UNSOLVED
Backing up CIFS shares without NDMP
Hi All
We have NS20 installed and we currently have two CIFS servers working and belong to two different windows domain (no trust between). Share folders are shared through individual cifs server to its respective domains. Each CIFS server is assigned with two interfaces, one connects to its domain and other connects to our backup network (All VLAN network). Backup network is separate non routable network and has its own ip range.
Till now we have been backing up data through second interface and we didn¿t have any problem. Now we upgraded celerra code to new version (v5.6) and celerra start to complain with following message but we are also not sure if it is because of new version though.
DNS update ERROR: Operation refused for policy or security reasons while registering cifs.internal.test
last message repeated 2 times
DNS update ERROR: No response from server while registering cifs.internal.test
DNS update ERROR: Operation refused for policy or security reasons while registering cifs.internal.test
last message repeated 2 times
DNS update ERROR: No response from server while registering cifs.internal.test
DNS update ERROR: Operation refused for policy or security reasons while registering cifs.internal.test
With the help of emc support We found out that cifs servers are trying to register all NICs to DNS server, primary nic get registered ok but the second nic is causing these problems. If we remove second nic from cifs servers error goes away.
We are trying to redesign backup process all over again without using NDMP. We are currently trying to see if we can make one stand alone CIFS server and give this cifs server read only access to all shares and use this cifs server to backup all data.
Now we are facing few problems specially permission assigning to cifs share and managing through windows MMC.
We were wondering any one of you have already done this and could share your experience on how we can do this without using NDMP and still keeping backup traffic separate from other network traffic or even better if you have better idea.
Thanking you in advance and appreciating your time.
We have NS20 installed and we currently have two CIFS servers working and belong to two different windows domain (no trust between). Share folders are shared through individual cifs server to its respective domains. Each CIFS server is assigned with two interfaces, one connects to its domain and other connects to our backup network (All VLAN network). Backup network is separate non routable network and has its own ip range.
Till now we have been backing up data through second interface and we didn¿t have any problem. Now we upgraded celerra code to new version (v5.6) and celerra start to complain with following message but we are also not sure if it is because of new version though.
DNS update ERROR: Operation refused for policy or security reasons while registering cifs.internal.test
last message repeated 2 times
DNS update ERROR: No response from server while registering cifs.internal.test
DNS update ERROR: Operation refused for policy or security reasons while registering cifs.internal.test
last message repeated 2 times
DNS update ERROR: No response from server while registering cifs.internal.test
DNS update ERROR: Operation refused for policy or security reasons while registering cifs.internal.test
With the help of emc support We found out that cifs servers are trying to register all NICs to DNS server, primary nic get registered ok but the second nic is causing these problems. If we remove second nic from cifs servers error goes away.
We are trying to redesign backup process all over again without using NDMP. We are currently trying to see if we can make one stand alone CIFS server and give this cifs server read only access to all shares and use this cifs server to backup all data.
Now we are facing few problems specially permission assigning to cifs share and managing through windows MMC.
We were wondering any one of you have already done this and could share your experience on how we can do this without using NDMP and still keeping backup traffic separate from other network traffic or even better if you have better idea.
Thanking you in advance and appreciating your time.
- Thank you all for your time and suggestion
yes we have been suggested by EMC support that we can disable DNS update and they also told us there is no granular control.
Reason we are investigating alternative way of doing this is that we were not sure about the indirect implication we might have(by disabling DNS update). we know we can update our DNS manually and update records but we were worried if there is other hidden requirement that DNS update need to be running.
now the error message we are getting is posted on here so if there is no hidden issues that we might just disable DNS update.
having said that if there is other better way of backing up data without using NDMP and any one can suggest will be greatly appreciated.
Thank you Rainer_EMC
6 Operator
•
8645 Posts
767
0
Posted October 15th, 2008 15:00
Personally I would take a good look at the DNS server first to figure out why the DNS updates are failing.
Reason being that dynamic DNS updates are quite usefull - they reduce the possibility of mistake on a manual entry or forgetting them when creating a new CIFS server
The only other downside when disabling DDNS (that I can think of) is that if you ever were to add VDMs and replication
we use DDNS updates on a VDM failover so that the system taking over registers its CIFS server using its new address.
without DDNS you would have to do change that manually
What do you mean in terms of better backup ?
simpler? faster?- Hi Rainer
Thank you for your reply
Support and we have spent few days looking on to the cause of DNS update error.
we are not quite sure which part of DNS should we be checking or having a good look on to it.
we checked all DNS entry and support checked all Celerra site. now if we remove second interface from CIFS server lots of those errors are not there. one of support engineer and we thought that its second interface that is causing this because of it is being on non routable vlan(with different ip range) and our DNS server doesn't know how to get there. As per my previous post we would like to keep this network purely for backup and non routable to other network as long as possible.
in terms of better backup, yes you are right we meant by simpler, faster back design/strategy.
Thank you Hi Ral,
We're trying to configure Netbackup to backup the CIFS shares on a NS480 without using NDMP. We're unable to successfully connect to the CIFS via netbackup but are able to connect to it using the backup operator service account through UNC mapping. If you have any documentation that would be great.
thanks!
Rainer_EMC
6 Operator
•
8645 Posts
767
0
Posted January 27th, 2010 14:00
welcome to the forum
what *exactly* doesnt work ?
Were you able to find a way to backup the CIFS shares without NDMP?
We are using Netbackup 6.5.4 but are unsuccessful in configuring the backup.
Tried adding the Windows domain backup operator to the Celerra backup operator group as well as creating a local backup operator, still no luck.
Peter_EMC
674 Posts
766
0
Posted October 14th, 2008 23:00
$ server_param server_x -facility dns -modify updateMode -value 0 # will do this
Then the datamover does no longer update DNS automatically, and you have to take care for DNS changes/updates manually.