Re[4]: NT backup
Hello David, DR> For what it may be worth, if your amanda server is compromised, the data DR> is lost alreadythey don't need the smb password for the file share, DR> they have access to whatever tapes are still in the drives. nope. i'm crypt all unix backup by pgp on amanda client's. so, access to backup files on amanda-servers don't give any information to intruder about other servers. exclude hostnames and partiitions name of cose :) and hope, that all do it too. -- Best regards, vladmailto:[EMAIL PROTECTED]
Re: Re[2]: NT backup
so, any addition notes for win32 backup. possibly it would be interesting for someone. there are three way to complete order. 1) amanda-win32 client http://sourceforge.net/projects/amanda-win32/ is a natie way. this soft is a port of amanda client to win32 platform. but project died(?) two yers ago in beta stage. i tryed to use it - false. any kind of problem, which i can't solve bicouse haven't enough C/C++ expereince. as fact: useless :( 2) backup windows host via smbtar. semi-native way. one trouble: we need read access from foreign host (amanda server) for all data...and password for smbtar saved as clear text... iles contain commercial information.. hmm.. if anything got amanda-servers under control - all information can be stealed... no my way. 3) third, and best solution founded: all backup created and crypted on win32 host. we don't need read-on-all access from network. so all backups secured. not native: backup initiated by third-party program, not amanda-server. we need any software like unix 'crond' (i use nncron-lite http://www.nncron.ru/), and any archivator. my choose - winrar. i don't use windows scheduler for it. don't ask why. so. crond must run under account that have read/write permisiion on all data. it's bad, but more secured than smbtar . and by weekend it run .bat file like this (for winrar) c:\progra~1\winrar\rar a -ac -idp [EMAIL PROTECTED]:\backup\excl -ow -ri7 \ -pPASSWORDFORCRYPT -r -m1 -ag -ilogl:\others.err -y \ l:\DESTINATIONFILE.rar d:\absolute d:\bill d:\work > l:\others_full.log --- we execute rar with some kind of parameters for full backup, save ntfs permisiion and clear the archive bit. archive stored in file with name contained current timestamp. and every workdays i run command like this: c:\progra~1\winrar\rar a -ac -idp [EMAIL PROTECTED]:\backup\excl -ow -ri7 \ -pPASSWORD -r -m1 -ag -ilogl:\others_diff.err -y -ao \ l:\DESTINATIONFILE.rar d:\techdocs d:\whiteboard d:\work > l:\others_diff.log --- similar previous, but backing-up only files with archive-bit set. so we have full backup, and daily differents in timestamped files. disk l: in my configuration, is a nfs-mounted partition from amanda-server. you can install samba on amanda-server and store files to it, or just drop files to local disk, and later retreive it by smbtar utility from amanda - as your wish. so, if you need restore files from archive: just extract archive from tape, send it to windows host and unrar it. manual - but strong stable :) -- Best regards, vlad mailto:[EMAIL PROTECTED]
Re[2]: NT backup
hmm.. time to time i think, that better way to backup windows host with amanda is a 'cron' on win32, that running archivator and completely backup data via nfs to unix server. amanda has'nt problem with backup it :) i use it way, and it work fine. -- Best regards, vladmailto:[EMAIL PROTECTED]
log files lost
hello everyone. by different reason's log files of amanda war deleted. i want to manual recover it from tape (amrecover do not working, Warning: no log files found for tape serversXX for all tapes ), but i cannot. [EMAIL PROTECTED] # echo $TAPE /dev/rmt/0bn [EMAIL PROTECTED] # tar tv tar: tape read error [EMAIL PROTECTED] # tar tvf /dev/rmt/0bn tar: tape read error [EMAIL PROTECTED] # mt status HP DDS-3 4MM DAT tape drive: sense key(0x0)= No Additional Sense residual= 0 retries= 0 file no= 0 block no= 0 for any tape, which i tried to insert.. i am sure, that tape was writtent succesful and time to time i did ercovery operation from tape with no problem. vlad.
tape changer problem
hello again. i have amanda server 2.4.4 installed on sparc solaris 8 with one hp dds3 tape drive. i got error yestarday after nightly backup that amanda cannot dump data to tape caused by following debug information: changer.debug MT -> /usr/local/sbin/ammt -f DD -> /usr/local/sbin/amdd Args -> -info -> rewind /dev/rmt/0bn -> status /dev/rmt/0bn /dev/rmt/0bn status: ONLINE er == 0x fileno == 0 blkno == 0 -> loaded Exit -> 99 1 tape rewinded notrmaly, but 'exit 99 1' looks like that last slot used by chg-manual in previosly backup, and slot not rotated to first again. amlabel.debug contain next strings: changer: got exit: 1 str: /usr/local/libexec/chg-manual: test: argument expected amlabel: could not load slot "current": test: argument expected amlabel: pid 10575 finish time Thu Oct 2 12:58:09 [EMAIL PROTECTED] in chg-manual script last available slot is 99. i may to increase this variable, and think this will be enough, but i not sure that right way. any ideas? vlad.
crypting data
hello everyone. i want to crypt all backed-up data with assimetric algorithms such as pgp (gnupg) before it send to backup host, is any solution for this now? anything about patched tar or anything else? just if anybody crack the backup server, it has all data from all servers, this is not good. i crypting some most sensitivy data manualy, but may be any native solution existing for it? vlad.
Re[2]: amrecover question
yeah :) you absolutly right :) yestarday dump is success. -- 200 Disk set to /export/home/local. amrecover> ls 2003-08-09 . 2003-08-09 afbackup/ 2003-08-09 amanda/ 2003-08-09 apache 2003-08-09 back/ 2003-08-09 bin/ 2003-08-09 doc/ 2003-08-09 etc/ 2003-08-09 include/ 2003-08-09 info/ 2003-08-09 lib 2003-08-09 libexec/ 2003-08-09 man/ 2003-08-09 nagios/ 2003-08-09 netflow/ 2003-08-09 resin/ 2003-08-09 rrdtool 2003-08-09 rrdtool-1.0.37/ 2003-08-09 samba/ 2003-08-09 sbin/ 2003-08-09 share/ 2003-08-09 ssl/ --- thank you very match for advice :) vlad.
Re: amrecover question
> Does /export/home/local on 'exper' use dump or gtar to do the backup? gtar > If the latter, is it a known, amanda compatible, version (1.13.19 or > 1.13.25). Find out with the --version option. version is 1.13 with no subversion.. i try to install latest version. vlad.
amrecover question
hello. i have installed amanda 2.4.4 on sparc system, under solaris8. today, i try to restore dump monthly old. oops :) i found full dump by amadmin find directive: 2003-07-05 exper /export/home/local 0 servers08 28 OK 2003-07-09 exper /export/home/local 1 servers09 13 OK (exper is a amanda-server too) so, a'm run amrecover by 'amrecover cfgname -s host -t host' after that setdate 2003-07-05, sethost exper, setdisk /export/home/local and type the 'ls' command that return one line: - mrecover> ls 2003-07-05 nagios/ - but directory really contain a lot of subdirs! a'm restore the file 28 from tape by amrestore program, and file have the normal size (about 400mb) and contain full dump of selected partioton. after that, i set date by different full dump: --- mrecover> setdate 2003-07-12 200 Working date set to 2003-07-12. amrecover> ls 2003-07-12 nagios/ amrecover> setdate 2003-07-19 200 Working date set to 2003-07-19. amrecover> ls 2003-07-19 nagios/ --- every directory contain one file in one path... by choosing other host that backed-up i have no problem, only for amanda masterhost... can anybody help to solve the trouble? vlad.
tape rotation
hello everyone. i have a strange trouble with amanda. amanda config looks like this: dumpcycle 1 weeks runspercycle 2 tapecycle 11 tapes so, i run amdump every thersday and saturday (two in weeks) and now has a tapelist like this: 20030531 servers09 reuse 20030528 servers08 reuse 20030524 servers07 reuse 20030521 servers06 reuse 20030517 servers05 reuse 20030514 servers04 reuse 20030510 servers03 reuse 20030508 servers99 no-reuse 20030507 servers02 reuse 20030503 servers01 reuse 20030430 servers00 reuse total 11 tapes. but amcheck do not want to overwrite old tape and need new. but (FAQ) 11 > 11-1 tapes...and amanda must allow to overwrite? vlad.
