Backing up Active Directory server using TSM client

[Paul_Dudley]

Is there any point in backing up an Active Directory server using the TSM 
client? Would a restore of Active Directory work? I have read conflicting views 
on this - some say it would not work yet others say it has worked for them, 
while others say that they use another tool to backup Active Directory and then 
use TSM to backup those backup files.





Thanks & Regards

Paul





Paul Dudley

IT Operations

ANL Container Line

pdud...@anl.com.au








ANL DISCLAIMER

This e-mail and any file attached is confidential, and intended solely to the 
named add
ressees. Any unauthorised dissemination or use is strictly prohibited. If you 
received
this e-mail in error, please immediately notify the sender by return e-mail 
from your s
ystem. Please do not copy, use or make reference to it for any purpose, or 
disclose its
 contents to any person.

Re: Client issues after upgrade

[Zoltan Forray]

I am pretty sure this wasn't a silent install.  The OS person responsible
said she stopped the scheduler services, ran the install package
manuallyand went from there.

On Mon, Nov 7, 2016 at 12:28 PM, Andrew Raibeck  wrote:

> You do need to install the DLL libraries separately when doing a silent
> install. See
> http://www.ibm.com/support/knowledgecenter/SSGSG7_7.1.6/
> client/c_inst_winsilent.html
>
> Is there still a problem even when following the doc?
>
> Regards,
>
> Andy
>
> 
> 
>
> Andrew Raibeck | IBM Spectrum Protect Level 3 | stor...@us.ibm.com
>
> IBM Tivoli Storage Manager links:
> Product support:
> https://www.ibm.com/support/entry/portal/product/tivoli/
> tivoli_storage_manager
>
> Online documentation:
> http://www.ibm.com/support/knowledgecenter/SSGSG7/
> landing/welcome_ssgsg7.html
>
> Product Wiki:
> https://www.ibm.com/developerworks/community/wikis/home/wiki/Tivoli%
> 20Storage%20Manager
>
> "ADSM: Dist Stor Manager"  wrote on 2016-11-07
> 11:32:25:
>
> > From: Zoltan Forray 
> > To: ADSM-L@VM.MARIST.EDU
> > Date: 2016-11-07 11:39
> > Subject: Re: Client issues after upgrade
> > Sent by: "ADSM: Dist Stor Manager" 
> >
> > Can you elaborate on this with an APAR number or webpage/location?
> >
> > On Sat, Nov 5, 2016 at 8:00 AM, Karel Bos  wrote:
> >
> > > Those ddl files should have beem installed by ba client install but
> wont.
> > > Known bug will be fixed. Support page is up and local fix points to sub
> > > folder of baclient unpack dir to run the needed setup manually.
> > >
> > > Op 3 nov. 2016 21:25 schreef "Shawn DREW"
> :
> > >
> > > > I have run into this problem when the install was done using the
> silent
> > > > install automated through a script instead of the GUI install.
> > > > When I redid the install through the GUI, it offered to install those
> MS
> > > > libraries and fixed everything.
> > > >
> > > > You can also perform silent installs of the vcredit*exe binaries as
> well
> > > > if you need to automate it.
> > > > -Shawn
> > > >
> > > > -Original Message-
> > > > From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On
> Behalf
> Of
> > > > Robert Talda
> > > > Sent: Thursday, November 03, 2016 3:52 PM
> > > > To: ADSM-L@VM.MARIST.EDU
> > > > Subject: Re: [ADSM-L] Client issues after upgrade
> > > >
> > > > Zoltan:
> > > >   Just a hunch, but those files sound like the Microsoft
> redistributable
> > > > libraries that are required for the client.  So the upgrade consists
> of
> > > > more than just running msiexec; there are a couple of
> vcredist_x86.exe
> > > > calls to make as well.  It just feels like those calls were missed.
> > > >
> > > >
> > > > FWIW,
> > > > Robert Talda
> > > > EZ-Backup Systems Engineer
> > > > Cornell University
> > > > +1 607-255-8280
> > > > r...@cornell.edu
> > > >
> > > >
> > > > This message and any attachments (the "message") is intended solely
> for
> > > > the addressees and is confidential. If you receive this message in
> error,
> > > > please delete it and immediately notify the sender. Any use not in
> accord
> > > > with its purpose, any dissemination or disclosure, either whole or
> > > partial,
> > > > is prohibited except formal approval. The internet can not guarantee
> the
> > > > integrity of this message. BNP PARIBAS (and its subsidiaries) shall
> > > (will)
> > > > not therefore be liable for the message if modified. Please note that
> > > > certain functions and services for BNP Paribas may be performed by
> BNP
> > > > Paribas RCC, Inc.
> > > >
> > > >
> > > > Unless otherwise provided above, this message was sent by BNP
> Paribas, or
> > > > one of its affiliates in Canada, having an office at 1981 McGill
> College
> > > > Avenue, Montreal, QC, H3A 2W8, Canada. To the extent this message is
> > > being
> > > > sent from or to Canada, you may unsubscribe from receiving commercial
> > > > electronic messages by using this link: www.bnpparibas.ca/en/
> > > unsubscribe/
> > > > . See www.bnpparibas.ca <
> > > > http://www.bnpparibas.ca> for more information on BNP Paribas, in
> > > Canada.
> > > >
> > >
> >
> >
> >
> > --
> > *Zoltan Forray*
> > Spectrum Protect (p.k.a. TSM) Software & Hardware Administrator
> > Xymon Monitor Administrator
> > VMware Administrator (in training)
> > Virginia Commonwealth University
> > UCC/Office of Technology Services
> > www.ucc.vcu.edu
> > zfor...@vcu.edu - 804-828-4807
> > Don't be a phishing victim - VCU and other reputable organizations will
> > never use email to request that you reply with your password, social
> > security number or confidential personal information. For more details
> > visit http://infosecurity.vcu.edu/phishing.html
> >
>



