Forum Discussion

stucci's avatar
stucci
Level 6
9 years ago

Appliance 5230 and password

Hello,

I am confuse for password management. For security reason we must change all the password of our NBU 5230 Appliance. I read a lot of documentation, and I try to sume:

user: admin (used for web and CLISH access)

user: sysadmin (used for IPMI access)

user: root (.........................)

My question is about root user, I understand that I can become root using "elevate" from the CLISH. But I don't understand if root user is the same that I must insert when I configure a new StorageServer.

 the second question is, if I change the SPA credential, I will must update the credential on each media server ?

thank you guys

 

  • When you initially configured the appliance and created a MSDP disk pool, the root password was set automatically. Current password can be shown in CLISH: Appliance -> ShowDedupPassword.

    Unless something has dramatically changed recently, it is troublesome to change this one, once set. If you must change it, contact Veritas support for guidenance.

    /A

     

  • Hi,

    For the elevate part, you also need to change password for the user maintenance. User admin and maintenance is two different accounts, thus the old password remains when you try to go into maintenance mode.

    /A

  • Have you ever considered to look in the NetBackup 52xx and 5330 Appliance Security Guide for answers? 

    I see this in the pdf:

    Note: To increase the security of your appliance environment, Veritas recommends that you change the default admin and maintenance account passwords upon initial login to the appliance. You can use the Settings > Password page from the NetBackup Appliance Web Console or the Settings > Password command from the NetBackup Appliance Shell Menu to change the password.

    Warning: The NetBackup appliance does not support setting the Maintenance account password using commands like yppasswd root or passwd root. A password that is set in this fashion is overwritten once the system is upgraded. You should use the NetBackup Appliance Shell Menu to change the Maintenance account password.

  • When you initially configured the appliance and created a MSDP disk pool, the root password was set automatically. Current password can be shown in CLISH: Appliance -> ShowDedupPassword.

    Unless something has dramatically changed recently, it is troublesome to change this one, once set. If you must change it, contact Veritas support for guidenance.

    /A

     

    • stucci's avatar
      stucci
      Level 6

      Thank you so much guy!

      I could not remember "ShowDedupPassword" :)

    • stucci's avatar
      stucci
      Level 6

      Hello AAlmroth,

      I have still a problem, I changed admin password, but when I do Elevate, maintenance password is still the old. Why ?

      Maybe it is the root password ? tks

      • Marianne's avatar
        Marianne
        Level 6
        The Storage Server/MSDP password has nothing to do with OS-level user passwords (admin and/or root). It is a user name and password stored in EMM only.

  • Hi,

    When you create Storage Server and defining credentials for SPA, ... The window shows options to create credentials (notice you are asked to put "Password" and "Confirm Password") and not to use any existing crednetials. However, you can put root or any other credentials here.

    You will need these credentials when you would be configuring Auto Image Replication on Target Storage Server. If you have no plans to configure Auto Image Replication then you can simply forget about this credentials.

    • stucci's avatar
      stucci
      Level 6

      hallo Pat,

      are you sure ? if it is true every one can write on my appliance ??

      It is sound bad for me, other opinion about ??

       

      nb. Pat thank you very much for your help