Networker

Re: [Networker] backup of nas shares...

2008-01-10 15:40:36
Subject: Re: [Networker] backup of nas shares...
From: Matthew Huff <mhuff AT OX DOT COM>
To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
Date: Thu, 10 Jan 2008 15:37:22 -0500
In order to backup via CIFS you would need to either have a user
auto-logged in the console with the drive mounted as a user with enough
permissions to backup all NFS and CIFS files or you would have to have
permanent drive assignments which have their own set of issues with
security. Either way, it has both performance and permission issues. The
security issues may have not been an issue in the old days, but with the
Sarbanes/Oxley, HIPPA , etc, having a windows share open like that is
asking for trouble.

Again, other than the cost of the NDMP license (and if you have a legato
server and a NetApp, the license cost can't be a huge issue), what's the
issue of using Legato NDMP and DSA? The performance is very good,
especially if you dedicate a VLAN for it and use jumbo frames.
 


----
Matthew Huff       | One Manhattanville Rd
OTA Management LLC | Purchase, NY 10577
www.otaotr.com     | Phone: 914-460-4039
aim: matthewbhuff  | Fax:   914-460-4139

-----Original Message-----
From: EMC NetWorker discussion [mailto:NETWORKER AT LISTSERV.TEMPLE DOT EDU] On
Behalf Of A Darren Dunham
Sent: Thursday, January 10, 2008 3:22 PM
To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
Subject: Re: [Networker] backup of nas shares...

On Thu, Jan 10, 2008 at 02:31:02PM -0500, Matthew Huff wrote:
> 1) Devices like NetApp support both NFS & Cifs. The qtrees may have
> authorization acls stored either in NFS or CIFS format, or both.
Backing
> the device up via a NFS client might cause it to loose the Windows
ACLS,
> and vice versa.

Other devices might do other things, but netapp specifically allows CIFS
backups to store and restore both CIFS and NFS permissions structures
(the NFS structure is stored in an hidden ACL entry).

This doesn't apply to NFS, which will be unable to handle the ACLs.  (At
least that was true prior to NFSv4...)

-- 
Darren Dunham                                           ddunham AT taos DOT com
Senior Technical Consultant         TAOS            http://www.taos.com/
Got some Dr Pepper?                           San Francisco, CA bay area
         < This line left intentionally blank to confuse you. >

To sign off this list, send email to listserv AT listserv.temple DOT edu and
type "signoff networker" in the body of the email. Please write to
networker-request AT listserv.temple DOT edu if you have any problems with this
list. You can access the archives at
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER

To sign off this list, send email to listserv AT listserv.temple DOT edu and 
type "signoff networker" in the body of the email. Please write to 
networker-request AT listserv.temple DOT edu if you have any problems with this 
list. You can access the archives at 
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER