[Veritas-bu] Fwd: RE: Netbackup Administration Console via putty tunnel

[Dan Pritts]

I'm sure Jeff intended this message for the list:

*From:* "Lightner, Jeff" 
*Date:* November 24, 2014 at 1:25 PM
*To:* Dan Pritts 
*Subject:* [Veritas-bu] Netbackup Administration Console via putty tunnel

To the best of my knowledge the connection FROM the Windows GUI  TO 
the NetBackup server is using port 1556 (PBX Exchanged port on the 
server).   That is to say it is an OUTBOUND port from Windows so 
shouldn't require any tunnel back to the workstation as it would use 
the established connection.So long as there is nothing restricting 
outbound to the NetBackup server it should work.





And I'll reply:

Based on the OP's description, he wants to tunnel from windows into the 
server, so that he does not have to open up the relevant TCP ports on 
the server's firewall.


Sounds like he tried 1556 originally; maybe he got the ssh tunnel mucked 
up, or it was a bp.conf issue.
___
Veritas-bu maillist  -  Veritas-bu@mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

Re: [Veritas-bu] Netbackup Administration Console via putty tunnel

[Dan Pritts]

He wants to use Putty to make an SSH tunnel between his PC and his server.

He then wants the Windows GUI to use the SSH tunnel rather than 
connecting directly to the server.  This way he does not have to open up 
the relevant TCP ports on the server, and he is assured that there is 
good encryption used rather than trusting netbackup to get it right.


So his question mostly boils down to "what tcp ports does the windows 
gui use."


To the OP...I don't know the answer, but you might just try opening up 
the host firewall temporarily.  Start up the GUI, and tcpdump the 
connection to see what ports it's using.


There is also the issue of the "server list" in bp.conf, as Pat mentions 
below.


This is a bit tricky in this situation; I'm not entirely sure how it 
works.  My guess is that it is based simply on the IP address from which 
the tcp connection originates.  It might be some other identifier used 
in the negotiation between client and server but I doubt it.


From netbackup's perspective, the tcp connection will come from the 
server-side endpoint of the ssh tunnel.   My best guess is that you will 
want to make your ssh tunnel destination be the real IP of the server, 
rather than localhost.  However, this may violate the same firewall 
rules you are trying to get past with the SSH tunnel.  In that case, try 
making your ssh tunnel destination point at 127.0.0.1 (not "localhost" 
as it may resolve to IPv6).  And make sure that 127.0.0.1 is listed as a 
server in bp.conf (this might not be necessary, but I don't think it can 
hurt).


Hmm, your PC will need to be listed in bp.conf too, if you are going to 
use my suggestion to connect directly the first time so you can sniff 
the traffic.


Good luck

danno




Lightner, Jeff 
November 24, 2014 at 8:32 AM

That’s correct.   If you want the Windows GUI you simply install it on 
your Windows workstation so PuTTY isn’t involved.   The GUI you see 
using that and the jnbSA are essentially the same with the difference 
being the latter uses X so is less efficient to your workstation.


You need to find your NetBackup 7.x Windows DVD and mount it.  (Here 
we actually have this saved on and shared out from our Master Server 
as a SAMBA share but you may not.)   The program to run to install the 
GUI on the DVD (or share) is called browser.exe.


*From:*veritas-bu-boun...@mailman.eng.auburn.edu 
[mailto:veritas-bu-boun...@mailman.eng.auburn.edu] *On Behalf Of 
*netbac...@whelan-consulting.co.uk

*Sent:* Monday, November 24, 2014 4:55 AM
*To:* VERITAS-BU@MAILMAN.ENG.AUBURN.EDU
*Subject:* Re: [Veritas-bu] Netbackup Administration Console via putty 
tunnel


Hi,

Please forgive my confusion, but what does putty and the windows admin 
console have to do with each other. You can use putty to login to the 
master then use the jnbSA to initiate an X display. Otherwise you use 
the windows admin console an specify the master server name. The 
server you are running from must be in the bp.conf file of the master 
server, at a minimum, as a SERVER = , if you want to 
make changes to media server, they each need similar entries. There is 
not putty or X.


