Welcome! » Log In » Create A New Profile

Netbackup Administration Console via putty tunnel

Posted by richarn 
Netbackup Administration Console via putty tunnel
November 20, 2014 06:09AM
I am trying to use the Netbackup Administration Console as I believe it has certain advantages over the jnbSA jave interface. There are fire walls between my Windows machine where I want to run Administration Console and the redhat server which is the netbackup master server. To this end I have been trying to use putty tunnelling opening up ports 1556 13724 and 13782. I have heard on this forum that this is possible but I cannot get it to work. It would be great if someone could give me some information on how to do this.
Thanks
Nigel
Netbackup Administration Console via putty tunnel
November 20, 2014 08:01AM
When you say "NetBackup Administration Console" exactly what command are you running?

The jnbSA can actually be started from UNIX/Linux but since it is Java is sending an X window to you. If the console you're talking about is also Java/X you have to enable X forwarding in your PuTTY session.
The specific setting is under Connection-->SSH-->X11. In that screen click the check box next to Enable X11 forwarding. It defaults to MIT-Magic-Cookie-1.
Once you have that and do the login to the server via PuTTY it will create a .Xauthority file in your UNIX/Linux user's home directory and also set your DISPLAY variable (echo $DISPLAY to see what it set it to - usually something like localhost:0.0).

That prepares the connection to allow X applications to be launched and tunneled back over the same connection to your Windows system.

However, Windows by default doesn't understand X so you have to have an X emulator installed (and running) on Windows. A common commercial one many people use is Exceed. A free one you can get by installing Cygwin (Linux on top of Windows) on your Windows system with the X11 packages.

-----Original Message-----
From: veritas-bu-bounces < at > mailman.eng.auburn.edu [mailto] On Behalf Of richarn
Sent: Thursday, November 20, 2014 9:09 AM
To: VERITAS-BU < at > MAILMAN.ENG.AUBURN.EDU
Subject: [Veritas-bu] Netbackup Administration Console via putty tunnel

I am trying to use the Netbackup Administration Console as I believe it has certain advantages over the jnbSA jave interface. There are fire walls between my Windows machine where I want to run Administration Console and the redhat server which is the netbackup master server. To this end I have been trying to use putty tunnelling opening up ports 1556 13724 and 13782. I have heard on this forum that this is possible but I cannot get it to work. It would be great if someone could give me some information on how to do this.
Thanks
Nigel

+----------------------------------------------------------------------
|This was sent by nigel.richardson < at > nationalgrid.com via Backup Central.
|Forward SPAM to abuse < at > backupcentral.com.
+----------------------------------------------------------------------

_______________________________________________
Veritas-bu maillist - Veritas-bu < at > mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
_______________________________________________
Veritas-bu maillist - Veritas-bu < at > mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Netbackup Administration Console via putty tunnel
November 24, 2014 12:12AM
Jeff . Thanks for your reply. The Netbackup Administration Console I am trying to get to work is the one this you can install on a windows machine. It is run from the start menu in windows. I am o.k with the jnbSA , X window method and use this regularly using putty X forwarding. I believe there are some administration advantages in using the windows admin program but am struggling to use it via putty.

--------------------------------------

I am trying to use the Netbackup Administration Console as I believe it has certain advantages over the jnbSA jave interface. There are fire walls between my Windows machine where I want to run Administration Console and the redhat server which is the netbackup master server. To this end I have been trying to use putty tunnelling opening up ports 1556 13724 and 13782. I have heard on this forum that this is possible but I cannot get it to work. It would be great if someone could give me some information on how to do this.
Thanks
Nigel
Netbackup Administration Console via putty tunnel
November 24, 2014 01:55AM
Hi,
 
Please forgive my confusion, but what does putty and the windows admin console have to do with each other. You can use putty to login to the master then use the jnbSA to initiate an X display. Otherwise you use the windows admin console an specify the master server name. The server you are running from must be in the bp.conf file of the master server, at a minimum, as a SERVER = <windows servrer>, if you want to make changes to media server, they each need similar entries. There is not putty or X.
If I misunderstood, please explain.
 
