Computer Associates BABWBN2900E20 Clients Agents Guide - Page 50

UNIX, Linux, and Mac OS X Access Control Lists, Example: Allow or Deny Users

Page 50 highlights

UNIX, Linux, and Mac OS X Client Agent Configuration UNIX, Linux, and Mac OS X Access Control Lists For UNIX, Linux, and Mac OS X client agents, ACLs are supported in Single User mode only. This is also known as No Password mode. A UNIX, Linux, and Mac OS X client agent-or database backup agent-can be put into Single User mode by specifying a NOPASSWORD entry in its corresponding section in the Common Agent configuration file, agent.cfg, located in /opt/CA/ABcmagt. A UNIX, Linux, and Mac OS X client agent can also be put into Single User mode by specifying the -S or -NOPASSWORD option in the uag.cfg. You can use two types of ACLs with the UNIX, Linux, or Mac OS X client agent: Example: Allow or Deny Users An access control list can deny or allow specific users to perform backups or restores. For example, a part of the agent.cfg file is shown in the following sample. You need to make similar changes for other client agent sections if you want to apply ACLs to those client agents too. [0] NAME ABagentux VERSION nn.n.n HOME /opt/CA/ABuagent NOPASSWORD CAUSER A:CAUSER1 N:CAUSER2 NOPASSWORD enables Single User mode, and CAUSER specifies the users for whom permission is being granted or denied. (A stands for ALLOW and N stands for DENY.) A:CAUSER1 enables CAUSER1 to perform jobs, and N:CAUSER2 denies access to CAUSER2. Note: For UNIX and Linux client agents, the object type is [0]. For the Mac OS X client agent, the object type is [4]. 50 Client Agents Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69

UNIX, Linux, and Mac OS X Client Agent Configuration
50
Client Agents Guide
UNIX, Linux, and Mac OS X Access Control Lists
For UNIX, Linux, and Mac OS X client agents, ACLs are supported in Single User
mode only. This is also known as No Password mode. A UNIX, Linux, and
Mac OS X client agent
or database backup agent
can be put into Single User
mode by specifying a NOPASSWORD entry in its corresponding section in the
Common Agent configuration file, agent.cfg, located in /opt/CA/ABcmagt. A
UNIX, Linux, and Mac OS X client agent can also be put into Single User mode by
specifying the -S or -NOPASSWORD option in the uag.cfg. You can use two types
of ACLs with the UNIX, Linux, or Mac OS X client agent:
Example: Allow or Deny Users
An access control list can deny or allow specific users to perform backups or
restores. For example, a part of the agent.cfg file is shown in the following
sample. You need to make similar changes for other client agent sections if you
want to apply ACLs to those client agents too.
[0]
NAME ABagentux
VERSION nn.n.n
HOME /opt/CA/ABuagent
NOPASSWORD
CAUSER A:CAUSER1 N:CAUSER2
NOPASSWORD enables Single User mode, and CAUSER specifies the users for
whom permission is being granted or denied. (A stands for ALLOW and N stands
for DENY.) A:CAUSER1 enables CAUSER1 to perform jobs, and N:CAUSER2
denies access to CAUSER2.
Note:
For UNIX and Linux client agents, the object type is [0]. For the Mac OS X
client agent, the object type is [4].