Download Netbackup Java Console
Julieta Bassette
The NetBackup Remote Administration Console is supported on Windows Server 2008, 2008 R2, 2012, 2012 R2, 2016, 2019 - 64 bit.
Installation is a two-step process as follows:
- Install the NetBackup Remote Administration Console.
- Add the host name of the machine on which you are installing the NetBackup Remote Administration Console to the server list of the hosts that you want to administer.
You must also add the host names of the servers that you want to administer to the server list on the host where you install the remote console.
The following table shows an example of the required server list entries for each host. RAC1 refers to the Remote Administration Console.
Host name Required server list entries
Master1 RAC1
Media1 RAC1
Media2 RAC1
RAC1 Master1, Media1, Media2
To install the NetBackup Remote Administration Console
1. On the computer where you want to install the NetBackup Remote Administration Console, start the NetBackup Installation Wizard with one of the following methods:
- DVD media
Insert the NetBackup for Windows DVD in the drive. If Autorun is disabled, navigate to the DVD drive and run Browser.exe.
- Downloaded files
The Remote Administration console is included with the Windows installation package for NetBackup, so navigate to the download portal and select the version you need to install. Then under Base and Upgrade Installers, locate the Windows installer for that version. For example, if the version is 8.3.0.1 locate NetBackup_8.3.0.1_Win.zip.
The Java Administration Console is an alternative administrative interface for the VERITAS NetBackup software. It is also referred to as the "Java GUI" or the "Java Display Console." One of the components of the Java Administration Console, bpjava-msvc, is used for authentication purposes. bpjava-msvc listens on 13722/tcp on both NetBackup client and server systems. The bpjava-msvc service contains a format string vulnerability.
Restrict access
You may wish to block access to the vulnerable software from outside your network perimeter, specifically by blocking access to the ports used by bpjava-msvc (typically 13722/tcp). This will limit your exposure to attacks. However, blocking at the network perimeter would still allow attackers within the perimeter of your network to exploit the vulnerability. The use of host-based firewalls in addition to network-based firewalls can help restrict access to specific hosts within the network. It is important to understand your network's configuration and service requirements before deciding what changes are appropriate.
I'm trying to understand what changed with the versions of NetBackup that took this functionality away. If I log on to the console I don't have this problem, but I nor my customers want to go to the computer room each time to launch the console.
If the documentation simply stated something like "To use the Java console, you will need to first configure your system with an X Windows manager etc..." would have saved us and many other users a lot of time. For the 100's and 100's of pages of documentation you provide, i find the lack of this information stunning.
Let me reiterate: When following your documentatino on installing NBU and using the Java console, it does not work. Can someone confirm for me please, that they can do an install of NBU and get the java console working without insatlling X Windows System or a Desktop environmnet on the server?
Also the Java console did not work locally until the system was configured correctly so this isn't related to the console being exported... There was no indication of an error in the install. I'm simply asking what requirements are needed to install your product!!!
I have a Master server running 7.5.0.6 is DMZ . I am trying to run the Java gui console on my HP laptop via xwindows. I tried using xming and cygwin-X to access the Java gui. THe Xwindows is working fine.
The way I use is I login thru putty session to a linux box and than run ssh -X to the Master server running on SOlaris to DMZ and from DMZ master server I run jbpSA th ejaav gui console gets displayed when I login it opens with user level permissions , although I have admin level permissions defined in auth.conf file.
I need help. Currently for a customer netbackup 7.7.3 (Windows 2012 master server), I login to the Netbackup Java Console via a domaiin account. The account was added by previous administrator. May I know how can I add another domain user account so that another person can login to the Netbackup Java Console to manage the backup?
I was checking this Access Management option in Netbackup Administration Java Console but it say that the feature is not installed. Is this Access Management only available if NBAC is enabled. Sorry i am not sure how this NBAC works..i was trying to read up on this. How do i know whether the customer netbackup has NBAC activated or not?