--
*Zoltan Forray*
Spectrum Protect (p.k.a. TSM) Software & 

Re: Client issues after upgrade

[Andrew Raibeck]

You do need to install the DLL libraries separately when doing a silent
install. See
http://www.ibm.com/support/knowledgecenter/SSGSG7_7.1.6/client/c_inst_winsilent.html

Is there still a problem even when following the doc?

Regards,

Andy



Andrew Raibeck | IBM Spectrum Protect Level 3 | stor...@us.ibm.com

IBM Tivoli Storage Manager links:
Product support:
https://www.ibm.com/support/entry/portal/product/tivoli/tivoli_storage_manager

Online documentation:
http://www.ibm.com/support/knowledgecenter/SSGSG7/landing/welcome_ssgsg7.html

Product Wiki:
https://www.ibm.com/developerworks/community/wikis/home/wiki/Tivoli%20Storage%20Manager

"ADSM: Dist Stor Manager"  wrote on 2016-11-07
11:32:25:

> From: Zoltan Forray 
> To: ADSM-L@VM.MARIST.EDU
> Date: 2016-11-07 11:39
> Subject: Re: Client issues after upgrade
> Sent by: "ADSM: Dist Stor Manager" 
>
> Can you elaborate on this with an APAR number or webpage/location?
>
> On Sat, Nov 5, 2016 at 8:00 AM, Karel Bos  wrote:
>
> > Those ddl files should have beem installed by ba client install but
wont.
> > Known bug will be fixed. Support page is up and local fix points to sub
> > folder of baclient unpack dir to run the needed setup manually.
> >
> > Op 3 nov. 2016 21:25 schreef "Shawn DREW"
:
> >
> > > I have run into this problem when the install was done using the
silent
> > > install automated through a script instead of the GUI install.
> > > When I redid the install through the GUI, it offered to install those
MS
> > > libraries and fixed everything.
> > >
> > > You can also perform silent installs of the vcredit*exe binaries as
well
> > > if you need to automate it.
> > > -Shawn
> > >
> > > -Original Message-
> > > From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf
Of
> > > Robert Talda
> > > Sent: Thursday, November 03, 2016 3:52 PM
> > > To: ADSM-L@VM.MARIST.EDU
> > > Subject: Re: [ADSM-L] Client issues after upgrade
> > >
> > > Zoltan:
> > >   Just a hunch, but those files sound like the Microsoft
redistributable
> > > libraries that are required for the client.  So the upgrade consists
of
> > > more than just running msiexec; there are a couple of
vcredist_x86.exe
> > > calls to make as well.  It just feels like those calls were missed.
> > >
> > >
> > > FWIW,
> > > Robert Talda
> > > EZ-Backup Systems Engineer
> > > Cornell University
> > > +1 607-255-8280
> > > r...@cornell.edu
> > >
> > >
> > > This message and any attachments (the "message") is intended solely
for
> > > the addressees and is confidential. If you receive this message in
error,
> > > please delete it and immediately notify the sender. Any use not in
accord
> > > with its purpose, any dissemination or disclosure, either whole or
> > partial,
> > > is prohibited except formal approval. The internet can not guarantee
the
> > > integrity of this message. BNP PARIBAS (and its subsidiaries) shall
> > (will)
> > > not therefore be liable for the message if modified. Please note that
> > > certain functions and services for BNP Paribas may be performed by
BNP
> > > Paribas RCC, Inc.
> > >
> > >
> > > Unless otherwise provided above, this message was sent by BNP
Paribas, or
> > > one of its affiliates in Canada, having an office at 1981 McGill
College
> > > Avenue, Montreal, QC, H3A 2W8, Canada. To the extent this message is
> > being