If I misunderstood, please explain.

Many regards,

Pat
> On 24 November 2014 at 08:13 richarn > wrote:

>
>
> Jeff . Thanks for your reply. The Netbackup Administration Console I 
am trying to get to work is the one this you can install on a windows 
machine. It is run from the start menu in windows. I am o.k with the 
jnbSA , X window method and use this regularly using putty X 
forwarding. I believe there are some administration advantages in 
using the windows admin program but am struggling to use it via putty.

>
> --
>
> I am trying to use the Netbackup Administration Console as I believe 
it has certain advantages over the jnbSA jave interface. There are 
fire walls between my Windows machine where I want to run 
Administration Console and the redhat server which is the netbackup 
master server. To this end I have been trying to use putty tunnelling 
opening up ports 1556 13724 and 13782. I have heard on this forum that 
this is possible but I cannot get it to work. It would be great if 
someone could give me some information on how to do this.

> Thanks
> Nigel
>
> +--
> |This was sent by nigel.richard...@nationalgrid.com 
 via Backup Central.
> |Forward SPAM to ab...@backupcentral.com 
.

> +--
>
>
> ___
> Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu 


> http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

___
Veritas-bu maillist - Veritas-bu@mailm

[Veritas-bu] Netbackup Administration Console via putty tunnel

[tsimerson]

With NBU 7.1, the Java console and native Windows console are pretty much the 
same.  Prior to that, there was a huge difference in functionality.  The only 
real difference between the two is that when you are accessing client 
properties through the native Windows console, you can actually browse the 
client volume/directory structures to insert the exclude information (still 
have to manually type in the policy/schedule information).

Keep in mind, with the native Windows console, that there are additional 
security implications.  On the Master server, you will need to add the hostname 
of the desktop to the "Additional Servers" list; otherwise, you will get an 
error about not being allowed access.

Client property access is affected.  Client access is relative to where the 
admin console is running.  When you run the Java console from the master 
server, you are accessing the client properties from the master server.  The 
native Windows console is running on your desktop.  You will need to add to the 
client's "Additional Servers" list the hostname of the desktop where the native 
Windows console is running.

+--
|This was sent by t...@tjsimerson.org via Backup Central.
|Forward SPAM to ab...@backupcentral.com.
+--


___
Veritas-bu maillist  -  Veritas-bu@mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

Re: [Veritas-bu] Netbackup Administration Console via putty tunnel

[Lightner, Jeff]

That’s correct.   If you want the Windows GUI you simply install it on your 
Windows workstation so PuTTY isn’t involved.   The GUI you see using that and 
the jnbSA are essentially the same with the difference being the latter uses X 
so is less efficient to your workstation.

You need to find your NetBackup 7.x Windows DVD and mount it.  (Here we 
actually have this saved on and shared out from our Master Server as a SAMBA 
share but you may not.)   The program to run to install the GUI on the DVD (or 
share) is called browser.exe.



From: veritas-bu-boun...@mailman.eng.auburn.edu 
[mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of 
netbac...@whelan-consulting.co.uk
Sent: Monday, November 24, 2014 4:55 AM
To: VERITAS-BU@MAILMAN.ENG.AUBURN.EDU
Subject: Re: [Veritas-bu] Netbackup Administration Console via putty tunnel

Hi,

Please forgive my confusion, but what does putty and the windows admin console 
have to do with each other. You can use putty to login to the master then use 
the jnbSA to initiate an X display. Otherwise you use the windows admin console 
an specify the master server name. The server you are running from must be in 
the bp.conf file of the master server, at a minimum, as a SERVER = , if you want to make changes to media server, they each need similar 
entries. There is not putty or X.
If I misunderstood, please explain.

