BackBox H4.00 User Manual

Configuration
47 BackBox H4.00 User Manual
File Content Access
SCF,
TACL,
CLIMCMD
Guardian utilities BBSV
processes for GUI need to run
these programs when configuring
Access to the NSK utilities
BackPak starts SPI processes with MEDIASRV, TMFSERVE and MEDIACOM to access
the Guardian tape system and catalogs during the configuration and the regular
operations. The MEDIASRV & TMFSERVE action commands are reserved to the
SUPER group.
During the configuration through the BackPak UI, the programs TACL, CLIMCMD,
SCF are also run.
In a Domain that covers several NSK nodes, these programs are started by BBSV
running in the main node to run in the peripheral node.
In a multi-nodes Domain, BBSV might be PROGID to avoid remote access by
SUPER.SUPER running automated actions, see the next section.
NonStop Access - BBSV PROGID
There are two cases where the Guardian special setting PROGID can be used.
1/ Multi-node domain
In the current BackPak version, OBB017 triggers a BBSV process that runs under
SUPER.SUPER and that might start MEDIASRV or TMFSERVE on peripheral nodes to
access remote DSM/TC or TMF catalogs.
This remote access by SUPER.SUPER is in some administrative contexts considered
un-secure.
A safe solution is to choose an alternate user-id in SUPER group, give it access to
remote and local BackPak files and DSM/TC and TMF catalogs, and PROGID the
Domain Manager BBSV with this user-id as owner.
All automated actions, such as OBB017 or tape loading, will execute under this
PRODID user-id. All GUI commands will still be executed under the user-id entered in
the GUI sign-on page.
2/ SUPER group not available to operators