> > > sent from or to Canada, you may unsubscribe from receiving commercial
> > > electronic messages by using this link: www.bnpparibas.ca/en/
> > unsubscribe/
> > > . See www.bnpparibas.ca <
> > > http://www.bnpparibas.ca> for more information on BNP Paribas, in
> > Canada.
> > >
> >
>
>
>
> --
> *Zoltan Forray*
> Spectrum Protect (p.k.a. TSM) Software & Hardware Administrator
> Xymon Monitor Administrator
> VMware Administrator (in training)
> Virginia Commonwealth University
> UCC/Office of Technology Services
> www.ucc.vcu.edu
> zfor...@vcu.edu - 804-828-4807
> Don't be a phishing victim - VCU and other reputable organizations will
> never use email to request that you reply with your password, social
> security number or confidential personal information. For more details
> visit http://infosecurity.vcu.edu/phishing.html
>

Re: Client issues after upgrade

[Zoltan Forray]

Can you elaborate on this with an APAR number or webpage/location?

On Sat, Nov 5, 2016 at 8:00 AM, Karel Bos  wrote:

> Those ddl files should have beem installed by ba client install but wont.
> Known bug will be fixed. Support page is up and local fix points to sub
> folder of baclient unpack dir to run the needed setup manually.
>
> Op 3 nov. 2016 21:25 schreef "Shawn DREW" :
>
> > I have run into this problem when the install was done using the silent
> > install automated through a script instead of the GUI install.
> > When I redid the install through the GUI, it offered to install those MS
> > libraries and fixed everything.
> >
> > You can also perform silent installs of the vcredit*exe binaries as well
> > if you need to automate it.
> > -Shawn
> >
> > -Original Message-
> > From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of
> > Robert Talda
> > Sent: Thursday, November 03, 2016 3:52 PM
> > To: ADSM-L@VM.MARIST.EDU
> > Subject: Re: [ADSM-L] Client issues after upgrade
> >
> > Zoltan:
> >   Just a hunch, but those files sound like the Microsoft redistributable
> > libraries that are required for the client.  So the upgrade consists of
> > more than just running msiexec; there are a couple of vcredist_x86.exe
> > calls to make as well.  It just feels like those calls were missed.
> >
> >
> > FWIW,
> > Robert Talda
> > EZ-Backup Systems Engineer
> > Cornell University
> > +1 607-255-8280
> > r...@cornell.edu
> >
> >
> > This message and any attachments (the "message") is intended solely for
> > the addressees and is confidential. If you receive this message in error,
> > please delete it and immediately notify the sender. Any use not in accord
> > with its purpose, any dissemination or disclosure, either whole or
> partial,
> > is prohibited except formal approval. The internet can not guarantee the
> > integrity of this message. BNP PARIBAS (and its subsidiaries) shall
> (will)
> > not therefore be liable for the message if modified. Please note that
> > certain functions and services for BNP Paribas may be performed by BNP
> > Paribas RCC, Inc.
> >
> >
> > Unless otherwise provided above, this message was sent by BNP Paribas, or
> > one of its affiliates in Canada, having an office at 1981 McGill College
> > Avenue, Montreal, QC, H3A 2W8, Canada. To the extent this message is
> being
> > sent from or to Canada, you may unsubscribe from receiving commercial
> > electronic messages by using this link: www.bnpparibas.ca/en/
> unsubscribe/
> > . See www.bnpparibas.ca <
> > http://www.bnpparibas.ca> for more information on BNP Paribas, in
> Canada.
> >
>



