Dell NetWorker 19.9 Administration Guide

Configuring the NMC server to manage additional NetWorker servers

The NMC Server can use only one NetWorker Authentication Service to provide authentication services. When the NMC Server manages more than one NetWorker Server, configure a trust between each NetWorker Server that the NMC Server will manage and NetWorker Server that will provide authentications services to the NMC Server. After you establish each trust, update the user groups on each NetWorker Server to include the users and groups that require access to the NetWorker Server.

1. Ensure that the NMC Server and the NetWorker Server are in time sync with each other and points to an NTP Server.
2. To establish the trust, type the following command on each NetWorker Server that is not local to the NetWorker Authentication Service that NMC uses for authentication:

   nsrauthtrust -H Authentication_service_host -P Authentication_service_port_number
   

   where:

   • The location of the nsrauthtrust command differs on Linux and Windows:
     • Linux—/usr/sbin
     • Windows—C:\Program Files\EMC NetWorker\nsr
   • Authentication_service_host is the hostname of the NetWorker Server that authenticates the NMC Server host.
   • Authentication_service_port_number is the port number used by the NetWorker Authentication Service. The default port number is 9090.

   For example:

   nsrauthtrust -H nwserver.corp.com -P 9090

3. Grant the NetWorker Authentication Service user groups access to the NetWorker Server, by typing the nsraddadmin command:

   nsraddadmin -H Authentication_service_host -P Authentication_service_port_number

   For example:

   nsraddadmin -H nwserver.corp.com -P 9090

   The nsraddadmin command updates the following user groups:

   • Application Administrator—Adds the distinguished name (DN) of the NetWorker Authentication Service Administrators group.
   • Security Administrator—Adds the DN of the NetWorker Authentication Service Administrators group.
   • Users—Adds the DN of the NetWorker Authentication Service Users group.