Unsolved
This post is more than 5 years old
28 Posts
0
1202
March 5th, 2009 00:00
HowTo-Networker DSA Backup of SnapImage
INSTALLATION AND SETUP OF SNAPIMAGE 2.0.2 FOR DSA BACKUP TO NETWORKER SERVER
A personal experience by
John Gowing
Capetown South Africa
johng@channeldata.co.za
Applies to Networker 7.2 and Up which support DSA Backups
This is based upon
Networker 7.4SP3 Server & Client
SnapImage & NDMP Services 2..0.2
RELEVANT DOCUMENTATON
Networker Admin Guide - Section on NDMP Backup & DSA
WhitePaper-EMC Networker & NDMP-Best Practices & Planning
SnapImage 202 Install & Admin Guide (2008)
SnapImage 202 Release notes (2008)
Networker Command Ref Manual
NDMP Tape Server seems to have no Documentation itself
INTRODUCTION
The SnapImage documentation makes no provision for DSA backups, and makes the assumption that backup will be to an NDMP Tape Server Mounted, dedicated, NDMP device
If your intention is to use the DSA backup facility supported in Networker 7.2 and later, then the Snapimage documentation is incomplete, confusing and misleading.
I have initiated an RFE with EMC to have this corrected.
The following information covers basic installation and initial setup to get a SnapImage backup running to a standard Networker backup device using DSA Backup.
INSTALLATION OF SNAP IMAGE ON THE CLIENT
1. Run NDMP Services Setup
NDMP Services MUST be installed BEFORE SnapImage
You will get an error during SnapImage installation if NDMPSvc is not installed
Environment Variable NDMPHOME is created =Path to the NDMPSvc directory
NDMP Tape Services does NOT require to be licensed for DSA Backups
2. Run SnapImageI Setup
You should see a shortcut to Snap Image Administrator in Start\Programs
3. Passwords and Security
Networker requires a user and password in order to perform the backups
The user must have admin privileges on the SnapImage Client
Check the SnapImage admin guide with respect to Clear Text or Encrypted Passwords
In a nutshell you have two choices:-
Clear text passwords
Note: Clear text passwords are limited to eight characters.
If you use clear text passwords, the following conditions apply:
·? Only the administrator can perform the backup or recovery.
·? The local password file or another network resource, such as the
primary domain controller (PDC), authenticates the account and
password.
·? The username and password for the user logged on to the
SnapImage system must match the user name and password
specified for the SnapImage Client resource in the NetWorker
Administrator program.
OR
Setup an encrypted NDMP Password
This is done using the NDMP_PASSWD utility
NB to Run this you MUST be logged in as the MACHINE administrator (Domain Admin is not sufficient)
If not you will get an error error: 'failed to get token information'
Run %NDMPHOME%\bin\ndmp_passwd /u
enter Password twice.
Any User-Password combinations entered are saved in %NDMPHOME%\etc\.ndmp_passwd file
NB this user and password will be required in the client config on the server
It Seems that this may need to be set to a Valid Windows Domain User and the current password for that user.
4. Configure a Cache on SI Client using the SI Administrator GUI
Check the SI Admin guide for info on this.
Requires an Empty, Non Formatted Primary, or Extended partition
Cache Tab
See Candidates on Left
NB only recognisable parameter is size
Seems to show only non windows formatted or empty partitions
BE CAREFUL IT SHOWS EXT3 & Linux Swap Partitions as Being Available!!!
CONFIGURING THE NETWORKER SERVER
5. Licenses
For DSA Backup you will require a SnapImage License and an NDMP CLient Connection for SnapImage for each client.
The SnapImage for Windows License bundle (457-000-173) includes both of these.
You do NOT need the NDMP Tape Server license for a DSA backup
As mentioned in the SnapImage Documentation, License manager is required for SnapImage
The SnapImage License MUST be applied to License Manager
The NDMP Client Connection for SnapImage MUST be applied to the NETWORKER Server (since the DSA backup happens to the Networker server), and NOT to License Manager as stated in the SnapImage Admin Guide.
Install and Start License Manager Service
Insert License into LM
lgtolic -s ::1 -c enabler code
lgtolic -s ::1 -l lists installed licenses
6. CONFIGURING THE NETWORKER CLIENT
Ensure that Schedule or overrides are set to Full or Differential Level1 {NB Incremental NOT Supported Will Result Failure}}
Saveset = Drive Letter Only. (All not acceptable, Multiple drives OK)
Remote User & password MATCH the NDMP User & Password set on SnapImage
Backup Command nsrndmp_save -M -T image
-M invokes DSA agent to convert NDMP to Networker Backup (Not mentioned in the SnapImage Docs)
-T Backup Type
image specifies a SnapImage Backup
NB Whole command is case sensitive - ensure "image" is lower case
Check the NDMP Box
Application Iformation Box
Optional Entries. Default is a Sparse backup Withy File History
DDIMAGE=Y for Non-Sparse Backup (ALL blocks in volume, including empty)
HIST=Y collect file history to allow FIle Level Restore.
Remote Access - *@*
Storage Node - Set to a valid Networker Storage Node.
7. CONFIGURING THE NETWORKER GROUP
Recommend Setting inactivity timeout to 0 as SI Backups can work for long periods without contacting the server.
Snap Image performs the following functions in order :-
a. Take Snapshot of source volume
b. Backup Volume to DSA Device
c. Send MetaData to Networker server
Thus it can be many hours before the meta data is sent, and Networker may decide the job has timed out.
Ensure there is no level override which would conflict with Full or Diff Level 1
8. RUN BACKUP
HIGHLY Recommend running savegrp -vvvv group first time around so you can monitor progress and check for errors
When (if) it runs, there are no sessions visible, check devices and group details, and log
There are logs on the client, but the content of these is displayed in the savegrp -vvv
NB Backup Device must be Tape or Conventional File Type Device (Advanced File Type Device NOT Supported according to Docs)
9. Proceed as per Documentation
TROUBLESHOOTING
Networker server Logs
Detailed Progress logs are found in Legato\nsr\tmp\sg\ \ directory.
Client Side Logs
Legato\NDMPSvc\diag
Our experience was:-
Backup Fails with Authentication errors
Set the NDMP User and password to match a Current Valid Windows or Domain Login with administrator rights on the SI Client
Backup Fails with "Error, no matching devices for client cccccccc
If you forget the -M for the DSA in the client Backup command it tries to find an NDMP device to backup to, which fails if there isn't one.
Backup Fails with Licensing Error
Needs a SnapImage Bundle License (Snap Image AND NDMP Client Enablers)
There is an eval enabler in the Media Pack Docs
The Snap Image Enabler MUST be inserted into License Manager.
The NDMP Client Enabler MUST be appied to the Networker Server (NOT LM)
Putting All licenses directly into Networker didn't work
Snap Image, and NDMP Tape Server verify licenses against License Manager
NDMP CLient License is verified against the system doing the Backup, Netowrker for DSA and NDMP Tape Server for NDMP Backups
You ONLY need to put the Snap Image license into License manager, leave the existing Networker ones in Networker.
A personal experience by
John Gowing
Capetown South Africa
johng@channeldata.co.za
Applies to Networker 7.2 and Up which support DSA Backups
This is based upon
Networker 7.4SP3 Server & Client
SnapImage & NDMP Services 2..0.2
RELEVANT DOCUMENTATON
Networker Admin Guide - Section on NDMP Backup & DSA
WhitePaper-EMC Networker & NDMP-Best Practices & Planning
SnapImage 202 Install & Admin Guide (2008)
SnapImage 202 Release notes (2008)
Networker Command Ref Manual
NDMP Tape Server seems to have no Documentation itself
INTRODUCTION
The SnapImage documentation makes no provision for DSA backups, and makes the assumption that backup will be to an NDMP Tape Server Mounted, dedicated, NDMP device
If your intention is to use the DSA backup facility supported in Networker 7.2 and later, then the Snapimage documentation is incomplete, confusing and misleading.
I have initiated an RFE with EMC to have this corrected.
The following information covers basic installation and initial setup to get a SnapImage backup running to a standard Networker backup device using DSA Backup.
INSTALLATION OF SNAP IMAGE ON THE CLIENT
1. Run NDMP Services Setup
NDMP Services MUST be installed BEFORE SnapImage
You will get an error during SnapImage installation if NDMPSvc is not installed
Environment Variable NDMPHOME is created =Path to the NDMPSvc directory
NDMP Tape Services does NOT require to be licensed for DSA Backups
2. Run SnapImageI Setup
You should see a shortcut to Snap Image Administrator in Start\Programs
3. Passwords and Security
Networker requires a user and password in order to perform the backups
The user must have admin privileges on the SnapImage Client
Check the SnapImage admin guide with respect to Clear Text or Encrypted Passwords
In a nutshell you have two choices:-
Clear text passwords
Note: Clear text passwords are limited to eight characters.
If you use clear text passwords, the following conditions apply:
·? Only the administrator can perform the backup or recovery.
·? The local password file or another network resource, such as the
primary domain controller (PDC), authenticates the account and
password.
·? The username and password for the user logged on to the
SnapImage system must match the user name and password
specified for the SnapImage Client resource in the NetWorker
Administrator program.
OR
Setup an encrypted NDMP Password
This is done using the NDMP_PASSWD utility
NB to Run this you MUST be logged in as the MACHINE administrator (Domain Admin is not sufficient)
If not you will get an error error: 'failed to get token information'
Run %NDMPHOME%\bin\ndmp_passwd /u
enter Password twice.
Any User-Password combinations entered are saved in %NDMPHOME%\etc\.ndmp_passwd file
NB this user and password will be required in the client config on the server
It Seems that this may need to be set to a Valid Windows Domain User and the current password for that user.
4. Configure a Cache on SI Client using the SI Administrator GUI
Check the SI Admin guide for info on this.
Requires an Empty, Non Formatted Primary, or Extended partition
Cache Tab
See Candidates on Left
NB only recognisable parameter is size
Seems to show only non windows formatted or empty partitions
BE CAREFUL IT SHOWS EXT3 & Linux Swap Partitions as Being Available!!!
CONFIGURING THE NETWORKER SERVER
5. Licenses
For DSA Backup you will require a SnapImage License and an NDMP CLient Connection for SnapImage for each client.
The SnapImage for Windows License bundle (457-000-173) includes both of these.
You do NOT need the NDMP Tape Server license for a DSA backup
As mentioned in the SnapImage Documentation, License manager is required for SnapImage
The SnapImage License MUST be applied to License Manager
The NDMP Client Connection for SnapImage MUST be applied to the NETWORKER Server (since the DSA backup happens to the Networker server), and NOT to License Manager as stated in the SnapImage Admin Guide.
Install and Start License Manager Service
Insert License into LM
lgtolic -s ::1 -c enabler code
lgtolic -s ::1 -l lists installed licenses
6. CONFIGURING THE NETWORKER CLIENT
Ensure that Schedule or overrides are set to Full or Differential Level1 {NB Incremental NOT Supported Will Result Failure}}
Saveset = Drive Letter Only. (All not acceptable, Multiple drives OK)
Remote User & password MATCH the NDMP User & Password set on SnapImage
Backup Command nsrndmp_save -M -T image
-M invokes DSA agent to convert NDMP to Networker Backup (Not mentioned in the SnapImage Docs)
-T Backup Type
image specifies a SnapImage Backup
NB Whole command is case sensitive - ensure "image" is lower case
Check the NDMP Box
Application Iformation Box
Optional Entries. Default is a Sparse backup Withy File History
DDIMAGE=Y for Non-Sparse Backup (ALL blocks in volume, including empty)
HIST=Y collect file history to allow FIle Level Restore.
Remote Access - *@*
Storage Node - Set to a valid Networker Storage Node.
7. CONFIGURING THE NETWORKER GROUP
Recommend Setting inactivity timeout to 0 as SI Backups can work for long periods without contacting the server.
Snap Image performs the following functions in order :-
a. Take Snapshot of source volume
b. Backup Volume to DSA Device
c. Send MetaData to Networker server
Thus it can be many hours before the meta data is sent, and Networker may decide the job has timed out.
Ensure there is no level override which would conflict with Full or Diff Level 1
8. RUN BACKUP
HIGHLY Recommend running savegrp -vvvv group first time around so you can monitor progress and check for errors
When (if) it runs, there are no sessions visible, check devices and group details, and log
There are logs on the client, but the content of these is displayed in the savegrp -vvv
NB Backup Device must be Tape or Conventional File Type Device (Advanced File Type Device NOT Supported according to Docs)
9. Proceed as per Documentation
TROUBLESHOOTING
Networker server Logs
Detailed Progress logs are found in Legato\nsr\tmp\sg\ \ directory.
Client Side Logs
Legato\NDMPSvc\diag
Our experience was:-
Backup Fails with Authentication errors
Set the NDMP User and password to match a Current Valid Windows or Domain Login with administrator rights on the SI Client
Backup Fails with "Error, no matching devices for client cccccccc
If you forget the -M for the DSA in the client Backup command it tries to find an NDMP device to backup to, which fails if there isn't one.
Backup Fails with Licensing Error
Needs a SnapImage Bundle License (Snap Image AND NDMP Client Enablers)
There is an eval enabler in the Media Pack Docs
The Snap Image Enabler MUST be inserted into License Manager.
The NDMP Client Enabler MUST be appied to the Networker Server (NOT LM)
Putting All licenses directly into Networker didn't work
Snap Image, and NDMP Tape Server verify licenses against License Manager
NDMP CLient License is verified against the system doing the Backup, Netowrker for DSA and NDMP Tape Server for NDMP Backups
You ONLY need to put the Snap Image license into License manager, leave the existing Networker ones in Networker.
No Events found!