Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
Anonymous_User Absent Member.
Absent Member.
121 views

eDir backup on SLES


Good day, we are transitioning our eDir from OES to SLES and now our
handy CommVault backup agents no longer work since SMS is not available
to us. I know this subject has possibly been answered a thousand times
but I have some specific questions that I haven't found answers to. If
it has already been covered, I would happily accept a link as answer.
Otherwise, I'm sure someone here can answer these. As you can doubtless
tell, all my questions assume a disaster-recovery scenario.

1. I'm taking dsbk and ndsbackup backups of each server. Is this
necessary? Am I correct in assuming that dsbk is for cases where
restoring server identity would be necessary, while ndsbackup is for
object-level restore? Are these methods any better than shutting down
ndsd and performing a file-system backup?

2. Is NICI backup necessary on a regular backup rotation or just once
every so often (when a CA root cert changes? etc?) Is there anything
special about the restore beyond file copy?

3. Is restore of the CA necessary to restore eDirectory/NICI/etc?

4. Are there any particular strategies that are best suited when
eDirectory exists primarily to service and Identity Manager 4
environment?

5. What would the workflow be in a disaster recovery scenario? For
example if a datacenter was lost, would you build a vanilla eDir server
configured with the same tree name then restore from one of the above
backups?


--
jameswatson3
------------------------------------------------------------------------
jameswatson3's Profile: https://forums.netiq.com/member.php?userid=565
View this thread: https://forums.netiq.com/showthread.php?t=48288

Labels (1)
0 Likes
1 Reply
Anonymous_User Absent Member.
Absent Member.

Re: eDir backup on SLES

On Mon, 29 Jul 2013 13:24:02 +0000, jameswatson3 wrote:

> Good day, we are transitioning our eDir from OES to SLES and now our
> handy CommVault backup agents no longer work since SMS is not available
> to us.


dsbk is your answer.


> Otherwise, I'm sure someone here can answer these. As you can doubtless
> tell, all my questions assume a disaster-recovery scenario.


Read the eDirectory / backups documentation carefully. Test in your labs
with non-production servers to ensure that you understand what to do, and
what's going to happen. Read up on the roll forward logs, and how to
manage them too.


> 1. I'm taking dsbk and ndsbackup backups of each server. Is this
> necessary?


For DR, dsbk is sufficient. I don't use ndsbackup. I don't do object
level restores, either.


> object-level restore? Are these methods any better than shutting down
> ndsd and performing a file-system backup?


Yes. Because if you have more than one server a file-system backup of the
closed DIB isn't going to restore correctly.


> 2. Is NICI backup necessary on a regular backup rotation or just once
> every so often (when a CA root cert changes? etc?) Is there anything
> special about the restore beyond file copy?


As far as I know, it's just files. They don't change, ever.


> 3. Is restore of the CA necessary to restore eDirectory/NICI/etc?


No.


> 4. Are there any particular strategies that are best suited when
> eDirectory exists primarily to service and Identity Manager 4
> environment?


Not really. For DR planning, you have to define which sorts of "D" you're
planning for. IDM might come in as a secondary restore capability, if the
source systems are still alive, or to help restore a rebuilt downstream
system.


> 5. What would the workflow be in a disaster recovery scenario? For
> example if a datacenter was lost, would you build a vanilla eDir server
> configured with the same tree name then restore from one of the above
> backups?


Build new servers. Restore from backups media (tape, disk, etc.). Restore
DIBs from dsbk backups.


--
--------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.netiq.com

Please post questions in the forums. No support provided via email.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.