Innes, Duncan wrote:

Did the backup/restore scripts reach more than experimental status?
Looks like they were released in FreeIPA 3.2.

The problem is few people have experimented with it. We need feedback to know whether it works or not. It worked for me in my contrived environment over a couple of days but that isn't exactly definitive.

Playing with this should be relatively easy and pain free. A backup doesn't do anything operationally except bring down the servers (for sanity sake). You can do live backups but those aren't recommended, and only backs up the data (not all the other configuration, etc).

Then you can try doing a full restore in an isolated VM as a test, and see how things look.

It's a problem for me that this kind of functionallity hasn't yet moved
into RHEL.

Backup/restore from some corporate use perspectives, cannot rely on
system snapshotting.  Whilst a snapshot may make an easier recovery
procedure for an admin, it is a take-it-or-leave-it approach.  I cannot,
for example, restore missing data that was deleted by mistake without
loosing other edits that have happened in the interim.

And that is still not dealt with in the current backup/restore. To do that requires some sort of LDIF browser where entries can be selected and restored/entries replaced. No such system already exists and represents a large chunk of work. It is a recognized shortcoming of the current support.

A VM snapshot is certainly a valid last-stop method of backing up IPA,
but it doesn't cover some of the use cases that most companies find
themselves having to deal with.





-----Original Message-----
[] On Behalf Of Martin Kosek
Sent: 27 March 2014 12:31
To: Andrew Holway;
Subject: Re: [Freeipa-users] Backup / Restore

On 03/27/2014 01:09 PM, Andrew Holway wrote:

I am being tasked with setting up freeipa for an organisation. A
replica will be created but they also require a backup / restore

Has anyone implemented backup restore? Ideas?
Recommendations? Dragons?



Good topic! I would be really interested in experience from
FreeIPA users. I can only provide information from FreeIPA
development team member point of view.

Our thoughts on topic of Backup and restore:

Original design of backup and restore scripts:

As you can read in the first document, we are not yet
convinced that backup&restore scripts is the right thing to
do + we also do not have enough information from the field.
If these scripts is what admin wants, if yes - do they work for them?

If you check open Backup and Restore tickest, there are
really not many of them:


Freeipa-users mailing list

This message has been checked for viruses and spam by the
Virgin Money email scanning system powered by Messagelabs.

This message has been checked for viruses and spam by the Virgin Money email 
scanning system powered by Messagelabs.

This e-mail is intended to be confidential to the recipient. If you receive a 
copy in error, please inform the sender and then delete this message.

Virgin Money plc - Registered in England and Wales (Company no. 6952311). 
Registered office - Jubilee House, Gosforth, Newcastle upon Tyne NE3 4PL. 
Virgin Money plc is authorised by the Prudential Regulation Authority and 
regulated by the Financial Conduct Authority and the Prudential Regulation 

The following companies also trade as Virgin Money. They are both authorised 
and regulated by the Financial Conduct Authority, are registered in England and 
Wales and have their registered office at Jubilee House, Gosforth, Newcastle 
upon Tyne NE3 4PL: Virgin Money Personal Financial Service Limited (Company no. 
3072766) and Virgin Money Unit Trust Managers Limited (Company no. 3000482).

For further details of Virgin Money group companies please visit our website at

Freeipa-users mailing list

Freeipa-users mailing list

Reply via email to