Re: [Veritas-bu] isilon backup accelerator
On Mon, Jun 07, 2010 at 09:03:12AM -0500, Ed Wilts wrote: If you have a NetApp filer (and there may be other NAS heads that have the same functionality) that have multiple security models on the same data, this approach simply will not work. We have some file systems that use both Unix and NTFS security so backing the data up using either CIFS or NFS will miss the rest of the security information. Just a note on this point. Don't know about other systems, but Netapp says that CIFS backups do properly save UNIX security info. It's saved in a SMB structure. NFS cannot carry the NTFS ACLS though. So conceivably you can do all CIFS backups and get all security structures. (I do NDMP and have mainly UNIX servers, so it's not something I've tried to test). -- Darren ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] isilon backup accelerator
On Jun 9, 2010, at 19:27, A Darren Dunham wrote: NFS cannot carry the NTFS ACLS though. So conceivably you can do all CIFS backups and get all security structures. (I do NDMP and have mainly UNIX servers, so it's not something I've tried to test). Well, NFSv4 does NTFS-style ACLs. See Section 5.11 of the NFSv4 spec (RFC 3530). There's also a draft on mapping NFSv4 and draft-POSIX ACLs (draft-ietf-nfsv4-acl-mapping-05). Don't know of many systems that can show both though. I believe OpenSolaris can do UID-SID mapping and such with ACLs if you're exporting a ZFS file system to both NFS and CIFS/SMB. NetApp should be able to handle it if you use mixed QTrees: http://www.netapp.com/us/communities/tech-ontap/nfsv4-0408.html ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] isilon backup accelerator
I've run into a customer or two that has. It works, to say the least. However a better way, and cheaper way would be to just do a synthetic backup (ideally with dedupe) of the CIFS/NFS shares themselves. You dont have to buy the expensive accelerator head, you eliminate NDMP licenses, and you now are future proofing yourself on restores by backing up the raw shares, and not using NDMP with a proprietary data format. +-- |This was sent by mnab...@gmail.com via Backup Central. |Forward SPAM to ab...@backupcentral.com. +-- ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] isilon backup accelerator
On Mon, Jun 7, 2010 at 1:43 AM, mitch808 netbackup-fo...@backupcentral.comwrote: However a better way, and cheaper way would be to just do a synthetic backup (ideally with dedupe) of the CIFS/NFS shares themselves. You dont have to buy the expensive accelerator head, you eliminate NDMP licenses, and you now are future proofing yourself on restores by backing up the raw shares, and not using NDMP with a proprietary data format. This seems to be a practice that Symantec is now promoting but there are certainly complications to this approach and cases where it simply won't work. Ideally with dedupe also depends on the data - we have a LOT of data that doesn't dedupe well at all and purchasing dedupe licenses would cost us a fortune with little to no gain. If you have a NetApp filer and are using MultiStore, you now need to use multiple media servers to back up the same data since they are likely in different security domains. This could be further complicate itself by the way you have your physical backup network cabled - you may need to add even more network interfaces to separate the backup network from the production front-side traffic and figure out how to those media servers access the data over those networks. Ff you have a NetApp filer (and there may be other NAS heads that have the same functionality) that have multiple security models on the same data, this approach simply will not work. We have some file systems that use both Unix and NTFS security so backing the data up using either CIFS or NFS will miss the rest of the security information. No approach is perfect so you have to decide what is going to work best in your environment. Ed Wilts, RHCE, BCFP, BCSD, SCSP, SCSE ewi...@ewilts.org Linkedin http://www.linkedin.com/in/ewilts ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] isilon backup accelerator
anyone using an isilon backup accelerator to do ndmp backups directly to tape? running Isilon OneFS v5.0.7.13? thanks, jerald Confidentiality Note: The information contained in this message, and any attachments, may contain confidential and/or privileged material. It is intended solely for the person(s) or entity to which it is addressed. Any review, retransmission, dissemination, or taking of any action in reliance upon this information by persons or entities other than the intended recipient(s) is prohibited. If you received this in error, please contact the sender and delete the material from any computer. ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu