安全指南 - NetBackup Appliance 32.pdf

需积分: 5 111 浏览量更新于2023-11-23 收藏 1.83MB PDF 举报

本文为Veritas NetBackup™Appliance Security Guide的第32版，旨在介绍Veritas NetBackup Appliance的安全性指南。该产品由Veritas Technologies LLC版权所有，其中包含第三方软件需要提供归属权归属。Veritas和NetBackup分别为Veritas Technologies LLC或其关联公司在美国和其他国家的商标或注册商标。本文还提到该产品可能包含一些可在开源或免费软件许可下使用的第三方程序。总的来说，本文主要是为了阐述Veritas NetBackup Appliance的安全性设置和相关法律说明。

Table 2-1

NetBackup appliance account types

DescriptionAccount name

The admin account is the default Administrator user on the NetBackup appliance. This

account provides full appliance access and control for the default Administrator user.

New appliances are shipped with the following default logon credentials:

■ User name: admin

■ Password: P@ssw0rd

When mounting or mapping shares from an appliance, make note of the following:

■ Windows: Only the local admin account is authorized to mount or map Windows CIFS

shares.

■ Linux: Only users with a root access account can issue the mount command directly to

mount NFS shares.

admin

The AMSadmin account provides full access to the following appliance interfaces:

■ Appliance Management Console

■ NetBackup Appliance Web Console

■ NetBackup Appliance Shell Menu

■ NetBackup Administration console

For complete details about this account, see the Veritas Appliance Management Guide.

AMSadmin

The maintenance account is used by Veritas Support through the NetBackup Appliance

Shell Menu (after an administrative log-on). This account is used specifically to perform

maintenance activity or to troubleshoot the appliance.

Note: This account is also used to make GRUB changes, and for single user mode boot

when the STIG option is enabled.

maintenance

16User authentication

About user authentication on the NetBackup appliance

Table 2-1

NetBackup appliance account types (continued)

DescriptionAccount name

The nbasecadmin account is used by the Security Administrator user for role-based access

control (RBAC) and managing backup and restore operations in NetBackup. Starting with

appliance release 3.1.2, this user is created automatically when you perform the initial

configuration on an appliance master server or when you upgrade an appliance master

server.

Once created, this account is assigned the default appliance password. When this user first

logs in to the NetBackup Appliance Shell Menu, they are prompted to change the default

password for the account.

Note: This user cannot log in to the NetBackup Web UI until the default password is

changed.

After the default password has been changed, by default, the nbasecadmin user is allowed

the following access and privileges:

■ NetBackup Web UI

Access to the NetBackup Web UI lets this user set user roles for other NetBackup users,

manage all NetBackup security settings, and perform backup and restore operations.

Note: Starting with software version 3.2, you can assign backup and restore privileges

to the nbasecadmin user. If you are upgrading from an earlier version, you must manually

add the backup and restore privileges to the nbasecadmin user account. For details,

see the NetBackup Web UI Security Administrator’s Guide.

■ NetBackup Appliance Shell Menu

Access is limited to the Main > Settings > Password view.

This view is visible to the nbasecadmin user and all appliance local users that have

No Role assigned on the appliance. When the nbasecadmin user is logged in to the

shell menu, only the following menu items are available:

Exit

Password

The access rules for the nbasecadmin user can also be changed to allow more privileges.

To access the NetBackup Web UI, this user can open a browser window and enter the URL

https:<appliance master server host name>/webui.

For more information about RBAC and NetBackup user role management, see the NetBackup

Web UI Security Administrator’s Guide.

nbasecadmin

The following describes the accounts that are available only for internal users.

These accounts do not allow system access through the NetBackup Appliance Web

Console or the NetBackup Appliance Shell Menu.

17User authentication

About user authentication on the NetBackup appliance

Table 2-3

NetBackup appliance user types (continued)

NotesDescriptionUser type

■ You can use the Settings > Authentication >

User Management page from the NetBackup

Appliance Web Console to add, delete, and

manage AD users and user groups.

■ You can use the Settings > Security >

Authentication > ActiveDirectory

command from the NetBackup Appliance Shell

Menu to add and delete AD users and user

groups.

■ You can assign the Administrator or

NetBackupCLI role to an AD user or user group.

Note: The NetBackupCLI role can be assigned

to a maximum of nine (9) user groups at any

given time.

An Active Directory (AD) user or user group

exists on an external AD server. After

configuring the appliance to communicate with

the AD server, you can register those users

and user groups with the appliance. Once the

user has been registered (added), you can

then grant or revoke the appropriate appliance

access permissions.

See “About authenticating Active Directory

users” on page 26.

Active

Directory

■ You can use the Settings > Authentication >

User Management page from the NetBackup

Appliance Web Console to add, delete, and

manage NIS users and user groups.

■ You can use the Settings > Security >

Authentication > Kerberos command from

the NetBackup Appliance Shell Menu to add and

delete NIS users and user groups.

■ You can assign the Administrator or

NetBackupCLI role to a NIS user or user group.

Note: The NetBackupCLI role can be assigned

to a maximum of nine (9) user groups at any

given time.

A NIS (Network Information Service) user or

user group exists on an external NIS server.

Unlike the LDAP and AD implementations,

configuring the appliance to communicate with

the NIS domain requires Kerberos

authentication. You must have an existing

Kerberos service associated with your NIS

server before you can configure the appliance

to register the NIS users.

After configuring the appliance to communicate

with the NIS server and the Kerberos server,

you can register the NIS users and user

groups with the appliance. Once the user has

been registered (added) to the appliance, you

can then grant or revoke the appropriate

appliance access permissions.

See “About authenticating Kerberos-NIS

users” on page 29.

Kerberos-NIS

For detailed instructions on configuring new users, refer to the NetBackup Appliance

Administrator's Guide.

20User authentication

About user authentication on the NetBackup appliance

剩余134页未读，继续阅读

weixin_40191861_zj

粉丝: 83
资源: 1万+

安全指南 - NetBackup Appliance 32.pdf

NetBackup Appliance Security Guide - 3.3.0.1.pdf

NetBackup Appliance Security Guide - 3301.pdf

NetBackup Appliance Security Guide - 3.1.pdf

nbcssc -s -a NetBackup -f -m mediaserver01进程是什么

Veritas NetBackup 5240一体机在企业级数据保护中扮演什么角色，2.7.3版本有哪些新特性？

Veritas NetBackup 5240 Appliance在2019年的更新中引入了哪些创新硬件特性以及产品功能改进？

Veritas NetBackup 5240一体机如何提升企业级数据保护的能力？2.7.3版本新特性具体包括哪些？

NetBackup 5240一体机在企业级数据保护中扮演什么角色，并介绍2.7.3版本新增功能的详细信息。

Veritas NetBackup 5240 Appliance在2019年更新中有哪些新的硬件功能和产品特性？

nbu windows

最新资源