Dunno about OpenLDAP, but an MIT KDC database is easy to backup: use "kdb5_util" and it's "dump" sub-command periodically to dump the KDC database and backup the dump.
You'll need to decide whether you want to back up the "stash" file containing the KDC's master key, if you're using a stash file... I suggest that you save a (several?) printed copy of the KDC master database pass-phrase and don't backup the stash file. Restoring is easy: use "kdb5_util load ..." to reload the KDC db and "kdb5_util stash ..." to re-create the stash file. With any sort of database that dynamically changes, such as the KDC's, or OpenLDAP's, you'll need to have a way to lock out changes or dump/copy a snapshot of the database before you back it up; there's really no other way to backup active databases reliably (if there's a journal, back that up too, if you can). Cheers, Nico On Fri, Nov 16, 2001 at 12:47:38AM +0100, Turbo Fredriksson wrote: > I'm been running OpenLDAP/OpenSSL/MIT Kerberos as main user database > for almost a year now, and earlier today I started to get worried > all of a sudden.. No special reason, maybe just my paranoid brain cells > giving up a shout I guess :) > > What files do I need to backup, and now to restore them in case of > hardware/fs failures? > > HOWTO? FAQ? > > Thanx. > > > -- > Turbo __ _ Debian GNU Unix _IS_ user friendly - it's just > ^^^^^ / /(_)_ __ _ ___ __ selective about who its friends are > / / | | '_ \| | | \ \/ / Debian Certified Linux Developer > _ /// / /__| | | | | |_| |> < Turbo Fredriksson [EMAIL PROTECTED] > \\\/ \____/_|_| |_|\__,_/_/\_\ Stockholm/Sweden > > Legion of Doom Ft. Meade supercomputer Semtex CIA genetic NSA AK-47 > ammunition critical smuggle Waco, Texas Treasury Nazi subway > [See http://www.aclu.org/echelonwatch/index.html for more about this] -- -DISCLAIMER: an automatically appended disclaimer may follow. By posting- -to a public e-mail mailing list I hereby grant permission to distribute- -and copy this message.- Visit our website at http://www.ubswarburg.com This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. This message is provided for informational purposes and should not be construed as a solicitation or offer to buy or sell any securities or related financial instruments.
