Backing up a Netwitness Deployment where direct root login is not allowed

[david_waugh]

Hello

Is there an official RSA backup script that will allow us to backup systems where direct root login is not allowed?

In common with many enterprises and as a good security policy, direct root login via SSH has been disabled and it is first necessary to login as a non root user and then "su" to the root user with a password.

The current official backup and restore scripts require that ssh keys are set up between the backup server and each appliance in order for the backup to work. This is not allowed.

The best way around this would be a script that works as a cronjob on each appliance.

Does an official script exist?

[KEVINDIENST]

I also have this request, we're being pushed to configure sudo and disable SSH root logins for all our appliances, how does RSA plan to support this requirement and utilize the Backup and Restore scripts?

Naushad Kasu TnCNqFbwCBwNT2aUaQOZPvE3tSL3jJyeOvABeYMBjJM=‌

[JohnSnider]

I am currently working on adding non-root functionality for the backups (user will need sudo rights to the scripts with passwordless sudo for those specific scripts)  I'm also working on getting "sshpass" added to the load to support scripted backups that need a password to log into ssh.  I have no target date yet for this functionality, but it is in the works.

[KEVINDIENST]

Glad it is in the works, thanks John. 

[huanzhou1]

Is this been fixed? Thanks.