Computer Associates BABNWUP900NE6 Clients Agents Guide - Page 23

Host Equivalence User Credentials, Access Control List Support for UNIX and Linux - download

Page 23 highlights

Common Agent Automatic Installation Host Equivalence User Credentials When the Common Agent checks user credentials, it gives preference to host equivalence settings of the system. A UNIX, Linux, or Mac OS X system can be set up to grant access for specific users on specific hosts without requiring the user to provide credentials. You can grant this access by adding the specific user IDs to the /etc/hosts.equiv or .rhosts file. By default, the Common Agent follows these rules, then checks the user's password for authorization. To disable host equivalence checking, define the NO_HOSTS_EQUIV=1 environment variable in the agent.cfg file, as shown in the following example: [36] #[BABcmagt] NAME BABcmagt HOME /opt/CA/BABcmagt ENV NO_HOSTS_EQUIV=1 You can place the Common Agent in No Password mode or Single User mode with a set of access control lists if necessary. For more information about ACLs, see UNIX, Linux, and Mac OS X Access Control Lists in the chapter "Adding and Configuring the Client Agents." Access Control List Support for UNIX and Linux BrightStor ARCserve Backup Client Agent for UNIX, BrightStor ARCserve Backup Client Agent for Linux, and BrightStor ARCserve Backup Client Agent for Mainframe Linux back up and restore the access control list (ACL) for files and directories on a Linux system that have been backed up using the Linux client agent. The extended attributes for Linux are also backed up. ACL gives administrators finer control over files and directory access. The Linux client agent can read and set the ACL for each file and directory. Verify ACL Libraries To enable this feature, certain ACL libraries are required. To check that you have the required ACL libraries installed, run the following command: >rpm -qa |grep libacl If the libacl-devel-* or libacl-* packages are not listed, install them by using the following procedure. 1. Copy the ACL library packages from the CD image, or download them from the internet to your Linux system: -libacl package (such as libacl-2.2.3-1.rpm) -libacl-devel package (such as libacl-devel-2.3.3-1.rpm) Installing the Client Agents 23

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73

Common Agent Automatic Installation
Host Equivalence User Credentials
When the Common Agent checks user credentials, it gives preference to host
equivalence settings of the system. A UNIX, Linux, or Mac OS X system can be
set up to grant access for specific users on specific hosts without requiring the
user to provide credentials. You can grant this access by adding the specific
user IDs to the /etc/hosts.equiv or .rhosts file. By default, the Common Agent
follows these rules, then checks the user’s password for authorization. To
disable host equivalence checking, define the NO_HOSTS_EQUIV=1
environment variable in the agent.cfg file, as shown in the following example:
[36]
#[BABcmagt]
NAME
BABcmagt
HOME
/opt/CA/BABcmagt
ENV
NO_HOSTS_EQUIV=1
You can place the Common Agent in No Password mode or Single User mode
with a set of access control lists if necessary. For more information about
ACLs, see UNIX, Linux, and Mac OS X Access Control Lists in the chapter
“Adding and Configuring the Client Agents.”
Access Control List Support for UNIX and Linux
BrightStor ARCserve Backup Client Agent for UNIX, BrightStor ARCserve
Backup Client Agent for Linux, and BrightStor ARCserve Backup Client Agent
for Mainframe Linux back up and restore the access control list (ACL) for files
and directories on a Linux system that have been backed up using the Linux
client agent. The extended attributes for Linux are also backed up. ACL gives
administrators finer control over files and directory access. The Linux client
agent can read and set the ACL for each file and directory.
Verify ACL Libraries
To enable this feature, certain ACL libraries are required. To check that you
have the required ACL libraries installed, run the following command:
>rpm -qa |grep libacl
If the libacl-devel-* or libacl-* packages are not listed, install them by using
the following procedure.
1.
Copy the ACL library packages from the CD image, or download them from
the internet to your Linux system:
-libacl package (such as libacl-2.2.3-1.rpm)
-libacl-devel package (such as libacl-devel-2.3.3-1.rpm)
Installing the Client Agents
23