He wants to use Putty to make an SSH tunnel between his PC and his server.
He then wants the Windows GUI to use the SSH tunnel rather than
connecting directly to the server. This way he does not have to open up
the relevant TCP ports on the server, and he is assured that there is
good encryption used rather than trusting netbackup to get it right.
So his question mostly boils down to "what tcp ports does the windows
gui use."
To the OP...I don't know the answer, but you might just try opening up
the host firewall temporarily. Start up the GUI, and tcpdump the
connection to see what ports it's using.
There is also the issue of the "server list" in bp.conf, as Pat mentions
below.
This is a bit tricky in this situation; I'm not entirely sure how it
works. My guess is that it is based simply on the IP address from which
the tcp connection originates. It might be some other identifier used
in the negotiation between client and server but I doubt it.
From netbackup's perspective, the tcp connection will come from the
server-side endpoint of the ssh tunnel. My best guess is that you will
want to make your ssh tunnel destination be the real IP of the server,
rather than localhost. However, this may violate the same firewall
rules you are trying to get past with the SSH tunnel. In that case, try
making your ssh tunnel destination point at 127.0.0.1 (not "localhost"
as it may resolve to IPv6). And make sure that 127.0.0.1 is listed as a
server in bp.conf (this might not be necessary, but I don't think it can
hurt).
Hmm, your PC will need to be listed in bp.conf too, if you are going to
use my suggestion to connect directly the first time so you can sniff
the traffic.
Good luck
danno
Lightner, Jeff <mailto:jlight...@dsservices.com>
November 24, 2014 at 8:32 AM
That’s correct. If you want the Windows GUI you simply install it on
your Windows workstation so PuTTY isn’t involved. The GUI you see
using that and the jnbSA are essentially the same with the difference
being the latter uses X so is less efficient to your workstation.
You need to find your NetBackup 7.x Windows DVD and mount it. (Here
we actually have this saved on and shared out from our Master Server
as a SAMBA share but you may not.) The program to run to install the
GUI on the DVD (or share) is called browser.exe.
*From:*veritas-bu-boun...@mailman.eng.auburn.edu
[mailto:veritas-bu-boun...@mailman.eng.auburn.edu] *On Behalf Of
*netbac...@whelan-consulting.co.uk
*Sent:* Monday, November 24, 2014 4:55 AM
*To:* VERITAS-BU@MAILMAN.ENG.AUBURN.EDU
*Subject:* Re: [Veritas-bu] Netbackup Administration Console via putty
tunnel
Hi,
Please forgive my confusion, but what does putty and the windows admin
console have to do with each other. You can use putty to login to the
master then use the jnbSA to initiate an X display. Otherwise you use
the windows admin console an specify the master server name. The
server you are running from must be in the bp.conf file of the master
server, at a minimum, as a SERVER = <windows servrer>, if you want to
make changes to media server, they each need similar entries. There is
not putty or X.
If I misunderstood, please explain.
Many regards,
Pat
> On 24 November 2014 at 08:13 richarn <nbu-fo...@backupcentral.com
<mailto:nbu-fo...@backupcentral.com>> wrote:
>
>
> Jeff . Thanks for your reply. The Netbackup Administration Console I
am trying to get to work is the one this you can install on a windows
machine. It is run from the start menu in windows. I am o.k with the
jnbSA , X window method and use this regularly using putty X
forwarding. I believe there are some administration advantages in
using the windows admin program but am struggling to use it via putty.
>
> --------------------------------------
>
> I am trying to use the Netbackup Administration Console as I believe
it has certain advantages over the jnbSA jave interface. There are
fire walls between my Windows machine where I want to run
Administration Console and the redhat server which is the netbackup
master server. To this end I have been trying to use putty tunnelling
opening up ports 1556 13724 and 13782. I have heard on this forum that
this is possible but I cannot get it to work. It would be great if
someone could give me some information on how to do this.
> Thanks
> Nigel
>
> +----------------------------------------------------------------------
> |This was sent by nigel.richard...@nationalgrid.com
<mailto:nigel.richard...@nationalgrid.com> via Backup Central.
> |Forward SPAM to ab...@backupcentral.com
<mailto:ab...@backupcentral.com>.
> +----------------------------------------------------------------------
>
>
> _______________________________________________
> Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu
<mailto:Veritas-bu@mailman.eng.auburn.edu>
> http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
_______________________________________________
Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
netbac...@whelan-consulting.co.uk
<mailto:netbac...@whelan-consulting.co.uk>
November 24, 2014 at 4:54 AM
Hi,
Please forgive my confusion, but what does putty and the windows admin
console have to do with each other. You can use putty to login to the
master then use the jnbSA to initiate an X display. Otherwise you use
the windows admin console an specify the master server name. The
server you are running from must be in the bp.conf file of the master
server, at a minimum, as a SERVER = <windows servrer>, if you want to
make changes to media server, they each need similar entries. There is
not putty or X.
If I misunderstood, please explain.
Many regards,
Pat
> On 24 November 2014 at 08:13 richarn <nbu-fo...@backupcentral.com>
wrote:
>
>
> Jeff . Thanks for your reply. The Netbackup Administration Console I
am trying to get to work is the one this you can install on a windows
machine. It is run from the start menu in windows. I am o.k with the
jnbSA , X window method and use this regularly using putty X
forwarding. I believe there are some administration advantages in
using the windows admin program but am struggling to use it via putty.
>
> --------------------------------------
>
> I am trying to use the Netbackup Administration Console as I believe
it has certain advantages over the jnbSA jave interface. There are
fire walls between my Windows machine where I want to run
Administration Console and the redhat server which is the netbackup
master server. To this end I have been trying to use putty tunnelling
opening up ports 1556 13724 and 13782. I have heard on this forum that
this is possible but I cannot get it to work. It would be great if
someone could give me some information on how to do this.
> Thanks
> Nigel
>
> +----------------------------------------------------------------------
> |This was sent by nigel.richard...@nationalgrid.com via Backup Central.
> |Forward SPAM to ab...@backupcentral.com.
> +----------------------------------------------------------------------
>
>
> _______________________________________________
> Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu
> http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
_______________________________________________
Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
richarn <mailto:nbu-fo...@backupcentral.com>
November 24, 2014 at 3:13 AM
Jeff . Thanks for your reply. The Netbackup Administration Console I
am trying to get to work is the one this you can install on a windows
machine. It is run from the start menu in windows. I am o.k with the
jnbSA , X window method and use this regularly using putty X
forwarding. I believe there are some administration advantages in
using the windows admin program but am struggling to use it via putty.
--------------------------------------
I am trying to use the Netbackup Administration Console as I believe
it has certain advantages over the jnbSA jave interface. There are
fire walls between my Windows machine where I want to run
Administration Console and the redhat server which is the netbackup
master server. To this end I have been trying to use putty tunnelling
opening up ports 1556 13724 and 13782. I have heard on this forum that
this is possible but I cannot get it to work. It would be great if
someone could give me some information on how to do this.
Thanks
Nigel
+----------------------------------------------------------------------
|This was sent by nigel.richard...@nationalgrid.com via Backup Central.
|Forward SPAM to ab...@backupcentral.com.
+----------------------------------------------------------------------
_______________________________________________
Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
--
Dan Pritts
ICPSR Computing & Network Services
University of Michigan
+1 (734)615-7362
_______________________________________________
Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu