• Search Forums
    Advanced Search Topics Posts
Prev
Next
Forums Infor / Lawson Platforms S3 Systems Administration

Full MS ADAM LDAP backup using ldifde

 3 Replies
 0 Subscribed to this topic
 27 Subscribed to this forum
Sort:
Author
Messages
shea851
New Member
Posts: 4
New Member
2/1/2013 6:53 PM
Hi,

We currently have our LDAP backed up regularly via Windows Server Backup, which works fine.  However, we would also like to keep backups in a human readable form such as dumping to ldifs.

When I browse the local Lawson LDAP server with JXplorer I can see three naming contexts for Configuration, Schema, Data.  I'm able to dump all three of these to separate .ldif files.

Is there anything else that needs to be dumped as well to ldif?  Or are these three files sufficient to COMPLETELY recover (or rebuild from scratch) if our LDAP is just blown to pieces one day (but everything else is in tact)?

Thank you.
Jimmy Chiu
Veteran Member
Posts: 641
Veteran Member
2/4/2013 1:57 PM
ADLDS Backup and Restore Step-by-Step Guide

http://technet.microsoft....725665(v=ws.10).aspx

Dumping the 3 files you mentioned will not let you completely recover ADLDS. (Speaking from someone who had his ADLDS blown to pieces)
 
shea851
New Member
Posts: 4
New Member
2/6/2013 4:16 PM
Unfortunately Microsoft's way of doing this is not in human-readable form.  What if one day our backups still run successfully but spit out corrupt files of similar file size, how would we ever know? We like to have backup's for our backups, if that makes sense.

Is there anyone out there that has successfully recovered their LDAP from only .ldif's?  Could you point me in the right direction?

Thank you.
Jimmy Chiu
Veteran Member
Posts: 641
Veteran Member
2/7/2013 1:24 PM
https://www.lawsonguru.co...e-adlds-to-new-ldap/

Using your own windows backup, restore it to a test machine that's offline and you can do human-eye check to your content. I don't see the reason why a backup file must be human readable, last i checked, my databases backup are not human readable also.

The link in my original post has 2 ways to backup ldap, dsdbutil takes seconds to backup the full ldap, with alittle clever script, you can keep weeks worth of backup catalog with little storage need.

Using John's method in the link above, you can quickly verify rather or not the backup is functional faster than your human-eye check.