[Freeipa-users] Backup / Restore

[Rob Crittenden]

Innes, Duncan wrote:
> Martin,
>
> Did the backup/restore scripts reach more than experimental status?
> Looks like they were released in FreeIPA 3.2.

The problem is few people have experimented with it. We need feedback to 
know whether it works or not. It worked for me in my contrived 
environment over a couple of days but that isn't exactly definitive.

Playing with this should be relatively easy and pain free. A backup 
doesn't do anything operationally except bring down the servers (for 
sanity sake). You can do live backups but those aren't recommended, and 
only backs up the data (not all the other configuration, etc).

Then you can try doing a full restore in an isolated VM as a test, and 
see how things look.

> It's a problem for me that this kind of functionallity hasn't yet moved
> into RHEL.
>
> Backup/restore from some corporate use perspectives, cannot rely on
> system snapshotting.  Whilst a snapshot may make an easier recovery
> procedure for an admin, it is a take-it-or-leave-it approach.  I cannot,
> for example, restore missing data that was deleted by mistake without
> loosing other edits that have happened in the interim.

And that is still not dealt with in the current backup/restore. To do 
that requires some sort of LDIF browser where entries can be selected 
and restored/entries replaced. No such system already exists and 
represents a large chunk of work. It is a recognized shortcoming of the 
current support.

> A VM snapshot is certainly a valid last-stop method of backing up IPA,
> but it doesn't cover some of the use cases that most companies find
> themselves having to deal with.

Agreed.

rob

>
> Thanks
>
> Duncan
>
>> -----Original Message-----
>> From: freeipa-users-bounces at redhat.com
>> [mailto:freeipa-users-bounces at redhat.com] On Behalf Of Martin Kosek
>> Sent: 27 March 2014 12:31
>> To: Andrew Holway; freeipa-users at redhat.com
>> Subject: Re: [Freeipa-users] Backup / Restore
>>
>> On 03/27/2014 01:09 PM, Andrew Holway wrote:
>>> Hello,
>>>
>>> I am being tasked with setting up freeipa for an organisation. A
>>> replica will be created but they also require a backup / restore
>>> strategy.
>>>
>>> Has anyone implemented backup restore? Ideas?
>> Recommendations? Dragons?
>>>
>>> Thanks,
>>>
>>> Andrew
>>
>> Good topic! I would be really interested in experience from
>> FreeIPA users. I can only provide information from FreeIPA
>> development team member point of view.
>>
>> Our thoughts on topic of Backup and restore:
>> http://www.freeipa.org/page/Backup_and_Restore
>>
>> Original design of backup and restore scripts:
>> http://www.freeipa.org/page/V3/Backup_and_Restore
>>
>> As you can read in the first document, we are not yet
>> convinced that backup&restore scripts is the right thing to
>> do + we also do not have enough information from the field.
>> If these scripts is what admin wants, if yes - do they work for them?
>>
>> If you check open Backup and Restore tickest, there are
>> really not many of them:
>> https://fedorahosted.org/freeipa/query?status=assigned&status=
> new&status=reopened&component=Backup&order=priority&col=id&col=summary&c
> ol=status&col=type&col=priority&col=milestone&col=component&grou>
> p=milestone
>>
>> Martin
>>
>> _______________________________________________
>> Freeipa-users mailing list
>> Freeipa-users at redhat.com
>> https://www.redhat.com/mailman/listinfo/freeipa-users
>>
>> This message has been checked for viruses and spam by the
>> Virgin Money email scanning system powered by Messagelabs.
>>
>
> This message has been checked for viruses and spam by the Virgin Money email scanning system powered by Messagelabs.
>
> This e-mail is intended to be confidential to the recipient. If you receive a copy in error, please inform the sender and then delete this message.
>
> Virgin Money plc - Registered in England and Wales (Company no. 6952311). Registered office - Jubilee House, Gosforth, Newcastle upon Tyne NE3 4PL. Virgin Money plc is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority.
>
> The following companies also trade as Virgin Money. They are both authorised and regulated by the Financial Conduct Authority, are registered in England and Wales and have their registered office at Jubilee House, Gosforth, Newcastle upon Tyne NE3 4PL: Virgin Money Personal Financial Service Limited (Company no. 3072766) and Virgin Money Unit Trust Managers Limited (Company no. 3000482).
>
> For further details of Virgin Money group companies please visit our website at virginmoney.com
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
>