--
*Zoltan Forray*
Spectrum Protect (p.k.a. TSM) Software & Hardware Administrator
Xymon Monitor Administrator
VMware Administrator (in training)
Virginia Commonwealth University
UCC/Office of Technology Services
www.ucc.vcu.edu
zfor...@vcu.edu - 804-828-4807
Don't be a phishing victim - VCU and other reputable organizations will
never use email to request that you reply with your password, social
security number or confidential personal information. For more details
visit http://infosecurity.vcu.edu/phishing.html

Re: Is anyone supporting Spectrum Protect clients running on systems using Microsoft's System Center Endpoint Protection ?

[Lee, Gary]

We haven't run into this yet, but our tsm server is only 6.3.4, and many of our 
clients are that vintage as well.
Thanks for the heads-up, will keep our eyes open here.


-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of Robert 
Talda
Sent: Friday, November 04, 2016 5:08 PM
To: ADSM-L@VM.MARIST.EDU
Subject: [ADSM-L] Is anyone supporting Spectrum Protect clients running on 
systems using Microsoft's System Center Endpoint Protection ?

Folks:
  Our university just began an major rollout of the Microsoft System Center 
Endpoint Protection (SCEP) product (replacing the Symantec equivalent) and 
we’ve noticed some new behavior from the Spectrum Protect client for Windows.

  In particular, when the client encounters an infected file, it ends the 
backup, writing the summary statistics to the log and exiting with an error 
code 12.  We caught this behavior when a backup of a volume with 2.9 million 
files ended after only 260K files were processed.  

  What we :think: might be happening: the Spectrum Protect client has detected 
the change to file, and attempts to read it to back it up.  This triggers a 
scan by the SCEP that reveals the virus.  The SCEP then blocks the Spectrum 
Protect client request, resulting in the following error message:

ANSE ..\..\common\winnt\ntrc.cpp(771): Received Win32 RC 225 (0x00e1) 
from FileOpen(): CreateFile. Error description: Operation did not complete 
successfully because the file contains a virus or potentially unwanted software.

  It appears that this stops the Spectrum Protect client producer “thread” from 
walking the filesystem; and then, when the “consumer” thread catches up, the 
client exits; such as in the backup that generated the error message above, the 
last lines written were:

Normal File-->   444 \\\  ** Unsuccessful **

Total number of objects inspected:  267,699
Total number of objects backed up:   26
Total number of objects updated:  0
Total number of objects rebound:  0
Total number of objects deleted:  0
Total number of objects expired: 98
Total number of objects failed:   0
Total number of objects encrypted:0
Total number of subfile objects:  0
Total number of objects grew: 0
Total number of retries:  0
Total number of bytes inspected: 168.77 GB
Total number of bytes transferred:40.08 MB
Data transfer time:0.10 sec
Network data transfer rate:  375,325.92 KB/sec
Aggregate data transfer rate:  5.19 KB/sec
Objects compressed by:0%
Total data reduction ratio:   99.98%
Subfile objects reduced by:   0%
Elapsed processing time:   02:11:39

  And the backup exits with a return code 12.  

