Anonymous_User Absent Member.
Absent Member.
622 views

Best method for backing up eDirectory 8.8.6


Good day,

I'm trying to find the best method for backing up eDirectory, short of
using a backup product like Sep Sesam, and or back up exec.

I was reading through the following:

http://tinyurl.com/cgup9t4

However; I found a TID 3295479 How to backup and restore eDirectory 8.8
SP1, NICI 2.7 and iManager 2.6 to another Linux server, and from that
information it seems to say that "dsbk" is not enough to have to back up
eDirectory correctly.

Can anyone point me to some documentation that can assist me in working
through the backup of eDirectory?

Thank you, in advanced


--
dschaldenovell
------------------------------------------------------------------------
dschaldenovell's Profile: https://forums.netiq.com/member.php?userid=205
View this thread: https://forums.netiq.com/showthread.php?t=46327

Labels (1)
0 Likes
8 Replies
Anonymous_User Absent Member.
Absent Member.

Re: Best method for backing up eDirectory 8.8.6

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

For a while dsbk was not able to backup NICI keys; I think they added
that back, though, so the TID (which, by its number, is quite old) is
probably from that time before dsbk could handle them.

Go with the documentation. 8.8 SP6 is almost current so it should be
fine. The TID's steps for backing up everything under the sun will
work, or you can use a script to do it (be sure to test):

http://www.novell.com/communities/node/1129/ndsrc

The script can be setup in a cron job, or run when required. It should
work for any root-based install, and maybe even for non-root installs
though I haven't tested one in a while. It handles multiple instances
and does both eDir and NICI.

Good luck.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQIcBAEBAgAGBQJQv5wiAAoJEF+XTK08PnB5jlMQALXLj1pbVpOyBCgL6g3Nytvg
Hp8xEePMWyM/AcWhHVeawEzNw2jSJHc5YTRsFwzZm+7TL7HYCiT+iug05QTQ7Ifc
Q5/H+DHNZ9nlu4Z5XAFz/QyIj7h28kvdGmIIhYK0IDjBDx63PhZnD68kNfIT4RIK
HkZs9blU1T5Vo3AteLUE+rWKTdzolwI0rk3Iy3vWeK516ie0D+dOedwq+uDAOYZv
uZqJ7THEFfWnIpqg8J98w4Ed8ZeAuYne1A7KaCNd72O3Pcvl4OKRjKFXWJ3piEOJ
zcTrqtFuSxhVpkTW/AP4NGHPdKwHcocUQGR7M9pty9HKF++17PqTx6/M/uHbE9kd
quTDQDDDUyujKuWK26nHRptRVfONH3yXtDfq5JhFm8bGzxHstBFMux5wS+IA0CUh
HQA69PbPvgtS/KUAAcb18mbBwp398bFsE0L7JVvWyakvVAf6D6mIbmsAoyQcVVC3
VUFMrvKExI+NFo5DaZyjWz0pitcyYGVIN81DMfrUDh5r5HsxF0/ko0qNcw2gqwR3
RBznALtRFByL6tDp1ttCqI4NXjblwSte0Qwp30xTtGC+3dg6368f/+WmO3K0z0uv
2HkSTRqgXMkSRxWEl6evpUSGSLv5Zx2NeyqKaf9ITot7mMR5V7CTZGtXTehi7vzo
CbBFW3I+EJThu3N3l8Mq
=9X0O
-----END PGP SIGNATURE-----
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Best method for backing up eDirectory 8.8.6

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Also, per your subject line, the "best" way is using either dsbk or
ndsbackup, both which comes with eDirectory. They are the best because
they are supported by the vendor. dsbk is also the best because it
knows how to handle things like transitive vectors so that you can
restore a single server instead of all servers and the system will be
brought back up to date; this requires knowing how to managed the
Roll-Forward Logs (RFLs), also as covered in the documentation.

Good luck.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
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=tKAK
-----END PGP SIGNATURE-----
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Best method for backing up eDirectory 8.8.6


When attempting to run the following command :

dsbk setconfig -L -r /install/rfl.log

In the ndsd.log file I saw the following:
Command line setconfig -L -r /install/rfl.log
Processing command line
DSBsetConfig err = -25
It will take some time!!!DSBK error! -25

I performed steps 1 -3 in the http://tinyurl.com/cgup9t4 , but it does
not appear that the dsbk.conf file was even used during the backup
procedure. Any additional assistance would be much appreciated.


--
dschaldenovell
------------------------------------------------------------------------
dschaldenovell's Profile: https://forums.netiq.com/member.php?userid=205
View this thread: https://forums.netiq.com/showthread.php?t=46327

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Best method for backing up eDirectory 8.8.6


It looks to me like the -r switch points to a directory, not a file. Not
sure if you really want the roll-forward logs in a directory called
/install/ ...


