[Freeipa-users] backing up and restoring the backend

[Dmitri Pal]

On 09/29/2011 05:43 PM, Steven Jones wrote:
> Hi,
>
> A replica does not survive an internal corruption....surely you would just duplicate the corruption?......unless you are telling me there is a way to avoid that with replication alone?
>
> So for me its like Raiding disks.....a tape backup survives a data corruption and isnt really there for a hardware failure....call my paranoid but a tape (OK, I now have a virtual tape library) has saved my ass often enough that want them.
>
> regards
>
> Steven Jones
>
> Technical Specialist - Linux RHCE
>
> Victoria University, Wellington, NZ
>
> 0064 4 463 6272
>
> ________________________________________
> From: freeipa-users-bounces at redhat.com [freeipa-users-bounces at redhat.com] on behalf of Jakub Hrozek [jhrozek at redhat.com]
> Sent: Friday, 30 September 2011 10:34 a.m.
> To: freeipa-users at redhat.com
> Subject: Re: [Freeipa-users] backing up and restoring the backend
>
> On Thu, Sep 29, 2011 at 08:55:35PM +0000, Steven Jones wrote:
>> Hi,
>>
>> Backing up
>>
>> I cant find anything in the documentation discussing backing up and recovering IPA/ldap?....in the past I seem to recall the FDS/389 suggested exporting the data which was then backed up.....I think there was a gui to do that....
>>
>> So even if its a case of now its easy just backup /var/lib/dirsrv and nothing more is needed, it should say so IMHO.
>>
>> Restoring
>>
>> Is there a restore process?  so with FDS/389 you would import the exported file.
>>
>> regards
>>
> Why not just create a replica? Saves you the restore part at least..

We have discussed the a backup strategies in the past several times.
Replicas a definitely viable. If there is a data corruption there are
ways to deal with it though it is extremely rare situation.

The problem is that saving just database is not enough. There are certs,
keys, config files, NSS database etc. that needs to be backed too. As
IPA is trying to hide all this complexity on one side and is changing as
we develop new functionality on the other we thought that for cases like
yours it might make sense to save a snapshot of the machine image rather
than only backup the content of the LDAP.


> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
>
>


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/