nbu8.X 备份oracle部署普通client方法及注意事项

说明：NBU 8.X 版本后，服务端以及客户端通讯方法追加了证书认证这一块，在部署过程中，有一些地方需要注意，以下一些说明：

1.不同的客户环境，对网络访问会有不同的权限，在部署客户端软件时，首先需要向客户网络运维人员申请网络访问权限:

NBU master 和普通客户端 之间 1556  13724  13782 必须保证这3个端口之间双向开通，只要这个开通，网络通讯方面就不会有什么问题。

2. linux环境注意检查本地防火墙策略，redhat7以上版本注意firewalld 服务,redhat7以下版本注意iptables 服务，是否关闭。

3.本地和master server端 hosts文件要双向解析主机名，客户端名。这里延伸说明一下，在有些客户环境中我们经常可能会看到主机叫 XXX.domain.com 或者

不规范的直接就叫local.hostdomain ,在部署客户端的时候我们可以人为的去指定客户端的名称：

以下为8.1.X版本的一个安装实例可以进行参考，注意加粗地方：

root@localhost /]# cd NetBackup_8.1.1_CLIENTS2
[root@localhost NetBackup_8.1.1_CLIENTS2]# ls -lrt
总用量 116
drwxr-xr-x 2 root bin  4096 2月   4 2018 Doc
drwxr-xr-x 4 root bin  4096 2月   4 2018 NBClients
-r--r--r-- 1 root bin  2428 2月   4 2018 VSM_README
-r--r--r-- 1 root bin 25621 2月   4 2018 LICENSE
-r-xr-xr-x 1 root bin 74296 2月   4 2018 install
[root@localhost NetBackup_8.1.1_CLIENTS2]# ./install 

Veritas Installation Script
Copyright (c) 2018 Veritas Technologies LLC. All rights reserved.

        Installing NetBackup Client Software

Please review the VERITAS SOFTWARE LICENSE AGREEMENT located on
the installation media before proceeding. The agreement includes
details on the NetBackup Product Improvement Program.

For NetBackup installation and upgrade information specific to your
platform and to find out if your installed EEBs or hot fixes are
contained in this release, check the Installation and Upgrade checklists
and the Hot Fix and EEB Release Auditor, both available on the Veritas
Services and Operations Readiness Tools (SORT) page:
https://sort.veritas.com/netbackup.

Do you wish to continue? [y,n] (y) y

Checking for required system conditions...

ok unsupported_platform: Passed checks for unsupported platforms.
ok be_nb_same_host: inapplicable on linux: skipping

Checking for recommended system conditions...

ok hotfix_auditor: NetBackup is not installed or there is no hotfix or EEB data present. Skipping HF/EEB Auditor check.
not ok ephemeral_port_range: The ephemeral port range include ports used by NetBackup services.
  The NetBackup Master Servers may not start up correctly if the system
  is configured with an ephemeral port range that conflicts with
  the ports that are used by NetBackup services. This test checks whether the 
  current ephemeral port range includes the ports used by NetBackup services.
  See https://www.veritas.com/support/en_US/article.100040677.htm for
  details.

WARNING: One or more non-critical preinstall checks have failed.

Do you want to install the NetBackup client software for this client? [y,n] (y) 

This package will install Linux/RedHat2.6.18 client.

This package will install NetBackup client 8.1.1.

Enter the name of the NetBackup master server : nbu

Would you like to use "localhost.localdomain" as the configured
name of the NetBackup client? [y,n] (y) n

Enter the name of this NetBackup client : plylxdb

Successfully unpacked /NetBackup_8.1.1_CLIENTS2/NBClients/anb/Clients/usr/openv/netbackup/client/Linux/RedHat2.6.18/certcmdTool_for_UNIX.tar.gz.

Checking connectivity to the master server.
NOTE: Depending on the network, this action may take a few minutes.
      To continue without setting up secure communication, press Ctrl+C.
Connectivity established.

Checking for local CA certificate
Local CA certificate is not found on host. Proceeding with installation.