Many regards,
 
Pat > On 24 November 2014 at 08:13 richarn <nbu-forum < at > backupcentral.com> wrote: > > > Jeff . Thanks for your reply. The Netbackup Administration Console I am trying to get to work is the one this you can install on a windows machine. It is run from the start menu in windows. I am o.k with the jnbSA , X window method and use this regularly using putty X forwarding. I believe there are some administration advantages in using the windows admin program but am struggling to use it via putty. > > -------------------------------------- > > I am trying to use the Netbackup Administration Console as I believe it has certain advantages over the jnbSA jave interface. There are fire walls between my Windows machine where I want to run Administration Console and the redhat server which is the netbackup master server. To this end I have been trying to use putty tunnelling opening up ports 1556 13724 and 13782. I have heard on this forum that this is possible but I cannot get it to work. It would be great if someone could give me some information on how to do this. > Thanks > Nigel > > +---------------------------------------------------------------------- > |This was sent by nigel.richardson < at > nationalgrid.com via Backup Central. > |Forward SPAM to abuse < at > backupcentral.com. > +---------------------------------------------------------------------- > > > _______________________________________________ > Veritas-bu maillist - Veritas-bu < at > mailman.eng.auburn.edu > http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Netbackup Administration Console via putty tunnel
November 24, 2014 05:33AM
That’s correct. If you want the Windows GUI you simply install it on your Windows workstation so PuTTY isn’t involved. The GUI you see using that and the jnbSA are essentially the same with the difference being the latter uses X so is less efficient to your workstation.

You need to find your NetBackup 7.x Windows DVD and mount it. (Here we actually have this saved on and shared out from our Master Server as a SAMBA share but you may not.) The program to run to install the GUI on the DVD (or share) is called browser.exe.

[b]From:[/b] veritas-bu-bounces < at > mailman.eng.auburn.edu [mailto] [b]On Behalf Of [/b]netbackup < at > whelan-consulting.co.uk
[b]Sent:[/b] Monday, November 24, 2014 4:55 AM
[b]To:[/b] VERITAS-BU < at > MAILMAN.ENG.AUBURN.EDU
[b]Subject:[/b] Re: [Veritas-bu] Netbackup Administration Console via putty tunnel

Hi,

Please forgive my confusion, but what does putty and the windows admin console have to do with each other. You can use putty to login to the master then use the jnbSA to initiate an X display. Otherwise you use the windows admin console an specify the master server name. The server you are running from must be in the bp.conf file of the master server, at a minimum, as a SERVER = <windows servrer>, if you want to make changes to media server, they each need similar entries. There is not putty or X.

If I misunderstood, please explain.

Many regards,

Pat
[quote]On 24 November 2014 at 08:13 richarn <nbu-forum < at > backupcentral.com ([email]nbu-forum < at > backupcentral.com[/email])> wrote:

Jeff . Thanks for your reply. The Netbackup Administration Console I am trying to get to work is the one this you can install on a windows machine. It is run from the start menu in windows. I am o.k with the jnbSA , X window method and use this regularly using putty X forwarding. I believe there are some administration advantages in using the windows admin program but am struggling to use it via putty.

--------------------------------------

I am trying to use the Netbackup Administration Console as I believe it has certain advantages over the jnbSA jave interface. There are fire walls between my Windows machine where I want to run Administration Console and the redhat server which is the netbackup master server. To this end I have been trying to use putty tunnelling opening up ports 1556 13724 and 13782. I have heard on this forum that this is possible but I cannot get it to work. It would be great if someone could give me some information on how to do this.
Thanks
Nigel

+----------------------------------------------------------------------
|This was sent by nigel.richardson < at > nationalgrid.com ([email]nigel.richardson < at > nationalgrid.com[/email]) via Backup Central.
|Forward SPAM to abuse < at > backupcentral.com ([email]abuse < at > backupcentral.com[/email]).
+----------------------------------------------------------------------

_______________________________________________
Veritas-bu maillist - Veritas-bu < at > mailman.eng.auburn.edu ([email]Veritas-bu < at > mailman.eng.auburn.edu[/email])
[url=http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu]http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu[/url]
[/quote]
Netbackup Administration Console via putty tunnel
November 24, 2014 06:43AM
With NBU 7.1, the Java console and native Windows console are pretty much the same. Prior to that, there was a huge difference in functionality. The only real difference between the two is that when you are accessing client properties through the native Windows console, you can actually browse the client volume/directory structures to insert the exclude information (still have to manually type in the policy/schedule information).

Keep in mind, with the native Windows console, that there are additional security implications. On the Master server, you will need to add the hostname of the desktop to the "Additional Servers" list; otherwise, you will get an error about not being allowed access.

Client property access is affected. Client access is [b]relative to where the admin console is running[/b]. When you run the Java console from the master server, you are accessing the client properties from the master server. The native Windows console is running on your desktop. You will need to add to the client's "Additional Servers" list the hostname of the desktop where the native Windows console is running.
Netbackup Administration Console via putty tunnel
November 24, 2014 08:29AM
He wants to use Putty to make an SSH tunnel between his PC and his server. 

He then wants the Windows GUI to use the SSH tunnel rather than connecting directly to the server.  This way he does not have to open up the relevant TCP ports on the server, and he is assured that there is good encryption used rather than trusting netbackup to get it right.

So his question mostly boils down to "what tcp ports does the windows gui use."

To the OP...I don't know the answer, but you might just try opening up the host firewall temporarily.  Start up the GUI, and tcpdump the connection to see what ports it's using.

There is also the issue of the "server list" in bp.conf, as Pat mentions below. 

This is a bit tricky in this situation; I'm not entirely sure how it works.  My guess is that it is based simply on the IP address from which the tcp connection originates.  It might be some other identifier used in the negotiation between client and server but I doubt it. 

[quote]From netbackup's perspective, the tcp connection will come from the server-side endpoint of the ssh tunnel.   My best guess is that you will want to make your ssh tunnel destination be the real IP of the server, rather than localhost.  However, this may violate the same firewall rules you are trying to get past with the SSH tunnel.  In that case, try making your ssh tunnel destination point at 127.0.0.1 (not "localhost" as it may resolve to IPv6).  And make sure that 127.0.0.1 is listed as a server in bp.conf (this might not be necessary, but I don't think it can hurt). 
[/quote]
Hmm, your PC will need to be listed in bp.conf too, if you are going to use my suggestion to connect directly the first time so you can sniff the traffic.

Good luck

danno

[quote]
Lightner, Jeff ([email]JLightner < at > dsservices.com[/email])
November 24, 2014 at 8:32 AM

<!-- /* Font Definitions */ < at > font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} < at > font-face {font-family:Tahoma; panose-1:2 11 6 4 3 5 4 4 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:12.0pt; font-family:"Times New Roman","serif";} a:link, span.MsoHyperlink {mso-style-priority:99; color:blue; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:purple; text-decoration:underline;} span.EmailStyle17 {mso-style-type:personal-reply; font-family:"Calibri","sans-serif"; color:#1F497D;} .MsoChpDefault {mso-style-type:export-only; font-size:10.0pt;} < at > page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} --> <![endif]--> <![endif]-->
That’s correct.   If you want the Windows GUI you simply install it on your Windows workstation so PuTTY isn’t involved.   The GUI you see using that and the jnbSA are essentially the same with the difference being the latter uses X so is less efficient to your workstation.
 
You need to find your NetBackup 7.x Windows DVD and mount it.  (Here we actually have this saved on and shared out from our Master Server as a SAMBA share but you may not.)   The program to run to install the GUI on the DVD (or share) is called browser.exe.
 
 
 
[b]From:[/b] veritas-bu-bounces < at > mailman.eng.auburn.edu ([email]veritas-bu-bounces < at > mailman.eng.auburn.edu[/email]) [mailto]veritas-bu-bounces < at > mailman.eng.auburn.edu[/email])] [b]On Behalf Of [/b]netbackup < at > whelan-consulting.co.uk ([email]netbackup < at > whelan-consulting.co.uk[/email])
[b]Sent:[/b] Monday, November 24, 2014 4:55 AM
[b]To:[/b] VERITAS-BU < at > MAILMAN.ENG.AUBURN.EDU ([email]VERITAS-BU < at > MAILMAN.ENG.AUBURN.EDU[/email])
[b]Subject:[/b] Re: [Veritas-bu] Netbackup Administration Console via putty tunnel

 
Hi,

 

Please forgive my confusion, but what does putty and the windows admin console have to do with each other. You can use putty to login to the master then use the jnbSA to initiate an X display. Otherwise you use the windows admin console an specify the master server name. The server you are running from must be in the bp.conf file of the master server, at a minimum, as a SERVER = <windows servrer>, if you want to make changes to media server, they each need similar entries. There is not putty or X.

If I misunderstood, please explain.

 

Many regards,

 

Pat
[quote]On 24 November 2014 at 08:13 richarn <nbu-forum < at > backupcentral.com ([email]nbu-forum < at > backupcentral.com[/email])> wrote:

Jeff . Thanks for your reply. The Netbackup Administration Console I am trying to get to work is the one this you can install on a windows machine. It is run from the start menu in windows. I am o.k with the jnbSA , X window method and use this regularly using putty X forwarding. I believe there are some administration advantages in using the windows admin program but am struggling to use it via putty.

--------------------------------------

I am trying to use the Netbackup Administration Console as I believe it has certain advantages over the jnbSA jave interface. There are fire walls between my Windows machine where I want to run Administration Console and the redhat server which is the netbackup master server. To this end I have been trying to use putty tunnelling opening up ports 1556 13724 and 13782. I have heard on this forum that this is possible but I cannot get it to work. It would be great if someone could give me some information on how to do this.
Thanks
Nigel

+----------------------------------------------------------------------
|This was sent by nigel.richardson < at > nationalgrid.com ([email]nigel.richardson < at > nationalgrid.com[/email]) via Backup Central.
|Forward SPAM to abuse < at > backupcentral.com ([email]abuse < at > backupcentral.com[/email]).
+----------------------------------------------------------------------

_______________________________________________
Veritas-bu maillist - Veritas-bu < at > mailman.eng.auburn.edu ([email]Veritas-bu < at > mailman.eng.auburn.edu[/email])
[url=http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu]http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu[/url]
[/quote]
_______________________________________________
Veritas-bu maillist - Veritas-bu < at > mailman.eng.auburn.edu ([email]Veritas-bu < at > mailman.eng.auburn.edu[/email])
[url=http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu]http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu[/url]

netbackup < at > whelan-consulting.co.uk ([email]netbackup < at > whelan-consulting.co.uk[/email])
November 24, 2014 at 4:54 AM

Hi,
 
Please forgive my confusion, but what does putty and the windows admin console have to do with each other. You can use putty to login to the master then use the jnbSA to initiate an X display. Otherwise you use the windows admin console an specify the master server name. The server you are running from must be in the bp.conf file of the master server, at a minimum, as a SERVER = <windows servrer>, if you want to make changes to media server, they each need similar entries. There is not putty or X.
If I misunderstood, please explain.
 
Many regards,
 
Pat
[quote]On 24 November 2014 at 08:13 richarn <nbu-forum < at > backupcentral.com> ([email]nbu-forum < at > backupcentral.com[/email]) wrote:

Jeff . Thanks for your reply. The Netbackup Administration Console I am trying to get to work is the one this you can install on a windows machine. It is run from the start menu in windows. I am o.k with the jnbSA , X window method and use this regularly using putty X forwarding. I believe there are some administration advantages in using the windows admin program but am struggling to use it via putty.

--------------------------------------

I am trying to use the Netbackup Administration Console as I believe it has certain advantages over the jnbSA jave interface. There are fire walls between my Windows machine where I want to run Administration Console and the redhat server which is the netbackup master server. To this end I have been trying to use putty tunnelling opening up ports 1556 13724 and 13782. I have heard on this forum that this is possible but I cannot get it to work. It would be great if someone could give me some information on how to do this.
Thanks
Nigel

+----------------------------------------------------------------------
|This was sent by nigel.richardson < at > nationalgrid.com ([email]nigel.richardson < at > nationalgrid.com[/email]) via Backup Central.
|Forward SPAM to abuse < at > backupcentral.com ([email]abuse < at > backupcentral.com[/email]).
+----------------------------------------------------------------------

_______________________________________________
Veritas-bu maillist - Veritas-bu < at > mailman.eng.auburn.edu ([email]Veritas-bu < at > mailman.eng.auburn.edu[/email])
[url=http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu]http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu[/url]
[/quote]_______________________________________________
Veritas-bu maillist - Veritas-bu < at > mailman.eng.auburn.edu ([email]Veritas-bu < at > mailman.eng.auburn.edu[/email])
[url=http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu]http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu[/url]

richarn ([email]nbu-forum < at > backupcentral.com[/email])
November 24, 2014 at 3:13 AM

Jeff . Thanks for your reply. The Netbackup Administration Console I am trying to get to work is the one this you can install on a windows machine. It is run from the start menu in windows. I am o.k with the jnbSA , X window method and use this regularly using putty X forwarding. I believe there are some administration advantages in using the windows admin program but am struggling to use it via putty.

