TDP for SQL and UAC

2017-06-01 Thread Harris, Steven
Hi All

I've got a bit of a show-stopper here that I could use some help with.

Previously, SQL backups have been mostly  handled by dump to disk and backup 
with BA Client. Database sizes have grown over time and now we cannot get 
through the whole dump/backup cycle in a reasonable window, so we have been 
pushing to get TDP used as the standard backup mechanism for SQL.  There are a 
couple of issues with this ; I'll  be submitting an RFE for one of them shortly 
however the big one is to do with security.

The TDP for SQL backup is to be run using the control-m scheduling tool as the 
backup has to run at a particular point in the processing cycle (also for 
restores as we can't afford to have a large restore fail because someone's RDP 
session timed out) .  It must use a domain account, nothing else is 
permissible.  When doing this we get a windows UAC pop-up.  Again we are not 
permitted to turn off UAC..  don't worry about how reasonable that is, IT 
Security and Auditors don't cope well with arguments about 'reasonable' or 'low 
risk' it's all black and white.

So, has anyone else solved this issue: run a TDP backup from a domain account 
and somehow bypass the UAC prompt without turning it off in a blanket fashion?

Any and all suggestions gratefully received.

Steve

Steven Harris
TSM Admin/Consultant
Canberra Australia

This message and any attachment is confidential and may be privileged or 
otherwise protected from disclosure. You should immediately delete the message 
if you are not the intended recipient. If you have received this email by 
mistake please delete it from your system; you should not copy the message or 
disclose its content to anyone. 

This electronic communication may contain general financial product advice but 
should not be relied upon or construed as a recommendation of any financial 
product. The information has been prepared without taking into account your 
objectives, financial situation or needs. You should consider the Product 
Disclosure Statement relating to the financial product and consult your 
financial adviser before making a decision about whether to acquire, hold or 
dispose of a financial product. 

For further details on the financial product please go to http://www.bt.com.au 

Past performance is not a reliable indicator of future performance.


Re: Linux on Power Support - Available now

2017-06-01 Thread Harris, Steven
Thanks for that Del.

I realize you can't pre-announce anything here, but a Power-linux LE vBS server 
to handle TDP for VE would be awesome and avoid many of the architectural 
limitations of Intel boxes.  In my case that would imply TS3500 driver support 
and Lan free as well.

Can we assume that's in the pipeline?

Cheers

Steve.

Steven Harris
TSM Admin/Consultant
Canberra Australia.

-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of Del 
Hoobler
Sent: Friday, 2 June 2017 3:31 AM
To: ADSM-L@VM.MARIST.EDU
Subject: Re: [ADSM-L] Linux on Power Support - Available now

IBM Spectrum Protect 8.1 now supports the Linux on Power -Llittle Endian

Details here:

https://www.ibm.com/developerworks/community/blogs/869bac74-5fc2-4b94-81a2-6153890e029a/entry/Feel_the_power_IBM_Spectrum_Protect_now_supports_the_Linux_on_Power_Systems_little_endian_operating_system?lang=en



Del



- Forwarded by Del Hoobler/Endicott/IBM on 06/01/2017 01:27 PM -

Del Hoobler/Endicott/IBM wrote on 04/24/2017 02:47:21 PM:

> From: Del Hoobler/Endicott/IBM
> To: "ADSM: Dist Stor Manager" 
> Date: 04/24/2017 02:47 PM
> Subject: Re: Linux on Power Support
> 
> Hi Jonathan,
> 
> Spectrum Protect 8.1 server dropped Linux on Power - Big Endian (you 
> can still get it for Spectrum Protect 7.1 server).
> 
> Spectrum Protect 8.1 is adding support for Linux on Power - Little 
> Endian. It is targeted to be released for RHEL within the next few
months.
> 
> 
> Del
> 
> 

