Computer Associates BABNWUP900NE6 Clients Agents Guide - Page 54

UNIX, Linux, and Mac OS X Access Control Lists, For UNIX, and Mac OS X client agents

Get Computer Associates BABNWUP900NE6 - BRIGHTSTOR ARCSERVE BACKUP V9 PDF manuals and user guides
UPC - 757943261509
View all Computer Associates BABNWUP900NE6 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 54 highlights

UNIX, Linux, and Mac OS X Client Agent Configuration File UNIX, Linux, and Mac OS X Access Control Lists For UNIX, Linux, and Mac OS X client agents, ACLs are supported in Single User mode only. This is also known as No Password mode. A UNIX, Linux, and Mac OS X client agent-or database backup agent-can be put into Single User mode by specifying a NOPASSWORD entry in its corresponding section in the Common Agent configuration file, agent.cfg, located in /opt/CA/BABcmagt. A UNIX, Linux, and Mac OS X client agent can also be put into Single User mode by specifying the -S or -NOPASSWORD option in the uag.cfg. You can use two types of ACLs with the UNIX, Linux, or Mac OS X client agent: „ An access control list that denies or allows specific users to perform backups or restores. For example, a part of the agent.cfg file is shown in the following sample. You need to make similar changes for other client agent sections if you want to apply ACLs to those client agents too. [0] NAMEBABagentux VERSIONnn.n.n HOME/opt/uagent NOPASSWORD CAUSER A:CAUSER1 N:CAUSER2 NOPASSWORD enables Single User mode, and CAUSER specifies the users for whom permission is being granted or denied. (A stands for ALLOW and N stands for DENY.) A:CAUSER1 enables CAUSER1 to perform jobs, and N:CAUSER2 denies access to CAUSER2. Note: For UNIX and Linux client agents, the object type is [0]. For the Mac OS X client agent, the object type is [4]. „ An access control list that determines whether specific IP addresses can access the system. For example, a part of the agent.cfg file is shown in the following sample. You must make similar changes for other client agent sections of the file if you want to apply ACLs to those client agents too. [0] NAMEBABagentux VERSIONnn.n.n HOME/opt/uagent NOPASSWORD ALLOW N:172.16.0.0(255.255.255.0) H:172.31.255.255 DENY N:192.168.0.0(255.255.255.0) H:192.168.255.255 NOPASSWORD enables the Single User mode, and ALLOW and DENY specify whether a particular network or IP address is allowed to access the system. N denotes a network address and H denotes a host's IP address. Note: An optional subnet mask can follow a network address; subnet masks are shown in parentheses. 54 Client Agents Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
UNIX, Linux, and Mac OS X Client Agent Configuration File
UNIX, Linux, and Mac OS X Access Control Lists
For UNIX, Linux, and Mac OS X client agents, ACLs are supported in Single
User mode only. This is also known as No Password mode. A UNIX, Linux, and
Mac OS X client agent—or database backup agent—can be put into Single User
mode by specifying a NOPASSWORD entry in its corresponding section in the
Common Agent configuration file, agent.cfg, located in /opt/CA/BABcmagt. A
UNIX, Linux, and Mac OS X client agent can also be put into Single User mode
by specifying the -S or -NOPASSWORD option in the uag.cfg. You can use two
types of ACLs with the UNIX, Linux, or Mac OS X client agent:
An access control list that denies or allows specific users to perform
backups or restores. For example, a part of the agent.cfg file is shown in
the following sample. You need to make similar changes for other client
agent sections if you want to apply ACLs to those client agents too.
[0]
NAMEBABagentux
VERSIONnn.n.n
HOME/opt/uagent
NOPASSWORD
CAUSER A:CAUSER1 N:CAUSER2
NOPASSWORD enables Single User mode, and CAUSER specifies the users
for whom permission is being granted or denied. (A stands for ALLOW and
N stands for DENY.) A:CAUSER1 enables CAUSER1 to perform jobs, and
N:CAUSER2 denies access to CAUSER2.
Note:
For UNIX and Linux client agents, the object type is [0]. For the Mac
OS X client agent, the object type is [4].
An access control list that determines whether specific IP addresses can
access the system. For example, a part of the agent.cfg file is shown in the
following sample. You must make similar changes for other client agent
sections of the file if you want to apply ACLs to those client agents too.
[0]
NAMEBABagentux
VERSIONnn.n.n
HOME/opt/uagent
NOPASSWORD
ALLOW N:172.16.0.0(255.255.255.0) H:172.31.255.255
DENY N:192.168.0.0(255.255.255.0) H:192.168.255.255
NOPASSWORD enables the Single User mode, and ALLOW and DENY
specify whether a particular network or IP address is allowed to access the
system. N denotes a network address and H denotes a host’s IP address.
Note:
An optional subnet mask can follow a network address; subnet
masks are shown in parentheses.
54
Client Agents Guide