UNIX, Linux, and Mac OS X Client Agent Configuration
50 Client Agents Guide
UNIX, Linux, and Mac OS X Access Control Lists
For UNIX, Linux, and Mac OS X client agents, ACLs are supported in Single User
mode only. This is also known as No Password mode. A UNIX, Linux, and
Mac OS X client agent—or database backup agent—can be put into Single User
mode by specifying a NOPASSWORD entry in its corresponding section in the
Common Agent configuration file, agent.cfg, located in /opt/CA/ABcmagt. A
UNIX, Linux, and Mac OS X client agent can also be put into Single User mode by
specifying the -S or -NOPASSWORD option in the uag.cfg. You can use two types
of ACLs with the UNIX, Linux, or Mac OS X client agent:
Example: Allow or Deny Users
An access control list can deny or allow specific users to perform backups or
restores. For example, a part of the agent.cfg file is shown in the following
sample. You need to make similar changes for other client agent sections if you
want to apply ACLs to those client agents too.
[0]
NAME ABagentux
VERSION nn.n.n
HOME /opt/CA/ABuagent
NOPASSWORD
CAUSER A:CAUSER1 N:CAUSER2
NOPASSWORD enables Single User mode, and CAUSER specifies the users for
whom permission is being granted or denied. (A stands for ALLOW and N stands
for DENY.) A:CAUSER1 enables CAUSER1 to perform jobs, and N:CAUSER2
denies access to CAUSER2.
Note:
For UNIX and Linux client agents, the object type is [0]. For the Mac OS X
client agent, the object type is [4].