> "ADSM: Dist Stor Manager"  wrote on 04/24/2017
> 02:38:28 PM:
> 
> > From: Jonathan Dresang 
> > To: ADSM-L@VM.MARIST.EDU
> > Date: 04/24/2017 02:39 PM
> > Subject: Linux on Power Support
> > Sent by: "ADSM: Dist Stor Manager" 
> > 
> > Hello all,
> > 
> > Does IBM no longer support running TSM/Spectrum Protect on Linux
systems
> > running on Power with 8.1?  I went to Passport Advantage and 
> > couldn't
find
> > it there, but found 7.1.7 downloads for the server code for Linux on 
> > Power?
> > 
> > Thanks,
> > 
> > 
> > Jonathan Dresang
> > Madison Gas & Electric
> > 608-252-7296
> > 

This message and any attachment is confidential and may be privileged or 
otherwise protected from disclosure. You should immediately delete the message 
if you are not the intended recipient. If you have received this email by 
mistake please delete it from your system; you should not copy the message or 
disclose its content to anyone. 

This electronic communication may contain general financial product advice but 
should not be relied upon or construed as a recommendation of any financial 
product. The information has been prepared without taking into account your 
objectives, financial situation or needs. You should consider the Product 
Disclosure Statement relating to the financial product and consult your 
financial adviser before making a decision about whether to acquire, hold or 
dispose of a financial product. 

For further details on the financial product please go to http://www.bt.com.au 

Past performance is not a reliable indicator of future performance.


Re: Dedup rate on SAP backups

2017-06-01 Thread Marcel Anthonijsz
Hi Eric,

I find this redbook, although not for IBM SP, a nice read on best practices
for dedup: IBM ProtecTIER Implementation and Best Practices Guide,
SG24-8025-03
It is aimed at IBM ProtecTIER but a lot of these best practices are valid
for _any_ deduplication implementation:

http://www.redbooks.ibm.com/abstracts/sg248025.html?Open

Page 334 (section 20.6.9) mentions:

   - Disable multiplexing.
   - Use as many backup sessions in parallel as possible, not exceeding
   MAXNUMMP
   - Disable compression by configuring RL_COMPRESSION=NO (no-brainer!)

Let us know if this helps...



2017-05-19 16:47 GMT+02:00 Loon, Eric van (ITOPT3) - KLM <
eric-van.l...@klm.com>:

> Hi guys!
> Now that we are testing with TSM deduplication where we have always used a
> Data Domain in the past, I discovered that our SAP nodes have a very low
> dedup rate. After some Googling it looks like this has something to do with
> the random way SAP sends its data to the backup client. If backup files
> physically differ every backup run, I can imagine that this will have a
> negative impact on deduplication.
> Does anybody know if this is true and if there is a way to influence this
> behavior?
> Thanks for any help in advance and have a nice weekend!
> Kind regards,
> Eric van Loon
> Air France/KLM Storage Engineering
> 
> For information, services and offers, please visit our web site:
> http://www.klm.com. This e-mail and any attachment may contain
> confidential and privileged material intended for the addressee only. If
> you are not the addressee, you are notified that no part of the e-mail or
> any attachment may be disclosed, copied or distributed, and that any other
> action related to this e-mail or attachment is strictly prohibited, and may
> be unlawful. If you have received this e-mail by error, please notify the
> sender immediately by return e-mail, and delete this message.
>
> Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its
> employees shall not be liable for the incorrect or incomplete transmission
> of this e-mail or any attachments, nor responsible for any delay in receipt.
> Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch
> Airlines) is registered in Amstelveen, The Netherlands, with registered
> number 33014286
> 
>



--
Kind Regards, Groetje,

Marcel Anthonijsz
T: +31(0)299-776768
M:+31(0)6-53421341


Re: Linux on Power Support - Available now

2017-06-01 Thread Del Hoobler
IBM Spectrum Protect 8.1 now supports the Linux on Power -Llittle Endian

Details here:

https://www.ibm.com/developerworks/community/blogs/869bac74-5fc2-4b94-81a2-6153890e029a/entry/Feel_the_power_IBM_Spectrum_Protect_now_supports_the_Linux_on_Power_Systems_little_endian_operating_system?lang=en



