On 09/29/2011 05:43 PM, Steven Jones wrote: > Hi, > > A replica does not survive an internal corruption....surely you would just > duplicate the corruption?......unless you are telling me there is a way to > avoid that with replication alone? > > So for me its like Raiding disks.....a tape backup survives a data corruption > and isnt really there for a hardware failure....call my paranoid but a tape > (OK, I now have a virtual tape library) has saved my ass often enough that > want them. > > regards > > Steven Jones > > Technical Specialist - Linux RHCE > > Victoria University, Wellington, NZ > > 0064 4 463 6272 > > ________________________________________ > From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on > behalf of Jakub Hrozek [jhro...@redhat.com] > Sent: Friday, 30 September 2011 10:34 a.m. > To: email@example.com > Subject: Re: [Freeipa-users] backing up and restoring the backend > > On Thu, Sep 29, 2011 at 08:55:35PM +0000, Steven Jones wrote: >> Hi, >> >> Backing up >> >> I cant find anything in the documentation discussing backing up and >> recovering IPA/ldap?....in the past I seem to recall the FDS/389 suggested >> exporting the data which was then backed up.....I think there was a gui to >> do that.... >> >> So even if its a case of now its easy just backup /var/lib/dirsrv and >> nothing more is needed, it should say so IMHO. >> >> Restoring >> >> Is there a restore process? so with FDS/389 you would import the exported >> file. >> >> regards >> > Why not just create a replica? Saves you the restore part at least..
We have discussed the a backup strategies in the past several times. Replicas a definitely viable. If there is a data corruption there are ways to deal with it though it is extremely rare situation. The problem is that saving just database is not enough. There are certs, keys, config files, NSS database etc. that needs to be backed too. As IPA is trying to hide all this complexity on one side and is changing as we develop new functionality on the other we thought that for cases like yours it might make sense to save a snapshot of the machine image rather than only backup the content of the LDAP. > _______________________________________________ > Freeipa-users mailing list > Freeipafirstname.lastname@example.org > https://www.redhat.com/mailman/listinfo/freeipa-users > > _______________________________________________ > Freeipa-users mailing list > Freeipaemail@example.com > https://www.redhat.com/mailman/listinfo/freeipa-users > > -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. ------------------------------- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ _______________________________________________ Freeipa-users mailing list Freeipafirstname.lastname@example.org https://www.redhat.com/mailman/listinfo/freeipa-users