--
ataubman
------------------------------------------------------------------------
ataubman's Profile: https://forums.netiq.com/member.php?userid=301
View this thread: https://forums.netiq.com/showthread.php?t=46327

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Best method for backing up eDirectory 8.8.6


I ran the following commands, one from the command line and the other
from iManager, please let me know if I missed anything.

1.) dsbk backup -f /install/edirbkup -l /install/rfl.log -s 10240 -b
(I saw the edirbkup was file was created in the "/install" directory
along with the rfl.log, the only question I had was Roll Forward Logging
being enabled)

2.) from iManager eDirectory Maintenance -> backup configuration ->
server object in eDirectory -> logged in with user name password and
context -> turned on Roll-Forward logging selected the directory for
those logs, left the minimum and maximum at defaults, and current
roll-forward log and stream file logging off, and started the backup.

Again I saw the back created, my question is will this be sufficient in
the of an emergency to restore eDirectory as well? On the Vault we do
not yet have any Enterprise backup software like in the production.

Thanks,


--
dschaldenovell
------------------------------------------------------------------------
dschaldenovell's Profile: https://forums.netiq.com/member.php?userid=205
View this thread: https://forums.netiq.com/showthread.php?t=46327

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Best method for backing up eDirectory 8.8.6

On Thu, 13 Dec 2012 14:44:02 +0000, dschaldenovell wrote:

> Again I saw the back created, my question is will this be sufficient in
> the of an emergency to restore eDirectory as well?


Yes. Though personally I recommend testing your restore procedures as
well, so that you can see what it does when you're not under pressure and
can resolve any problems that arise in testing.


--
--------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.netiq.com

Please post questions in the forums. No support provided via email.

0 Likes
jwilleke Trusted Contributor.
Trusted Contributor.

Re: Best method for backing up eDirectory 8.8.6

I guess "best" is up for debate.
Which disaster are you trying to protect yourself from?

How long can you be out of business?

I agree, you should run DSBK.

I recommend an LDIF vs ndsbackup as ldif is more flexible.

We recommended a script to do a weekly full backup and incremental every
day.

-jim

On 12/5/12 2:04 PM, dschaldenovell wrote:
>
> Good day,
>
> I'm trying to find the best method for backing up eDirectory, short of
> using a backup product like Sep Sesam, and or back up exec.
>
> I was reading through the following:
>
> http://tinyurl.com/cgup9t4
>
> However; I found a TID 3295479 How to backup and restore eDirectory 8.8
> SP1, NICI 2.7 and iManager 2.6 to another Linux server, and from that
> information it seems to say that "dsbk" is not enough to have to back up
> eDirectory correctly.
>
> Can anyone point me to some documentation that can assist me in working
> through the backup of eDirectory?
>
> Thank you, in advanced
>
>


0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Best method for backing up eDirectory 8.8.6


My $.02

I use both “dsBackup” (for full backup including NICI) and “ndsbackup”
for dsObjectBackup and run them with cron every night with a delete of
backups after fifteen days:

The Scripts: (run as root with scripts kept in the root dir SLES
11.1)

Creates two .tar files of DS and NICI files with date structure:

/root/ndsrc.pl -s -p /tmp/dsBackup -d
/etc/opt/novell/eDirectory/conf/.edir -c
/etc/opt/novell/eDirectory/conf/nds.conf

Creates an Object backup called eDirObjectBackup(with a Date
structure):

/opt/novell/eDirectory/bin/ndsbackup cvf
/tmp/dsBackup/eDirObjectBackup-$(date +"%b-%d-%y") -a
cn=YourAdmin.ou=services.o=xyz -p YourPassword


Crontab file dsBackup section:

# run cron every morning at 1.15:am for the Backup of all Objects in the
Directory
15 1 * * * root /root/dsObjectBackup.sh
#
#
# run cron every morning at 1.25am for complete Backup of Directory
including NICI
25 1 * * * root /root/dsFullBackup.sh
#
#
# run cron every morning at 2:30am - This will Delete all files in the
/tmp/dsBackup Directory older than 15 Days
30 2 * * * root find /tmp/dsBackup -type f -mtime 14 -exec rm -f {}
\;



Note: The “find” command above is a very powerful and potentially
destructive command. It assumes you know what you are doing?

Explanation of command above:

Find all files of type “f” in the \tmp\dsBackup Directory.
“-type f” means skip any system files if encountered
“-mtime 14” means modification time stamp on file is over 14 days old
“-exec rm –f {} \;” means to execute the command “rm” (remove) and “-f”
force the action without permission, “{}” on all file names, and “\;”
end or escape the compound command.

ps.

These procedures only produce readable files for Tape Backups.
These files must be Backed Up to a Tape achieve for Disaster Recovery.

I’d recommend any restore needed for DS be done by Support…

Your fist defense should always be to keep three Replica of every
Partition.


Gary


--
gholdefe
------------------------------------------------------------------------
gholdefe's Profile: https://forums.netiq.com/member.php?userid=318
View this thread: https://forums.netiq.com/showthread.php?t=46327

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.