Configuring ARCserveIT's command line feature

This configuration section is only required when you want to utilize ARCserveIT's command line feature. You can skip this section when performing operations via the ARCserveIT Manager.

ARCserveIT Users vs. Operating System Users

ARCserveIT is designed so that a defined set of rights and privileges can be established for each ARCserveIT user, irrespective of the rights a user might have as an operating system user. This concept enables the verification of ARCserveIT users and their associated rights throughout the ARCserveIT system.

Authentication Equivalencies

In general, authentication equivalencies establish the mapping of a user's log in name, to a set of permissions, per server.

In order for a user (including the operating system's root user) to be able to utilize ARCserveIT functions from the command line, the authentication equivalency for that ARCserveIT user must be established by the arcroot user (or a user with the similar permissions). This procedure must be done on each server running ARCserveIT.

The arcroot equivalency for the root user (Super Administrator)

The authentication equivalency must be set for the arcroot user before other equivalencies can be established. Although the arcroot user is able to operate as the super-user via the ARCserveIT GUI, it must first be associated with a server's root user's privileges to be functional and complete operations via the command line. Once this is done, the arcroot user for the specified server is entered into the Authentication database, and can now establish equivalencies for other users from any ARCserveIT server.

The association of root privileges to the arcroot user is usually established when configuring ARCserveIT via the asetup script. If the arcroot equivalency is not set during the initial configuration of ARCserveIT, it must be set from the command line.

Command line syntax for establishing equivalencies

The command line syntax for establishing equivalencies for any ARCserveIT user is shown below:

as_auth [-archost <hostname>] -equiv add <unixUser> <hostName>

arcserveUser [arcserve_user password]

- archost <hostname> - is the UNIX host server were the equivalency is being established and commands will actually run. This is required because permissions are granted on a per user, per server basis.

- unixUser <hostName> - is the UNIX system user name for the user being granted privileges and his/her host machine.

- arcserveUser - is user you are mapping to, or granting equivalents to.

- arcserve_user password - is the user granting the rights and his/her password.

All arguments within square brackets ("[ ]") are optional.

Establishing the arcroot equivalency

The following examples show how to establish the arcroot equivalency in a variety of scenarios.

Setting the arcroot equivalency on a local machine

The example below shows how to set the arcroot equivalency on the local ARCserveIT server "UNIX1" for the root user on the same local machine:

as_auth -equiv add root UNIX1 arcroot arcroot ""

The double quotes at the end of the command line are used to encase a null string, which is used when the ARCserveIT user does not have a password associated with it.

The root user on the specified host ("UNIX1") is now associated with the arcroot user, and can now use the ARCserveIT command line with Super Administrator rights.

Setting the arcroot equivalency for a user on a remote machine

The example below shows how to set the arcroot equivalency for the root user on the remote machine "UNIX2":

as_auth -equiv add root UNIX2 arcroot arcroot spider

In the above example, the arcroot user's password is set to "spider". Using this command line, the root user on UNIX2 is equivalent to the arcroot user on the local ARCserveIT server where the command has been initiated.

Setting the arcroot equivalency on a remote machine

The example below shows how to establish arcroot equivalency on the remote server "UNIX3" for the "root" user on the local server "UNIX1":

as_auth -archost UNIX3 -equiv add root UNIX1 arcroot arcroot spider

In the above example, the arcroot user's password is set to "spider". The command line has been initiated from the local UNIX1 server.