Many regards,

Pat
> On 24 November 2014 at 08:13 richarn 
> mailto:nbu-fo...@backupcentral.com>> wrote:
>
>
> Jeff . Thanks for your reply. The Netbackup Administration Console I am 
> trying to get to work is the one this you can install on a windows machine. 
> It is run from the start menu in windows. I am o.k with the jnbSA , X window 
> method and use this regularly using putty X forwarding. I believe there are 
> some administration advantages in using the windows admin program but am 
> struggling to use it via putty.
>
> --
>
> I am trying to use the Netbackup Administration Console as I believe it has 
> certain advantages over the jnbSA jave interface. There are fire walls 
> between my Windows machine where I want to run Administration Console and the 
> redhat server which is the netbackup master server. To this end I have been 
> trying to use putty tunnelling opening up ports 1556 13724 and 13782. I have 
> heard on this forum that this is possible but I cannot get it to work. It 
> would be great if someone could give me some information on how to do this.
> Thanks
> Nigel
>
> +--
> |This was sent by 
> nigel.richard...@nationalgrid.com 
> via Backup Central.
> |Forward SPAM to ab...@backupcentral.com.
> +--
>
>
> ___
> Veritas-bu maillist - 
> Veritas-bu@mailman.eng.auburn.edu
> http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
___
Veritas-bu maillist  -  Veritas-bu@mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

Re: [Veritas-bu] Netbackup Administration Console via putty tunnel

[netbac...@whelan-consulting.co.uk]

Hi,
 
Please forgive my confusion, but what does putty and the windows admin console
have to do with each other. You can use putty to login to the master then use
the jnbSA to initiate an X display. Otherwise you use the windows admin console
an specify the master server name. The server you are running from must be in
the bp.conf file of the master server, at a minimum, as a SERVER = , if you want to make changes to media server, they each need similar
entries. There is not putty or X.
If I misunderstood, please explain.
 
Many regards,
 
Pat
> On 24 November 2014 at 08:13 richarn  wrote:
>
>
> Jeff . Thanks for your reply. The Netbackup Administration Console I am trying
> to get to work is the one this you can install on a windows machine. It is run
> from the start menu in windows. I am o.k with the jnbSA , X window method and
> use this regularly using putty X forwarding. I believe there are some
> administration advantages in using the windows admin program but am struggling
> to use it via putty.
>
> --
>
> I am trying to use the Netbackup Administration Console as I believe it has
> certain advantages over the jnbSA jave interface. There are fire walls between
> my Windows machine where I want to run Administration Console and the redhat
> server which is the netbackup master server. To this end I have been trying to
> use putty tunnelling opening up ports 1556 13724 and 13782. I have heard on
> this forum that this is possible but I cannot get it to work. It would be
> great if someone could give me some information on how to do this.
> Thanks
> Nigel
>
> +--
> |This was sent by nigel.richard...@nationalgrid.com via Backup Central.
> |Forward SPAM to ab...@backupcentral.com.
> +--
>
>
> ___
> Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu
> http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu___
Veritas-bu maillist  -  Veritas-bu@mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu

[Veritas-bu] Netbackup Administration Console via putty tunnel

[richarn]

Jeff .  Thanks for your reply.  The Netbackup Administration Console I am 
trying to get to work is the one this you can install on a windows machine.  It 
is run from the start menu in windows.  I am o.k with the jnbSA  , X window 
method and use this regularly using putty X forwarding.  I believe there are 
some administration advantages in using the windows admin program but am 
struggling to use it via putty.

--

I am trying to use the Netbackup Administration Console as I believe it has 
certain advantages over the jnbSA jave interface. There are fire walls between 
my Windows machine where I want to run Administration Console and the redhat 
server which is the netbackup master server. To this end I have been trying to 
use putty tunnelling opening up ports 1556 13724 and 13782. I have heard on 
this forum that this is possible but I cannot get it to work. It would be great 
if someone could give me some information on how to do this. 
Thanks 
Nigel

+--
|This was sent by nigel.richard...@nationalgrid.com via Backup Central.
|Forward SPAM to ab...@backupcentral.com.
+--


___
Veritas-bu maillist  -  Veritas-bu@mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu