AUTHENTICATION USER GUIDE
Assess email OTP, expiry and sign-in-path exceptions through an acceptance plan.
BEFORE YOU BEGIN
This guide describes inspected source behavior and open acceptance requirements; it does not establish production-enforced MFA, validated directory TLS or security acceptance for every sign-in path. Enablement and organizational cutover require controlled tests on a release with the gaps resolved.
Visual/action limit: no real LDAP or OTP screen was captured in this inspection; another workflow’s screenshot was not substituted. Content is based on local LDAP/signin/verify_otp/send_2fa_email source review. No bind, user import, password entry, OTP generation/email delivery or authentication-setting change was performed.
The inspected local sign-in code implements email OTP generation/verification. TOTP/Authenticator, WebAuthn/passkeys and recovery codes were not verified here. Assess local, LDAP, special-admin and Keystone sign-in separately; enabled SMTP/SMS settings do not establish mandatory MFA for every account.
Identity flow and relevant acceptance results are recorded.
Check an email address accessible to the test account and an authorized SMTP sender record. Assess port/SSL/STARTTLS together with actual CA/hostname validation. The inspected send_2fa_email helper has insecure_tls/debug_smtp defaults; disabling verification or logging SMTP dialogue is not a production recommendation. Keep passwords/app passwords out of the guide.
Identity flow and relevant acceptance results are recorded.
In the normal local-sign-in branch, enabled SMTP or SMS settings trigger OTP generation; the inspected branch still calls send_2fa_email. An SMS record therefore does not establish verified SMS delivery. A per-user MFA toggle or organization-wide enforcement panel was not verified. Do not change production sign-in settings merely for testing.
Identity flow and relevant acceptance results are recorded.
The source stores an email-keyed OTP in cache for 300 seconds and redirects to the MFA page. In an approved test verify access before code entry, delivery timing and expiry after the password stage. Separately accept regeneration/resend behavior and cache sharing across web workers in the installed release. This inspection did not trigger sign-in or send OTP email.
Identity flow and relevant acceptance results are recorded.
The verify_otp branch logs in on a matching cached code and deletes it; invalid/expired codes return an error. Reuse, attempt limits, session binding and pre-verification access require controlled security acceptance; this source review did not validate all of them. Because the source copy contains OTP debug output, acceptance must use a release that does not log actual codes.
Identity flow and relevant acceptance results are recorded.
The inspected special-admin and successful LDAP branches can return logged-in before OTP generation. Keystone authentication depends on its own validated identity flow. Email OTP acceptance does not establish these paths; if MFA is required for all accounts, close missing enforcement paths in the relevant release and retest before declaring readiness. No exception was added or removed here.
Identity flow and relevant acceptance results are recorded.
Plan behavior during email/SMTP/cache outages and an authorized emergency-access process. Do not assume recovery codes, automatic reset or admin-bypass features. Record identity type, release, expiry, invalid-attempt, exception and delivery results; do not disable password/2FA protection for testing. No account, SMTP or verification settings were changed here.
Identity flow and relevant acceptance results are recorded.
COMMON QUESTIONS
Not by itself. Directory bind, local/external sign-in, OTP enforcement and session access need separate acceptance; test every sign-in path.
STEP-BY-STEP GUIDES
Install EraBackup Master: operating system readiness, package integrity, terminal installer, TLS, licensing, repository and service validation.
Open guide
02Use EraBackup Create Policy to select source, storage, clients, retention and schedule, then validate the first full backup and recovery point.
Open guide03Select a recovery point in EraBackup, use the RESTORE wizard, review target mappings and Summary, and validate data in an isolated target.
Open guide04Prepare VMware backup step by step, from vCenter connectivity and test VM selection to HotAdd prerequisites and the full/CBT chain.
Open guide05Plan VMware recovery point selection, target vSphere resources and datastore checks, then validate recovery in a new isolated VM.
Open guide06Plan OpenShift Virtualization/KubeVirt VM backups with namespace, CSI, RBAC and repository prerequisites; assess database profiles separately.
Open guide07Plan the OpenShift recovery point, target namespace, new VM name and StorageClass; distinguish VM/PVC recovery from database restore.
Open guide08Prepare agent-based database policies and OpenShift PostgreSQL/MySQL logical streaming separately; check source, method, retention and initial backup acceptance.
Open guide09Prepare recovery point, target database, credential reference and final acceptance checks according to the engine and backup method.
Open guide010Prepare the Exchange agent, registered instance, database selection and backup acceptance plan. Check which release validates DAG, database and mailbox objectives.
Open guide011Inspect the Exchange catalog item, recovery point and mailbox selection screen; distinguish a UI preview from an actually completed recovery operation.
Open guide012Prepare the AD agent, domain controller source, policy selection and catalog acceptance; distinguish object recovery from System State and forest recovery objectives.
Open guide013Prepare the AD catalog point, object identity, attribute difference and scoped restore delegation; assess Recycle Bin and System State objectives separately.
Open guide014Prepare EraBackup Kubernetes agent policies, PVC/Pod selection and node/control-plane methods for your distribution; plan catalog and isolated restore acceptance together.
Open guide015Inspect Kubernetes catalog records, PVC targets and control-plane recovery limits separately; verify source/namespace mapping and application acceptance.
Open guide016Separate Rancher local management, RKE2/K3s and downstream application scope; distinguish the EraBackup agent method from Rancher’s own backup operator.
Open guide017Prepare separate source, target and acceptance checks for Rancher management restore, RKE2/K3s cluster recovery and downstream application recovery.
Open guide018Prepare OpenStack backup from VM, Cinder disk, project and consistency profile through the Full/incremental chain.
Open guide019Plan OpenStack VM restore with recovery point, disk chain, metadata and target project/network mappings.
Open guide020Prepare Safir Bulut backup from VM, Cinder disk, project and consistency profile through the Full/incremental chain.
Open guide021Plan Safir Bulut VM restore with recovery point, disk chain, metadata and target project/network mappings.
Open guide022Prepare Hyper-V backup with source connection, VM/disk selection, retention and initial acceptance checks.
Open guide023Plan recovery point, disk chain and Hyper-V targets within the scope exposed by the source template.
Open guide024Prepare Proxmox backup with source connection, VM/disk selection, retention and initial acceptance checks.
Open guide025Plan recovery point, disk chain and Proxmox targets within the scope exposed by the source template.
Open guide026KVM Backup Preparation Guide: assess releases, source access and validated target scope.
Open guide027KVM Restore Preparation Guide: assess releases, source access and validated target scope.
Open guide028Sangfor Backup Preparation Guide: assess releases, source access and validated target scope.
Open guide029Sangfor Restore Preparation Guide: assess releases, source access and validated target scope.
Open guide030Prepare file and folder selection, agent access, repository, retention and initial acceptance for Windows servers step by step.
Open guide031Prepare recovery points, file selection, target paths and data acceptance for Windows servers step by step.
Open guide032Prepare file and folder selection, agent access, repository, retention and initial acceptance for Linux servers step by step.
Open guide033Prepare recovery points, file selection, target paths and data acceptance for Linux servers step by step.
Open guide034Prepare Windows Bare Metal image backup with agent access, disk scope, boot dependencies and a recovery test.
Open guide035Prepare Windows Bare Metal image recovery points, destination disks, recovery environment and boot/data acceptance.
Open guide036Prepare Linux Bare Metal image backup with agent access, disk scope, boot dependencies and a recovery test.
Open guide037Prepare Linux Bare Metal image recovery points, destination disks, recovery environment and boot/data acceptance.
Open guide038Prepare replication acceptance with site mappings, the first Full seed, incremental generations and a verified checkpoint.
Open guide039Prepare service recovery with checkpoint selection, isolated testing, fencing, controlled failover and failback planning.
Open guide040Prepare source/destination roles, Storage Policy scope and data acceptance for NAS.
Open guide041Prepare catalogs, recovery chains, destination effects and file acceptance for NAS.
Open guide042Prepare source/destination roles, Storage Policy scope and data acceptance for S3-Compatible Object Storage.
Open guide043Prepare catalogs, recovery chains, destination effects and file acceptance for S3-Compatible Object Storage.
Open guide044Prepare SQL Server agent access, instance/database selection, method and initial backup acceptance.
Open guide045Prepare SQL Server recovery points, chains, destination instances and application acceptance step by step.
Open guide046Prepare Oracle agent access, instance/database selection, method and initial backup acceptance.
Open guide047Prepare Oracle recovery points, chains, destination instances and application acceptance step by step.
Open guide048Validate PostgreSQL methods, instance/database scope and initial data acceptance.
Open guide049Validate PostgreSQL methods, instance/database scope and destination chains.
Open guide050Validate MySQL methods, instance/database scope and initial data acceptance.
Open guide051Validate MySQL methods, instance/database scope and destination chains.
Open guide052Prepare MariaDB instances, methods, data scope and initial acceptance.
Open guide053Prepare MariaDB recovery points, log chains and validated destination effects.
Open guide054Prepare MongoDB instances, methods, data scope and initial acceptance.
Open guide055Prepare MongoDB recovery points, log chains and validated destination effects.
Open guide056Prepare DB2 instance, database/tablespace, methods and initial backup acceptance.
Open guide057Prepare DB2 instance, database/tablespace, recovery chains and destination acceptance.
Open guide058Use repository identity, HTTPS access, capacity and verified data acceptance to prepare installation.
Open guide059Use repository identity, HTTPS access, capacity and verified data acceptance to manage storage operations.
Open guide060Prepare scope, state verification and operational acceptance for monitoring step by step.
Open guide061Prepare scope, state verification and operational acceptance for reporting step by step.
Open guide062Prepare scope, state verification and operational acceptance for notification management step by step.
Open guide063Validate identity, role/group and tenant/resource boundaries for user management.
Open guide064Validate identity, role/group and tenant/resource boundaries for role management.
Open guide065Validate identity, role/group and tenant/resource boundaries for permission management.
Open guide066Validate LDAP connectivity, directory users and tenant/role mappings separately.
Open guide067Assess email OTP, expiry and sign-in-path exceptions through an acceptance plan.
Open guide068Assess symptoms, job identity, services and data acceptance step by step to diagnose issues.
Open guide069Assess symptoms, job identity, services and data acceptance using timelines and redacted logs.
Open guide070Prepare identity, package/scope and post-action acceptance for license management.
Open guide071Prepare identity, package/scope and post-action acceptance for version upgrade.
Open guide072Plan source, method, capacity and data acceptance together for backup scheduling.
Open guide073Plan source, method, capacity and data acceptance together for retention policies.
Open guide074Assess deduplication layers, policy selections and measured data acceptance separately.
Open guide075Assess compression layers, policy selections and measured data acceptance separately.
Open guide076Assess encryption layers, release support, key ownership and restore acceptance step by step.
Open guide077Validate the WORM option, repository requirements, protection period and catalog evidence separately.
Open guide078Assess job records, recovery chains and isolated restores using measurable acceptance steps.
Open guide079Review hash comparisons, repository chains and backend verification limits step by step.
Open guide080Manage transfer scheduling, concurrency and network impact through measurable steps.
Open guide081Assess source, network, repository and concurrency effects through controlled comparisons.
Open guide082Prepare Windows and Linux components, secure enrollment requirements and initial connectivity acceptance step by step.
Open guide083Manage agent inventory, connectivity health, updates and retirement conditions through controlled steps.
Open guide084Prepare integration requirements, the support process and secure test acceptance without exposing technical secrets.
Open guide085Combine scheduled jobs, error behavior, monitoring and rollback in a secure automation plan.
Open guide086Prepare event scope, time correlation and secure evidence sharing step by step.
Open guide087Assess access, updates, data protection and incident handling without publishing sensitive configuration.
Open guide088Plan site roles, data copies, connectivity impact and recovery acceptance through controlled steps.
Open guide089Assess inventory, access boundaries, job tracking and centralized operational acceptance step by step.
Open guide090Assess archival needs, target support, data scope and recovery requirements step by step.
Open guide091Plan retention needs, chain dependencies, continued access and periodic recovery acceptance.
Open guide092Assess tenant separation, resource ownership and access boundaries through controlled acceptance.
Open guide093Plan tenant onboarding, user/resource mappings and retirement acceptance safely.
Open guide094Assess data volume, change rate, retention chains and safe capacity headroom together.
Open guide095Measure storage and processing load separately to prepare supported expansion and acceptance plans.
Open guide096Assess service dependencies, support scope and controlled failover acceptance separately.
Open guide097Assess access traffic, health checks and job concurrency against the supported architecture.
Open guideTALK TO THE TECHNICAL TEAM
Share your workloads and recovery objectives. Let’s define the technical scope together.
MEET ERABACKUP
Share your workloads to start a demo and technical scope discussion.
Your requirements have been recorded for technical assessment.
