domain name is recommended; for example, domain.local\user or username@dns.local.
•
When logging in using an Active Directory (AD) user on RHEL 8.x, add the following parameters, and then restart the SSSD service:
•
In the /etc/pam.d/passwd file, add:
auth include system-auth
account include system-auth
•
In the /etc/sssd/sssd.conf file, add:
auth_provider = ad
ad_gpo_access_control = permissive
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating