Novell EDIRECTORY 8.8 SP3, Administration Manual, Page: 424 / 634

424 Novell eDirectory 8.8 Administration Guide
n
ov
do
cx (e
n)
11
Ju
ly 20
08
Š
Restrict access to where the roll-forward logs are kept, so that unauthorized users cannot
see them.
Š If a restore is necessary, make sure you re-create the roll-forward log configuration on the
server after the restore is complete. The settings are reset to the default during a restore.
After turning on the roll-forward logs, you must also do a new full backup.
‰ If you use NICI, ensure that your eDirectory backups include NICI security files.
Otherwise, you will not be able to restore the encryption keys, and you won't be able to read
encrypted data. For more information about NICI security, see the
NICI Administration Guide
(http://www.novell.com/documentation/nici27x/index.html) and the TID on backing up NICI
files (http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098087.htm) .
‰
For multiple-server trees, if you are using the Backup eMTool to back up a server, you should
upgrade all the servers that share replicas with it to eDirectory 8.5 or later.
The restore verification process is backward compatible only with 8.5 or later. For more
information about the restore verification, see
“Overview of How the Backup eMTool Does a
Restore” on page 428 and “Restore Verification Is Backward Compatible Only with eDirectory
8.5 or Later” on page 436 .
‰
(NetWare
®
only) Review the issues with file system rights in “Preserving Rights When
Restoring File System Data on NetWare” on page 436 . Test for potential problems and take
preventive action if necessary.
‰
Periodically check the backup log file to make sure that unattended backups were successful.
‰
Do a cold backup before upgrading a server, as described in Section 18.9, “Upgrading
Hardware or Replacing a Server,” on page 569 .
‰ For multiple-server trees, ensure that all eDirectory partitions are replicated on more than one
server, for fault tolerance.
In addition to making objects available when a server is down, such as during maintenance,
replicating your partitions also provides fault tolerance in a case where you lose a server, such
as a hardware failure. If a server in a multiple-server tree holds a partition that is not replicated,
and the server has a failure, there's a risk that you might not be able to recover the partition. It's
best to make sure all partitions are replicated. For more information on why you might not be
able to recover an unreplicated partition in a multiple-server tree, see
“Overview of How the
Backup eMTool Does a Restore” on page 428 , Section 16.3, “Using Roll-Forward Logs,” on
page 437 , and Section 16.9, “Recovering the Database If Restore Verification Fails,” on
page 477 .
For information on replication, see Section 1.6, “Replicas,” on page 55 and Chapter 5,
“Managing Partitions and Replicas,” on page 133 .
‰ Ensure that the backup tapes containing the eDirectory and file system backups are in a safe
location.
‰
Regularly test your backup strategy to make sure it meets your goals.
‰
(Optional) If you plan to access servers remotely to do cold backups (a full backup with the
database closed) or to do advanced backup and restore tasks, install the eMBox Client on the
machine you plan to use. Also, arrange for access (such as VPN access) behind the firewall.
iManager lets you do backup and restore tasks remotely, outside the firewall, but it does not
support cold backup and advanced tasks.
The eMBox Client is installed with eDirectory on the server, and you can also use it on
workstations with Sun JVM 1.3.1. For information on installing and configuring the eMBox
Client, see
Section 20.1, “Using the eMBox Command Line Client,” on page 588 .