  It :feels: like the Spectrum Protect client is being “nicely” killed by the 
SCEP for accessing the infected file, but it may also be a bug in the Spectrum 
Protect code.  

  I should note that guaranteeing and deleting the infected file allows the 
next backup to proceed - until it encounters an infected file.  (a.k.a. Apply, 
lather, rinse, repeat)

This output was generated by a Spectrum Protect client for Windows v7.1.4.0 
running on a Windows 2012 Server R2 platform.  The backup was initiated by a 
script, rather than by the TSM scheduler, but I believe the same behavior will 
happen for a scheduled backup.  I also believe this will happen on Apple 
Macintosh OS X systems that are running SCEP as well.  I’m working with our 
security office to set up test scenarios to verify this behavior.

But I thought I’d reach out and see if others have noticed this.

Thanks!
Bob T.


Robert Talda
EZ-Backup Systems Engineer
Cornell University
+1 607-255-8280
r...@cornell.edu

Re: VMware Full And Incremental Backup

[Marcel Anthonijsz]

For example:

TSM01>q sched pd-vmw f=d

Policy Domain Name: PD-VMW
 Schedule Name: VE_DAILY_INC
   Description: Daily Incremental
Action: Backup
 Subaction: VM
   Options: -vmfulltype=vstor -vmbackuptype=fullvm
-asnodename=VE_DATACENTER
 -domain.vmfull="VM=vm01,vm02" -MODE=IFINCR
   Objects:
  Priority: 5
   Day of Week: Sun,Mon,Tue,Wed,Thu,Sat
 Month: Any
  Day of Month: Any
 Week of Month: Any


Policy Domain Name: PD-VMW
 Schedule Name: VE_WEEKLY_FULL
   Description: Weekly Full backup. Runs once a week at
friday night
Action: Backup
 Subaction: VM
   Options: -vmfulltype=vstor -vmbackuptype=fullvm
-asnodename=VE_DATACENTER
 -domain.vmfull="VM=vm01,vm02" -MODE=IFFul
   Objects:
  Priority: 5
   Day of Week: Fri
 Month: Any
  Day of Month: Any
 Week of Month: Any


2016-11-07 15:35 GMT+01:00 David Ehresman :

> In the Options section of the schedule, they can use " -MODE=IFFull" for
> the Full backup schedule and " -MODE=IFINCR" for the incremental schedule.
>
> David
>
> -Original Message-
> From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of
> S Kumar
> Sent: Sunday, November 06, 2016 4:10 AM
> To: ADSM-L@VM.MARIST.EDU
> Subject: [ADSM-L] VMware Full And Incremental Backup
>
> Hi
>
> One of my customer want to schedule Weekly full and rest incremental.
>
> How it will be schedule, as per tsm backup type is forever incremental. If
> we schedule, first will be full and then it will be incremental.
>
> How can we take/or schedule full backup in weekends?
>
> Any idea on this?
>
> Regards,
>



--
Kind Regards, Groetje,

Marcel Anthonijsz
T: +31(0)299-776768
M:+31(0)6-53421341

Re: VMware Full And Incremental Backup

[David Ehresman]

In the Options section of the schedule, they can use " -MODE=IFFull" for the 
Full backup schedule and " -MODE=IFINCR" for the incremental schedule.

David

-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of S Kumar
Sent: Sunday, November 06, 2016 4:10 AM
To: ADSM-L@VM.MARIST.EDU
Subject: [ADSM-L] VMware Full And Incremental Backup

Hi

One of my customer want to schedule Weekly full and rest incremental.

How it will be schedule, as per tsm backup type is forever incremental. If
we schedule, first will be full and then it will be incremental.

How can we take/or schedule full backup in weekends?

Any idea on this?

Regards,