Hi I would still say that if you absolutely, positively do NOT need VXSS then do not implement it!
Rocky is right, plan, plan and plan because it really really gives nothing but headaches. But I guess if setup from a clean install, and working correctly, it may be problem free. If the scenario requires it, use it..... But ask yourself is it really, really required?? Having seen what it does, my opinion is, it was not worth the extra effort. Rocky... This is by no means any criticism on your side, but its just a view I give that the originator asked, which was..... > "What benfit does VXSS give, is it worth the headaches?" Thanks Simon Weaver Technical Support Windows Domain Administrator EADS Astrium Tel: 02392-708598 Email: [EMAIL PROTECTED] -----Original Message----- From: Rockey Reed [mailto:[EMAIL PROTECTED] Sent: 14 March 2006 17:32 To: Brooks, Jason; mkiles; veritas-bu@mailman.eng.auburn.edu Subject: RE: [Veritas-bu] NetBackup and VXSS Plan, test, validate! You may install the Root + AB on the same machine You will want an AB on the media server You will NOT want NOM on the Master You will NOT want EMM on the Media You WILL want plenty of memory and as robust CPU you can get for NOM and EMM SymSS (formerly known as VxSS) is well worth the effort; however, you must plan your deployment well, test your plan, validate the plan, and coordinate closely with your security and operations team. Deploying SymSS is akin to deploying AD, NIS+ or the likes, except for Symantec products. If you do it wrong and it will make you hate it and give you long nights with severe headaches; yet, if you do it right, you will be in control of your NetBackup environment without fear of a casual user mucking up the works. NetBackup uses the full functionality of SymSS and can augment and balance the security v. data protection needs. BTW did I mention you need to plan, test, and validate!? Thanks, Rockey J. Reed Lead Solutions Specialist Consulting Services Symantec Corporation www.symantec.com You don't have to wear a watch because it doesn't matter what time it is. You work until you're done, or it's too dark to see. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brooks, Jason Sent: Tuesday, March 14, 2006 10:28 AM To: mkiles; veritas-bu@mailman.eng.auburn.edu Subject: RE: [Veritas-bu] NetBackup and VXSS >From what I saw testing, I'd like to have NOM, but I won't install it on any media or master server. I don't know that there is an issue with having Auth Broker + Root Broker on the same box. As for security concerns, the way I tested it, it had no privileges outside of the NBU + VxSS environment that I could see. But all the java of NOM significantly slowed a Win 2K box, and it was also a flaky service. But that could have been the age of the box, I realize. But, to be on the safe side, I'm waiting to check it on another box. Jason -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of mkiles Sent: Tuesday, March 14, 2006 11:10 AM To: veritas-bu@mailman.eng.auburn.edu Subject: Re: [Veritas-bu] NetBackup and VXSS So far I havent seen even single positive reply, I have gotten few very negatives. Can someone from Veritas shed some light? My questions are more from the implementation of VxSS in a NetBackup 6.0MP1 environment: 1. Is it recommeneded to install Authentication Broker + Roor Broker on same machine? Even on master server or on the NOM server? Or a seprate dedicated machine for Root Broker and another one for Authentication Broker. 2. What are the requirements as for as domain names go, do the Root Broker and/or authentication brokers have to be in a domain, or have to be in a top level domain etc. TIA --- mkiles <[EMAIL PROTECTED]> wrote: > I just want to check if there are users using VxSS and Netbackup? What > benfit does VXSS give, is it worth the headaches? > > Also is there a some simple docs to read on VxSS, the sysadmin manuals > are a drag. > > TIA > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu _______________________________________________ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu _______________________________________________ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu This email is for the intended addressee only. If you have received it in error then you must not use, retain, disseminate or otherwise deal with it. Please notify the sender by return email. The views of the author may not necessarily constitute the views of EADS Astrium Limited. Nothing in this email shall bind EADS Astrium Limited in any contract or obligation. EADS Astrium Limited, Registered in England and Wales No. 2449259 Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, England _______________________________________________ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu