Unsolved
This post is more than 5 years old
42 Posts
0
1653
Backing up CIFS shares without NDMP
Hi All
We have NS20 installed and we currently have two CIFS servers working and belong to two different windows domain (no trust between). Share folders are shared through individual cifs server to its respective domains. Each CIFS server is assigned with two interfaces, one connects to its domain and other connects to our backup network (All VLAN network). Backup network is separate non routable network and has its own ip range.
Till now we have been backing up data through second interface and we didn¿t have any problem. Now we upgraded celerra code to new version (v5.6) and celerra start to complain with following message but we are also not sure if it is because of new version though.
DNS update ERROR: Operation refused for policy or security reasons while registering cifs.internal.test
last message repeated 2 times
DNS update ERROR: No response from server while registering cifs.internal.test
DNS update ERROR: Operation refused for policy or security reasons while registering cifs.internal.test
last message repeated 2 times
DNS update ERROR: No response from server while registering cifs.internal.test
DNS update ERROR: Operation refused for policy or security reasons while registering cifs.internal.test
With the help of emc support We found out that cifs servers are trying to register all NICs to DNS server, primary nic get registered ok but the second nic is causing these problems. If we remove second nic from cifs servers error goes away.
We are trying to redesign backup process all over again without using NDMP. We are currently trying to see if we can make one stand alone CIFS server and give this cifs server read only access to all shares and use this cifs server to backup all data.
Now we are facing few problems specially permission assigning to cifs share and managing through windows MMC.
We were wondering any one of you have already done this and could share your experience on how we can do this without using NDMP and still keeping backup traffic separate from other network traffic or even better if you have better idea.
Thanking you in advance and appreciating your time.
We have NS20 installed and we currently have two CIFS servers working and belong to two different windows domain (no trust between). Share folders are shared through individual cifs server to its respective domains. Each CIFS server is assigned with two interfaces, one connects to its domain and other connects to our backup network (All VLAN network). Backup network is separate non routable network and has its own ip range.
Till now we have been backing up data through second interface and we didn¿t have any problem. Now we upgraded celerra code to new version (v5.6) and celerra start to complain with following message but we are also not sure if it is because of new version though.
DNS update ERROR: Operation refused for policy or security reasons while registering cifs.internal.test
last message repeated 2 times
DNS update ERROR: No response from server while registering cifs.internal.test
DNS update ERROR: Operation refused for policy or security reasons while registering cifs.internal.test
last message repeated 2 times
DNS update ERROR: No response from server while registering cifs.internal.test
DNS update ERROR: Operation refused for policy or security reasons while registering cifs.internal.test
With the help of emc support We found out that cifs servers are trying to register all NICs to DNS server, primary nic get registered ok but the second nic is causing these problems. If we remove second nic from cifs servers error goes away.
We are trying to redesign backup process all over again without using NDMP. We are currently trying to see if we can make one stand alone CIFS server and give this cifs server read only access to all shares and use this cifs server to backup all data.
Now we are facing few problems specially permission assigning to cifs share and managing through windows MMC.
We were wondering any one of you have already done this and could share your experience on how we can do this without using NDMP and still keeping backup traffic separate from other network traffic or even better if you have better idea.
Thanking you in advance and appreciating your time.
Peter_EMC
674 Posts
0
October 14th, 2008 23:00
$ server_param server_x -facility dns -modify updateMode -value 0 # will do this
Then the datamover does no longer update DNS automatically, and you have to take care for DNS changes/updates manually.
dynamox
2 Intern
2 Intern
•
20.4K Posts
0
October 15th, 2008 03:00
can this be done at a more granular level ..disable DNS update only for particular VDM or CIFS server ?
Peter_EMC
674 Posts
0
October 15th, 2008 05:00
short answer: no,
the parameters are per DM only, there is not any of the (server_param) parameter per VDM or CIFS server
Sorry
dynamox
2 Intern
2 Intern
•
20.4K Posts
0
October 15th, 2008 07:00
agurung
42 Posts
0
October 15th, 2008 15:00
yes we have been suggested by EMC support that we can disable DNS update and they also told us there is no granular control.
Reason we are investigating alternative way of doing this is that we were not sure about the indirect implication we might have(by disabling DNS update). we know we can update our DNS manually and update records but we were worried if there is other hidden requirement that DNS update need to be running.
now the error message we are getting is posted on here so if there is no hidden issues that we might just disable DNS update.
having said that if there is other better way of backing up data without using NDMP and any one can suggest will be greatly appreciated.
Thank you
Rainer_EMC
8.6K Posts
0
October 15th, 2008 15:00
Reason being that dynamic DNS updates are quite usefull - they reduce the possibility of mistake on a manual entry or forgetting them when creating a new CIFS server
The only other downside when disabling DDNS (that I can think of) is that if you ever were to add VDMs and replication
we use DDNS updates on a VDM failover so that the system taking over registers its CIFS server using its new address.
without DDNS you would have to do change that manually
What do you mean in terms of better backup ?
simpler? faster?
agurung
42 Posts
0
October 15th, 2008 20:00
Thank you for your reply
Support and we have spent few days looking on to the cause of DNS update error.
we are not quite sure which part of DNS should we be checking or having a good look on to it.
we checked all DNS entry and support checked all Celerra site. now if we remove second interface from CIFS server lots of those errors are not there. one of support engineer and we thought that its second interface that is causing this because of it is being on non routable vlan(with different ip range) and our DNS server doesn't know how to get there. As per my previous post we would like to keep this network purely for backup and non routable to other network as long as possible.
in terms of better backup, yes you are right we meant by simpler, faster back design/strategy.
Thank you
Knhax
4 Posts
0
January 27th, 2010 14:00
Hi Ral,
We're trying to configure Netbackup to backup the CIFS shares on a NS480 without using NDMP. We're unable to successfully connect to the CIFS via netbackup but are able to connect to it using the backup operator service account through UNC mapping. If you have any documentation that would be great.
thanks!
Rainer_EMC
8.6K Posts
0
January 27th, 2010 14:00
welcome to the forum
what *exactly* doesnt work ?
Knhax
4 Posts
0
January 27th, 2010 14:00
Were you able to find a way to backup the CIFS shares without NDMP?
We are using Netbackup 6.5.4 but are unsuccessful in configuring the backup.
Tried adding the Windows domain backup operator to the Celerra backup operator group as well as creating a local backup operator, still no luck.
ral67_xyz
147 Posts
0
January 27th, 2010 16:00
I think your Netbackup Client Service needs to run as a domain account that also is part of the backup operators group of the Celerra
similar to whats described here http://seer.entsupport.symantec.com/docs/304383.htm
Rainer
Knhax
4 Posts
0
January 27th, 2010 16:00
Hi Rainer,
I just tested it again without checking "Follow NFS" and that worked as well. Good point on the Windows permissions
Knhax
4 Posts
0
January 27th, 2010 16:00
Hi Rainer,
Stumbled on a way to backup the CIFS using Netbackup.
The config would be like this.
Mount the CIFS share on the Netbackup Media Server
In the Netbackup backup policy set the following:
Standard Policy Type
check the "Follow NFS"
The client would be the Netbackup Media Server itself
the backup selection would be the \\CIFS-server\Share
thanks for the help.
ral67_xyz
147 Posts
0
January 27th, 2010 16:00
Is your Netbackup Media Server actually a Unix server ?
If yes then you should be aware that by backing up over NFS you wont be able to backup CIFS attributes - like owner, ACLs, alternate data streams ...
Rainer