Getting CA certificate details.
NOTE: Depending on the network, this action may take a few minutes.
      To continue without setting up secure communication, press Ctrl+C.

CA Certificate received successfully from server nbu

         Subject Name : /CN=nbatd/OU=root@nbu/O=vx
           Start Date : Mar 18 XXXXXXXXXXXXGMT
          Expiry Date : Mar 13 XXXXXXXXXXX GMT
     SHA1 Fingerprint : XXXXXXXXXXXXXXXXXXXXXXXXXXXXX
 CA Certificate State : Not Trusted

Master server [xxxxx] reports CA Certificate fingerprint
[xx:xx:xx:xx:xx:x:xx:xx:xx:xx].

Is this correct? [y,n] y

Storing CA certificate.
NOTE: Depending on the network, this action may take a few minutes.
      To continue without setting up secure communication, press Ctrl+C.
The validation of root certificate fingerprint is successful.
CA certificate stored successfully from server pzbnbuser.

Getting host certificate for hostname plylxdb.
NOTE: Depending on the network, this action may take a few minutes.
      To continue without setting up secure communication, press Ctrl+C.

An authorization token is required in order to get the host certificate for this
host.  At the prompt, enter the authorization token or q to skip the question.
NOTE: The answer entered will not be displayed to the terminal.

Enter the authorization token for pzbnbuser or q to skip:   （此地方需要特别注意，TOKEN值，可以通过java console从控制台中取到，粘贴后不会明文显示，当你确定

已右键复制时，直接按回车就可，如果token值不对，它会给出提出，此时根据提示继续输入即可）

Getting host certificate with token for hostname plylxdb.
NOTE: Depending on the network, this action may take a few minutes.
      To continue without setting up secure communication, press Ctrl+C.
Host certificate and certificate revocation list received successfully from server pzbnbuser.

Client binaries are located in /NetBackup_8.1.1_CLIENTS2/NBClients/anb/Clients/usr/openv/netbackup/client/Linux/RedHat2.6.18.

Starting NetBackup Deduplication installer
testing: /tmp/pdde_pkg_dir_18911
Checking for SYMCpddea package...
Checking for VRTSpddea package...
   Package VRTSpddea found.
NetBackup Deduplication preinstall check passed
Installing VRTSnbpck ...
Installation of VRTSnbpck was successful. Check /tmp/install_VRTSnbpck.rpm_trace.18895 for details.
Installing VRTSpbx ...
Installation of VRTSpbx was successful. Check /tmp/install_VRTSpbx.rpm_trace.18895 for details.
Installing VRTSnbclt ...
Installation of VRTSnbclt was successful. Check /tmp/install_VRTSnbclt.rpm_trace.18895 for details.

Terminating NetBackup and/or Media Manager processes.

Installing NB-Java.
Installing VRTSnbjre ...

Installation of VRTSnbjre was successful.
More details regarding VRTSnbjre can be found in file
/tmp/install_VRTSnbjre.rpm_trace.19356 on localhost.localdomain.
Installing VRTSnbjava ...

Installation of VRTSnbjava was successful.
More details regarding VRTSnbjava can be found in file
/tmp/install_VRTSnbjava.rpm_trace.19356 on localhost.localdomain.

Migrating log files in /usr/openv/logs
Migration of log files complete.

No [x]inetd process found.
Installing VRTSpddea.rpm ...
Installation of VRTSpddea.rpm was successful. Check /tmp/install_VRTSpddea.rpm_trace.18895 for details.
Installing VRTSnbcfg.rpm ...
Installation of VRTSnbcfg.rpm was successful. Check /tmp/install_VRTSnbcfg.rpm_trace.18895 for details.

File /usr/openv/tmp/install_trace.18621 contains a trace of this install.
That file can be deleted after you are sure the install was successful.

以上为普通客户端的一个安装说明，nbu 8.1 相对于之前版本稍微有点区别，但是可能是新版本的功能越来越全面，实际情况可能还会出现一些莫名其名的问题，当

你绞尽脑汁始终无法排除问题时，可尝试将客户端版本进行升级，当然前提是master server端的版本比客户端版本高，也许问题就解决了。