ADSM-L

Re: Problems with encrypted backup

2004-04-21 11:39:37
Subject: Re: Problems with encrypted backup
From: Joe Crnjanski <JCrnjanski AT INFINITYNETWORK DOT COM>
To: ADSM-L AT VM.MARIST DOT EDU
Date: Wed, 21 Apr 2004 11:38:28 -0400
Hi Brian,

I think that include.encrypt only tells tsm client to encrypt certain files; 
but not to backup.
So I think that beside include.encrypt you still need include statement.

In your dsm.opt sample in first try you just have include.encrypt and than 
exclude on the top of the file, so nothing gets backed up.

In second dsm.opt you replaced include.encrypt with include, so everything 
(selected folders) was backed up , but not encrypted.

Just try to put something like:

include  c:\folder\...\*
include.encrypt c:\folder\...\*

and I'm almost sure it will work; and files will be encrypted.

Let me know


Joe Crnjanski
Infinity Network Solutions Inc.
Phone: 416-235-0931 x26
Fax:     416-235-0265
Web:  www.infinitynetwork.com



-----Original Message-----
From: Brian Ipsen [mailto:bin AT PROGRESSIVE DOT DK]
Sent: Wednesday, April 21, 2004 11:22 AM
To: ADSM-L AT VM.MARIST DOT EDU
Subject: Re: Problems with encrypted backup


Hi,

 The filespace was empty in both situations - that's why I find it confusing. I 
can try to do it on another node (tomorrow), and then enable some logging in 
the dsmc client - to see what exactly is going on....

/Brian


-----Original Message-----
From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU]On Behalf Of
David E Ehresman
Sent: 21. april 2004 17:19
To: ADSM-L AT VM.MARIST DOT EDU
Subject: Re: Problems with encrypted backup


Did you delete the filespace before doing the FIRST incremental?  It
looks like you were doing an incremental incremental there and not a
full backup like you were doing in your second run.

David

>>> bin AT PROGRESSIVE DOT DK 4/21/2004 11:10:34 AM >>>
>>> What is going wrong ??

> Nothing that I can see off-hand. While you've indicated what you've
done
> and provided output, there is nothing obvious that stands out as a
problem
> (i.e. no error messages, etc.).

> It would help if you can be more specific about what you find
troubling.

The problem is when the encryption on, the amount of data should be the
same
as when it runs without encryption - or have I misunderstood something
?

If I make a backup of a node without encryption, and it sends e.g. 20
GB of data - the the amount ought to be the same, if I delete all data
on the TSM server, and then tries to do the exact same backup with
encryption enabled (of course remembering to change the client dsm.opt
file and restart the dsmc application)

Regards,

Brian


---


Brian Ipsen <bin AT PROGRESSIVE DOT DK>
Sent by: "ADSM: Dist Stor Manager" <ADSM-L AT VM.MARIST DOT EDU>
04/21/2004 07:04
Please respond to
"ADSM: Dist Stor Manager"


To
ADSM-L AT VM.MARIST DOT EDU
cc

Subject
Problems with encrypted backup






Hi,

I've tried to solve this issue before without luck. I'm trying to make
a
backup with encryption on a new node/client. The node is registered on
the
server, and the first login from the node (using dsmc and a simple
dsm.opt
file only specifying the nodename, passwordgenerate and the server)
has
been made (where it asks for nodename and password). Then I quit dsmc
again.

My first backup dsm.opt file (with encryption)

NODENAME TSM-MYTEST1
PASSWORDACCESS GENERATE
TCPSERVERADDRESS 172.16.7.136
DOMAIN D:
schedlogretention 15
DateFormat 2
COMPRESSION ON
Encryptkey Save
EXCLUDE *
EXCLUDE.DIR "D:\BilledArkiv\Network Trash Folder\...\*"
EXCLUDE.DIR "D:\BilledArkiv\TheFindByContentFolder\...\*"
EXCLUDE.DIR "D:\BilledArkiv\ThevolumeSettingsFolder\...\*"
EXCLUDE.DIR "D:\BilledArkiv\Temporary Items\...\*"
INCLUDE.Encrypt "D:\BilledArkiv\...\*"
INCLUDE.Encrypt "D:\Bogholder\...\*"

I assume, that I have to set EncryptKey to SAVE - otherwise the
scheduler
won't be able to make backups.
A backup using these options and running "dsmc i" gives this result:

Total number of objects inspected: 149,290
Total number of objects backed up: 25,189
Total number of objects updated: 0
Total number of objects rebound: 0
Total number of objects deleted: 0
Total number of objects expired: 0
Total number of objects failed: 0
Total number of bytes transferred: 8.40 MB
Data transfer time: 0.49 sec
Network data transfer rate: 17,247.31 KB/sec
Aggregate data transfer rate: 21.27 KB/sec
Objects compressed by: 0%
Elapsed processing time: 00:06:44

If I then change dsm.opt to the options below (thereby removing
encryption):

NODENAME TSM-MYTEST1
PASSWORDACCESS GENERATE
TCPSERVERADDRESS 172.16.7.136
DOMAIN D:
schedlogretention 15
DateFormat 2
COMPRESSION ON
EXCLUDE *
EXCLUDE.DIR "D:\BilledArkiv\Network Trash Folder\...\*"
EXCLUDE.DIR "D:\BilledArkiv\TheFindByContentFolder\...\*"
EXCLUDE.DIR "D:\BilledArkiv\ThevolumeSettingsFolder\...\*"
EXCLUDE.DIR "D:\BilledArkiv\Temporary Items\...\*"
INCLUDE "D:\BilledArkiv\...\*"
INCLUDE "D:\Bogholder\...\*"

And delete the old data in my TSM Server (using "del filespace") - and
then makes a new backup using "dsmc i" - the the result is:

Total number of objects inspected: 149,290
Total number of objects backed up: 144,088
Total number of objects updated: 0
Total number of objects rebound: 0
Total number of objects deleted: 0
Total number of objects expired: 0
Total number of objects failed: 0
Total number of bytes transferred: 87.28 GB
Data transfer time: 1,394.87 sec
Network data transfer rate: 65,618.49 KB/sec
Aggregate data transfer rate: 5,848.74 KB/sec
Objects compressed by: 11%
Elapsed processing time: 04:20:49

What is going wrong ?? The TSM server is running 5.2.2.3, and the
client
is 5.2.0.6 ...

Regards,

/Brian

<Prev in Thread] Current Thread [Next in Thread>