Full MS ADAM LDAP backup using ldifde

 3 Replies
 0 Subscribed to this topic
 27 Subscribed to this forum
Sort:
Author
Messages
shea851
New Member
Posts: 4
New Member
    Hi,

    We currently have our LDAP backed up regularly via Windows Server Backup, which works fine.  However, we would also like to keep backups in a human readable form such as dumping to ldifs.

    When I browse the local Lawson LDAP server with JXplorer I can see three naming contexts for Configuration, Schema, Data.  I'm able to dump all three of these to separate .ldif files.

    Is there anything else that needs to be dumped as well to ldif?  Or are these three files sufficient to COMPLETELY recover (or rebuild from scratch) if our LDAP is just blown to pieces one day (but everything else is in tact)?

    Thank you.
    Jimmy Chiu
    Veteran Member
    Posts: 641
    Veteran Member
      ADLDS Backup and Restore Step-by-Step Guide

      http://technet.microsoft....725665(v=ws.10).aspx

      Dumping the 3 files you mentioned will not let you completely recover ADLDS. (Speaking from someone who had his ADLDS blown to pieces)
       
      shea851
      New Member
      Posts: 4
      New Member
        Unfortunately Microsoft's way of doing this is not in human-readable form.  What if one day our backups still run successfully but spit out corrupt files of similar file size, how would we ever know? We like to have backup's for our backups, if that makes sense.

        Is there anyone out there that has successfully recovered their LDAP from only .ldif's?  Could you point me in the right direction?

        Thank you.
        Jimmy Chiu
        Veteran Member
        Posts: 641
        Veteran Member
          https://www.lawsonguru.co...e-adlds-to-new-ldap/

          Using your own windows backup, restore it to a test machine that's offline and you can do human-eye check to your content. I don't see the reason why a backup file must be human readable, last i checked, my databases backup are not human readable also.

          The link in my original post has 2 ways to backup ldap, dsdbutil takes seconds to backup the full ldap, with alittle clever script, you can keep weeks worth of backup catalog with little storage need.

          Using John's method in the link above, you can quickly verify rather or not the backup is functional faster than your human-eye check.