| Author |
Message
|
| Inisah |
 Posted: Wed Jan 14, 2015 6:41 am Post subject: Automatic Backup for Datapower |
 |
|
Apprentice
Joined: 21 Mar 2014
Posts: 44
|
Heloo evryone,
Can one of you help me with the procedure to take automatic backup for the entire configuration and ftp to a server in datapower?
I checked for documentation. It is mainly on Secure backups.Please help. |
|
| Back to top |
|
 |
| rammer |
| Posted: Wed Jan 14, 2015 7:06 am Post subject: |
|
|
Partisan
Joined: 02 May 2002
Posts: 359
Location: England
|
| Hi we currently do a secure backup weekly the ouput is to a local directory. We then have a external task that runs some xml to connect to the datapower and copy over the file. |
|
| Back to top |
|
|
| Inisah |
| Posted: Fri Jan 16, 2015 5:34 am Post subject: |
|
|
Apprentice
Joined: 21 Mar 2014
Posts: 44
|
Hi
Thanks for your inputs. Could you please let me know what is the external task?
Also is the secure backup automated. If so how? |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Fri Jan 16, 2015 6:37 am Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7719
|
I did this by writing a ksh script that executes on a Linux server. The script makes ssh calls to the Command Line Interface of an appliance and executes either a secure backup or regular backup (export) based on how the script was called.
Our company's job scheduler kicks of the script for each appliance in our environment on the schedule I put together. If the job doesn't run, or fails to run to successful completion, the job scheduler alerts us.
The script copies the backup file(s) off the appliance and place them on secure NFS mount before deleting the files. We keep the last 10 backups for each appliance. The script records each step it takes with a time stamp in a logfile, and that logfile is stored with its corresponding backup files.
I think its odd the DataPower customers have to go through all this. There should be a facility built into DataPower that makes backing up the appliance easy, which includes getting the files securely of the appliance. I'm surprised that IBM's W.A.M.C. doesn't include this feature.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| rammer |
| Posted: Fri Jan 16, 2015 6:47 am Post subject: |
|
|
Partisan
Joined: 02 May 2002
Posts: 359
Location: England
|
Hi
The devices that we have are XB62's and there are two backup options 1) is normal backup but this doesnt backup Certificates etc which we have a job similar to what Peter describes or there is a DR backup that allows you to back up the whole device including certificates.
now I dont work on these full time but looking at the the cron job we have on linux it makes a connection to the XB62 and runs this xml
<?xml version="1.0" encoding="UTF-8"?>
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
<env:Body>
<dp:request xmlns:dp="http://www.datapower.com/schemas/management" domain="default">
<dp:do-action>
<SecureBackup>
<cert>ldap_crypto_certificate</cert>
<destination>local:///ondisk/DRBackup</destination>
<include-iscsi>on</include-iscsi>
<include-raid>on</include-raid>
</SecureBackup>
</dp:do-action>
</dp:request>
</env:Body>
This saves it to the temp directory on the device, there is then another job that runs to copy it off the device onto the Linux server. As part of the copying over it appears to use a certificate for validation.
As mentioned im not to familiar on how this works but it does work as we have used it when we have done upgrades on devices etc. |
|
| Back to top |
|
|
| boos |
| Posted: Tue May 07, 2024 3:03 am Post subject: |
|
|
Apprentice
Joined: 27 Jan 2004
Posts: 37
Location: Netherlands
|
Thanks for that soap example on the secure backup. I now have a working secure backup call from a remote location. (needed to give the backup user some RBM access authorities and ofcourse added a closing </env:Envelope>). But your example on the secure backup soap message made my life easy.
Here's another sample we've been using on a regular (non secure) backup call delivering 1 zip file with the bacukp of all domains (maybe it will help someone else in the future)
<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
<soapenv:Body>
<dp:request xmlns:dp="http://www.datapower.com/schemas/management">
<dp:do-backup format="ZIP">
<dp:domain name="all-domains"/>
</dp:do-backup>
</dp:request>
</soapenv:Body>
</soapenv:Envelope>
p.s. these are the access policies needed for the user to be able to do the backup calls remotely
*/*/*?Access=r+x
*/*/file/export?Access=r+w
*/*/login/xml-mgmt?Access=x
*/default/config/backup?Access=x |
|
| Back to top |
|
|
|
|
