Computer Associates ARB6002700WF0. ..... Administration Guide - Page 243

BrightStor ARCserve Backup Domains BrightStor ARCserve Backup Domains BrightStor ARCserve Backup Domains are a logical collection (grouping) of BrightStor ARCserve Backup servers that allow easier administration of BrightStor ARCserve Backup servers and users. In addition to providing a single sign-on to multiple BrightStor ARCserve Backup servers, it also provides the same access level (privileges) on all the servers for the same user. A BrightStor ARCserve Backup Domain has a name and a list of BrightStor ARCserve Backup servers that belong to it. This allows a user managing the domain to select any server from the BrightStor ARCserve Backup Domain to perform database management, tape and device management, and backup policy and schedule management without requiring logging in to each BrightStor ARCserve Backup server separately. If a user can do a database purge operation on one server, this user can do the same on any server in the same domain. Each domain has a name, a mandatory designated Primary server, and an optional Secondary server. Users can start and stop BrightStor ARCserve Backup services on any server in the BrightStor ARCserve Backup Domain. Primary and Secondary Domain Servers Equivalence The Primary Domain server will synchronize information to the Secondary Domain server, which serves to provide fault tolerance in the event of failure of the primary. caroot is a predefined root (administrator) user in the BrightStor ARCserve Backup Domain. By default, BrightStor ARCserve Backup creates a caroot equivalency for the administrator user on the Primary Domain Server, Secondary Domain server, and all BrightStor ARCserve Backup Domain member servers during setup. However, it does not create this equivalency for any other users on the Secondary Domain Servers and all other Domain member users. Hence, prior to using the command line utilities in a BrightStor ARCserve Backup Domain, you must create this equivalency. By creating an equivalence list, all clients can use BrightStor ARCserve Backup without the user logging into the Domain. BrightStor ARCserve Backup can validate if the current user has equivalent access to the domain. Effectively the OS access guarantees a particular BrightStor ARCserve Backup access level. For example: ca_auth -user add xyz machine1 caroot caroot user xyz@machine1 can be defined as having equivalence to user caroot on BrightStor ARCserve Backup Domain ABC. If such equivalence is defined when user xyz logs into system machine1 - the user can execute BrightStor ARCserve Backup commands as a root user of the BrightStor ARCserve Backup domain and be automatically authenticated. Administering the Backup Server 9-19