Using the Command Line Interface › ca_auth - Authentication Command › ca_auth - Equivalence Arguments

ca_auth - Equivalence Arguments

Equivalence allows you to create an equivalent user to caroot, if you know the password for caroot. Once you've designated a user on a given host as equivalent to caroot, you can access the entire authentication database as this user and have full access to all CA ARCserve Backup features.

To be able to use the CA ARCserve Backup command line utilities, you need to create the caroot equivalency for your system account. The caroot equivalency establishes the mapping of a user's login name with the CA ARCserve Backup user database. This allows the user to use the CA ARCserve Backup command line utilities. Any Windows user on any host can be granted equivalence to caroot. To grant a user equivalence to caroot, you must either be logged in as equivalent to caroot or know the caroot password.

Console utilities such as ca_backup, ca_restore, and ca_qmgr work with remote CA ARCserve Backup servers for submitting and monitoring backup and restore jobs without requiring users to log in to CA ARCserve Backup every time for each command.

The ca_auth command includes the following equivalency arguments:

ca_auth [-cahost host] -equiv 

add ntuser hostName ARCserveUser [caroot_username] [caroot_password]
getequiv [ntuser hostName]
delete ntuser hostName [caroot_username] [caroot_password]
whoami

• add ntuser hostName ARCserveUser [caroot_username] [caroot_ password]

  Creates an equivalence of the specified user on host to caroot.

• getequiv [ntuser hostName]

  Displays all equivalences for the specified user on host who runs this command.

• delete ntuser hostName [caroot_username password]

  Delete equivalence for UNIX user on host. Unless the current user is equivalent to caroot, credentials (i.e., caroot username and password) for the Administrator's account are required.

• whoami

  Displays the user name you are logged in as on the local machine.

Note: A user with read rights cannot grant somebody else read rights to an object they do not own.