Backup of Unity Shares

[mk2311]

So v10 has a very nice feature to allow direct access to Dell Unity storage, from where i host a number of NFS shares

When creating the file share in Veeam, it needs a path to the NFS share
On Unity:
Each share has a 'default access'

And within that share, a 'customized access' can be configured

We need the default access to be 'no access' so that the customized is always in effect

So we list the RHEL VM's that have the appropriate access

BUT....

Veeam appears to want the 'default access'. And as that is 'no access' Veeam gets exactly that - no access

If i create a host entry for the Veeam B&R server and give it customized access of 'Read/Write Root' Veeam does'nt get access

So, under testing, i change the custom access for the Veeam server to read-only

Still fails

Change the DEFAULT ACCESS to read-only and the mount works - but changing the default access to 'read-only' allows any host
to have that access - which is a massive security exposure for us. That way all shares have no access and the hosts we want
to have access (including a bunch of RHEL VM's that nead ReadWrite and the Veeam B&R that really only needs ReadOnly) are listed in
the cutomized access option in Unity

So Veeam is looking at the DEAFULT ACCESS tab only and ignoring the customized tab

Anyone come across this?

[Dima P.]

Hello,

Can you please clarify if read permissions were provided to Veeam B&R and proxy servers listed in the file share properties of the Veeam B&R server? Thank you!

[mk2311]

Hi

Yes,file share properties on Unity had the customised access set to READ and also changed to Read Write Allow Root. Made no difference

However, if the 'default shares' on Unity is changed to READONLY then Veeam can do the mounts and backups run fine

But that default access allows anyone to access the shares - that is clearly a security exposure which i cant allow

Support ref is 04018578

[Dima P.]

Hello Jeff,

For NFS shares Veeam B&R requires host-based authentication instead of user-based authentication. Can you try setup access for Veeam B&R server and all the required file proxies via Unity UI (basically list required servers as allowed for read)? From Dell's Unity manual:

Configuring NFS file system storage
This topic describes the high-level steps to configure NFS file system for the host by using
Unisphere.
Procedure
1. Create NFS file system storage for the host.
2. Add the host to the system and specify its access to the file system storage.
When you specify the access, only select the network (IP) addresses for the host
adapters that you want to access the file system storage.

Once done, add NFS share to the Veeam B&R server (account is not required) and let us know how it goes. Cheers!