Del



- Forwarded by Del Hoobler/Endicott/IBM on 06/01/2017 01:27 PM -

Del Hoobler/Endicott/IBM wrote on 04/24/2017 02:47:21 PM:

> From: Del Hoobler/Endicott/IBM
> To: "ADSM: Dist Stor Manager" 
> Date: 04/24/2017 02:47 PM
> Subject: Re: Linux on Power Support
> 
> Hi Jonathan,
> 
> Spectrum Protect 8.1 server dropped Linux on Power - Big Endian (you
> can still get it for Spectrum Protect 7.1 server).
> 
> Spectrum Protect 8.1 is adding support for Linux on Power - Little 
> Endian. It is targeted to be released for RHEL within the next few 
months.
> 
> 
> Del
> 
> 

> "ADSM: Dist Stor Manager"  wrote on 04/24/2017
> 02:38:28 PM:
> 
> > From: Jonathan Dresang 
> > To: ADSM-L@VM.MARIST.EDU
> > Date: 04/24/2017 02:39 PM
> > Subject: Linux on Power Support
> > Sent by: "ADSM: Dist Stor Manager" 
> > 
> > Hello all,
> > 
> > Does IBM no longer support running TSM/Spectrum Protect on Linux 
systems
> > running on Power with 8.1?  I went to Passport Advantage and couldn't 
find
> > it there, but found 7.1.7 downloads for the server code for Linux on
> > Power?
> > 
> > Thanks,
> > 
> > 
> > Jonathan Dresang
> > Madison Gas & Electric
> > 608-252-7296
> > 


Cloning a TSM instance

2017-06-01 Thread David Ehresman
I am running TSM 7.1.7.100 on AIX 7.1.

I have done a mksysb backup of my TSM machine and restored it to a different 
but similar machine.  I've given it new tsmdbs, tsmlog, and tsmarchlog.  When I 
try to do a dsmserv restore db or a dsmserv format, I get what appear to be db2 
errors.  Any ideas?

prodtsm@tsmrs  /home/tsm/prodtsm/tsminst1
$ time dsmserv format dbfile=dblist activelogsize=195584 
activelogdir=/tsm/tsmlog archlogdir=/tsm/tsmarchlog
ANR7800I DSMSERV generated at 10:48:06 on Feb  6 2017.

IBM Tivoli Storage Manager for AIX
Version 7, Release 1, Level 7.100

Licensed Materials - Property of IBM

(C) Copyright IBM Corporation 1990, 2016.
All rights reserved.
U.S. Government Users Restricted Rights - Use, duplication or disclosure
restricted by GSA ADP Schedule Contract with IBM Corporation.

ANR7801I Subsystem process ID is 8126484.
ANR0900I Processing options file /home/tsm/prodtsm/tsminst1/dsmserv.opt.
ANR7811I Using instance directory /home/tsm/prodtsm/tsminst1.
ANR4726I The ICC support module has been loaded.
ANR0151W Database manager fails to start. For more information about the
failure, issue the db2start command.
ANR0171I dbiconn.c(1916): Error detected on 0:1, database in evaluation mode.
ANR0169E An unexpected error has occurred and the TSM server is stopping.
ANR0162W Supplemental database diagnostic information:  -1:58031:-1031
([IBM][CLI Driver] SQL1031N  The database directory cannot be found on the
indicated file system.  SQLSTATE=58031
).

Transaction hash table contents (slots=256):
  *** no transactions found ***

Lock hash table contents (slots=3002):
Note: Enabling trace class TMTIMER will provide additional timing info on the
following locks
  *** no locks found ***


client side encryption question

2017-06-01 Thread Lee, Gary
We are being asked about encrypting our backups.

Looking at client side encryption, if they want to encrypt all contents of a 
drive under windows, is

Include.encrypt c:\...\*

The best way?

Also, what about a bare metal restore of an encrypted client?
Using encryptkey=generate

Will doing a systemstate restore first bring back the key so as to restore 
files?

Thank you all. This will get me started.