Postby florian » Sat Dec 17, 2005 3:09 pm
well, you're not really vulnerable. The ISS is needed when you want to be able to do Single User Restore from a full online backup. Otherwise it is ok to leave it turned off.
This is a small cookbook on how to proceed with SUR, in case someone needs it. more information can be found in the ISS, ISDB and SUR Scalix Technote available in the Knowledgebase.
1. Make sure ISS is running
omon iss
omsetsvc -a iss Y
2. Create initial Database "0"
omscan -aA -l /tmp/scanlog
omupdtis -I -l /tmp/scanlog
omscan -t
Last omscan tool run on 10.10.05 at 09:29:12; duration 21 minute(s).
omupdtis -r -f 10.10.05 -F 09:29:12
3. Create Backup
Do Snapshot, record time of snapshot, e.g. 10.10.05 10:30:20
Do Backup from Snapshot using Backup tool
4. If needed, perform Single User Restore
a) Create copy of Database "0"
cd /var/opt/scalix/is
cp -a 0 1
Note: replace "1" with any unused number
b) Apply log records to copy until time of backup run
omupdtis -d 1 -t 10.10.05 -T 10:30:20
Note: -d must be the same as number of copy of database from Step a)
-t and -T must have exact date and time of snapshot
c) Generate list of needed files
omprepsur -n "Mr User/scalix,demo" -d /tmp/workdir -f /tmp/filelist.txt
-i 1 -t 10.10.05 -T 10:30:20
Note: This is user specific, so name is name of user to be restored
Again, -i must specify database number assigned from step 1
Again, -t and -T must have exact date and time of snapshot
-d must be a non-existing or empty directory
-f must be a non-existing new filename
d) Retrieve all files listed in /tmp/filelist.txt and restore them under /tmp/workdir
Note: How to do this is specific to the backup tool used.
e) Verify all files have been retrieved
omprepsur -n "Mr User/scalix,demo" -d /tmp/workdir -f /tmp/filelist2.txt
-i 1 -t 10.10.05 -T 10:30:20
Note: -f has a new filelist filename
Check in filelist2.txt that all entries are either state O or state P, no longer
state N or state ?
f) Create an import file from directory tree
omdosur -n "Mr User/scalix,demo" -d /tmp/workdir -f /tmp/MrUser.store
-i 1 -t 10.10.05 -T 10:30:20
g) /tmp/MrUser.store will contain a omcpoutu/omcpinu-type file that contains the
mailbox of the user at the time of the backup. this can be imported into a shadow
account as for the import part of the omcpinu/omcpoutu cookbook.
5. Importing to a Shadow Account:
a) Check out Naming attributes
omshowu -n "Mr User/scalix,demo"
...
User Name : Mr User/CN=Mr User
MailNode : scalix,demo
...
b) Create temporary restore mailnode and user
omaddmn -m restore
omaddu -n "Mr User/restore/CN=Mr UserIA=xxx@xxx.com" -x -p scalix
Notes:
(1) First and Last Name MUST be the same
(2) Mailnode MUST NOT be the same
(3) CN and CN-TX MUST be the same
(4) IA MUST NOT be the same and does not matter if it's a valid address
(5) -x means to prevent user from being added to addressbook, -p sets temporary password
c) Import dump file into temporary account
omcpinu -f /tmp/MrUser.store -m restore
Note: DON'T forget to specify temporary mailnode using -m, otherwise data will
be imported into original mailbox, resulting in duplicate messages !!!!
6. Create a profile for Shadow Account in Outlook or Thunderbird and copy over needed messages.
7. Delete temporary shadow account and mailnode
omdelu -n "Mr User/restore"
omdelmn -m restore
Florian von Kurnatowski, Die Harder!