--------------------------------------

I am trying to use the Netbackup Administration Console as I believe it has certain advantages over the jnbSA jave interface. There are fire walls between my Windows machine where I want to run Administration Console and the redhat server which is the netbackup master server. To this end I have been trying to use putty tunnelling opening up ports 1556 13724 and 13782. I have heard on this forum that this is possible but I cannot get it to work. It would be great if someone could give me some information on how to do this.
Thanks
Nigel

+----------------------------------------------------------------------
|This was sent by nigel.richardson < at > nationalgrid.com ([email]nigel.richardson < at > nationalgrid.com[/email]) via Backup Central.
|Forward SPAM to abuse < at > backupcentral.com ([email]abuse < at > backupcentral.com[/email]).
+----------------------------------------------------------------------

_______________________________________________
Veritas-bu maillist - Veritas-bu < at > mailman.eng.auburn.edu ([email]Veritas-bu < at > mailman.eng.auburn.edu[/email])
[url=http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu]http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu[/url]

[/quote]
--
Dan Pritts
ICPSR Computing & Network Services
University of Michigan
+1 (734)615-7362
Netbackup Administration Console via putty tunnel
November 24, 2014 10:29AM
I'm sure Jeff intended this message for the list:
[quote]
[b]From:[/b] "Lightner, Jeff" <JLightner < at > dsservices.com> ([email]JLightner < at > dsservices.com[/email])
[b]Date:[/b] November 24, 2014 at 1:25 PM
[b]To:[/b] Dan Pritts <danno < at > umich.edu> ([email]danno < at > umich.edu[/email])
[b]Subject:[/b] [Veritas-bu] Netbackup Administration Console via putty tunnel

v:* {behavior:url(#default#VML);} o:* {behavior:url(#default#VML);} w:* {behavior:url(#default#VML);} .shape {behavior:url(#default#VML);} <![endif]--><!-- /* Font Definitions */ < at > font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} < at > font-face {font-family:Tahoma; panose-1:2 11 6 4 3 5 4 4 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:12.0pt; font-family:"Times New Roman","serif"; color:black;} a:link, span.MsoHyperlink {mso-style-priority:99; color:blue; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:purple; text-decoration:underline;} p.MsoAcetate, li.MsoAcetate, div.MsoAcetate {mso-style-priority:99; mso-style-link:"Balloon Text Char"; margin:0in; margin-bottom:.0001pt; font-size:8.0pt; font-family:"Tahoma","sans-serif"; color:black;} span.EmailStyle17 {mso-style-type:personal; font-family:"Calibri","sans-serif"; color:#1F497D;} span.postbox-detected-content {mso-style-name:__postbox-detected-content;} span.BalloonTextChar {mso-style-name:"Balloon Text Char"; mso-style-priority:99; mso-style-link:"Balloon Text"; font-family:"Tahoma","sans-serif"; color:black;} span.EmailStyle21 {mso-style-type:personal-reply; font-family:"Calibri","sans-serif"; color:#1F497D;} .MsoChpDefault {mso-style-type:export-only; font-size:10.0pt;} < at > page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} --> <![endif]--> <![endif]-->
To the best of my knowledge the connection FROM the Windows GUI TO the NetBackup server is using port 1556 (PBX Exchanged port on the server). That is to say it is an OUTBOUND port from Windows so shouldn&#8217;t require any tunnel back to the workstation as it would use the established connection. So long as there is nothing restricting outbound to the NetBackup server it should work.

[/quote]
And I'll reply:

Based on the OP's description, he wants to tunnel from windows into the server, so that he does not have to open up the relevant TCP ports on the server's firewall.

Sounds like he tried 1556 originally; maybe he got the ssh tunnel mucked up, or it was a bp.conf issue.
Sorry, only registered users may post in this forum.

Click here to login