To add additional users, although @StefanosM is correct, IMHO a better way to allow a user to access the GUI is to add that user to the auth.conf file found in \NetBackup\java\auth.conf - I am always reluctant to provide admin access to a server just to let the user use an application.
On the SCL, Ubuntu or Debian Linux is not mentioned, but it is mentioned as a client and in the client Debian2.6.18 directory there is a NB-Java.tar.gz which suggests (to me anyway) there is a java GUI available and the forum post -secure.symantec.com/connect/forums/netbackup-java-administration-console-intelfreebsd reckons it is possible, but the links to technotes don't work.
So I would think it should work, but as a starting point I have installed a Redhat server VM with X-windows and am try to install the Java GUI only but, neither "install_client" or extract_java work, and I have tried just installing the SYMCnbjava and SYMCnbjre rpms and this gives the same "no Vmangle in java.library.path" error as in forum post link above.
We have a windows master setup and we do a large amount of file restores which I am trying to move to the service desk. I have installed the java console on the Terminal servers that we use and I can logon and administer the master server.
When running "/user/openv/netbackup/java/jnbSA" followed by logging in, I am presented only with a local client restore screen and not the full NBU console to which I would expect for managing a master or media server. It is like it only sees the client software, and not the server software.
If /usr/openv/netbackup/bin/bpps -x still shows only those processes then you may have not entered a valid license. Let me know the output of bpps -x once you run the netbackup stop / start commands above.
When I launch and login to the NBU console via "/user/openv/netbackup/java/jnbSA", I still only see "Backup, Recovery, and Archive" and not the console for administration of Netbackup. Am I doing something incorrectly that would prevent me from seeing it?
Thank you for your help. That may be my issue then as I do not have any interface cards configured yet... trying all this from the virtual console. Was trying to get things working before configuring the interfaces etc. I will get it on the network with a real IP address and remap the name and try again. If it still does not work then I will paste my output from bpps -x. Currently I am typing all the output so getting it on the network will help with that anyway.
Therefore after assigning an address to one of my interfaces and telling the hosts file that, that IP is itself it was able to pull up the full NBU console even with me not really on the network.
Planning to grant NB access to individual users instead of using common "admin/root" account.Created NetBackup user and update auth.conf file accordingly on the NetBackup Master (5240 appliance). We usually access NB java console from a remote windows machine for which we have full rights (Administrator account). Also created individual account with basic privileges on remote windows machine for each invidual . User is successfully able to take RDP to windows machine and When this user tried to login to NB java console getting "NetBackup could not initiate a trust relationship with the host "FQDN" . Ensure that your DNS server resolves to host to correct IP.
But to test that, from the same windows machine logged in as Administrator and tried to access NB java console as the user created above works. Is there anything at Windows level blocking a regular/invidual user to access a remote NB java console. I checked UAC is disabled and NB host is resolvable (we also have local hosts file updated) but suprisingly getting this when we login to remote windows machine with an invidual user account .
User is already part of Administrator group on Jump server (windows machine). Surprisingly , If we login with only Administrator account on Jump server and connect to Java console with the NetBackup user we created, he can access.
scan command does not use 'any netbackup commands' it is 'standalone, and so failure of scan -changer will be either the device files for the robot at the OS level, comms to the robot (or from the robot), or a fault on the robot.
After a long effort and research into Windows security I managed to the Windows Java Console working on on our Windows 2008 master server. Now I have the opposite problem where that anyone with Windows Administrator privileges can log on to Netbackup via the Java console.
What I am trying to do now is restrict access to the Java console. This means I want people to only to have Netbackup privileges as defined in auth.conf including any users with Windows Administrator privileges.
Even if I take away all permissions from my user I am still able to access Netbackup using the Java console with full Netbackup admin rights and alternatively a user without Windows Administrator privileges but given full admin access to Netbackup in auth.conf is only able to access the Java BAR GUI. I even removed auth.conf and I was still able to logon to Netbackup using the Java Console with full admin rights. So for some reason Netbackup is not checking with auth.conf when granting user access.
760c119bf3