Comments on: Protecting Active Directory with Snapshot Strategies http://blog.laspina.ca/ubiquitous/protecting-active-directory-with-snapshot-strategies Blogging for technical minds. Sat, 24 Jul 2010 14:52:03 -0500 http://wordpress.org/?v=2.9.2 hourly 1 By: Mike La Spina http://blog.laspina.ca/ubiquitous/protecting-active-directory-with-snapshot-strategies/comment-page-1#comment-684 Mike La Spina Fri, 19 Feb 2010 03:35:06 +0000 http://blog.laspina.ca/?p=422#comment-684 Ixus, I presume you want your linux host to control its own snapshot invocation. You would need to setup a cron job that invokes an rsh to the appliance. I don't have an appliance to work with so I can't show you the details. It's fairly strait forward. You need to grant the hosts ip access to the appliance - see the Netapp man pages http://ecserv1.uwaterloo.ca/netapp/man/man8/na_rshd.8.html The cron job would then use an interactive echo to initiate a snapvault command against it's data store. http://ecserv1.uwaterloo.ca/netapp/man/man1/na_snapvault.1.html Regards, Mike Ixus,

I presume you want your linux host to control its own snapshot invocation.
You would need to setup a cron job that invokes an rsh to the appliance.
I don’t have an appliance to work with so I can’t show you the details.

It’s fairly strait forward.

You need to grant the hosts ip access to the appliance
- see the Netapp man pages
http://ecserv1.uwaterloo.ca/netapp/man/man8/na_rshd.8.html

The cron job would then use an interactive echo to initiate a snapvault command against it’s data store.
http://ecserv1.uwaterloo.ca/netapp/man/man1/na_snapvault.1.html

Regards,

Mike

]]> By: ixus http://blog.laspina.ca/ubiquitous/protecting-active-directory-with-snapshot-strategies/comment-page-1#comment-683 ixus Thu, 18 Feb 2010 13:46:30 +0000 http://blog.laspina.ca/?p=422#comment-683 Hi Mike, Nice article. I have a very quick question. I have a primary Netapp Controller configured with many LUN'x which are connected to Linux Host's. Can you provide tips. On how to configure : That hosts manage way we take the snapshots on the volume hosting their LUNs. My backup netapp controller takes this snapshot via. SNAPVAULT. Your prompt reply will be appreciated..:) Regards, IXUS Hi Mike,

Nice article. I have a very quick question. I have a primary Netapp Controller configured with many LUN’x which are connected to Linux Host’s. Can you provide tips. On how to configure :
That hosts manage way we take the snapshots on the volume hosting their LUNs. My backup netapp controller takes this snapshot via. SNAPVAULT.

Your prompt reply will be appreciated..:)
Regards,

IXUS

]]> By: daniel http://blog.laspina.ca/ubiquitous/protecting-active-directory-with-snapshot-strategies/comment-page-1#comment-475 daniel Thu, 07 Jan 2010 14:06:30 +0000 http://blog.laspina.ca/?p=422#comment-475 Thanks for the answer, I'll make sure to create a seperate datastore for domain controllers and only snapshot the underlying netapp volume and not the guest VM. Thanks for the answer, I’ll make sure to create a seperate datastore for domain controllers and only snapshot the underlying netapp volume and not the guest VM.

]]> By: Mike La Spina http://blog.laspina.ca/ubiquitous/protecting-active-directory-with-snapshot-strategies/comment-page-1#comment-442 Mike La Spina Wed, 30 Dec 2009 22:34:04 +0000 http://blog.laspina.ca/?p=422#comment-442 Hi Daniel, This claim is true under certain conditions. If the underlying hosts disk IO rate is heavy loaded or under scaled the guest will suspend during the snapshot creation when including the running guest memory image. This can drift the VM clock due to halted CPU scheduling. Thus a time issue can occur on the Kerberos ticket side and other time sensitive operations. I have observed this behavior directly. Regards, Mike Hi Daniel,

This claim is true under certain conditions. If the underlying hosts disk IO rate is heavy loaded or under scaled the guest will suspend during the snapshot creation when including the running guest memory image. This can drift the VM clock due to halted CPU scheduling. Thus a time issue can occur on the Kerberos ticket side and other time sensitive operations.
I have observed this behavior directly.

Regards,

Mike

]]> By: daniel http://blog.laspina.ca/ubiquitous/protecting-active-directory-with-snapshot-strategies/comment-page-1#comment-440 daniel Wed, 30 Dec 2009 15:33:39 +0000 http://blog.laspina.ca/?p=422#comment-440 Interesting approach, I knew about the hazards of restoring domain controllers that had been offline for more than the tombstone lifetime but this was new. I would've thought that the RID master somehow prevented this from happening? Either way, a Netapp consultant told me a couple of weeks ago that domain controllers can get upset from the vmware snapshot operation itself but had no direct explanation of why. Have you ever heard this claim? Interesting approach, I knew about the hazards of restoring domain controllers that had been offline for more than the tombstone lifetime but this was new. I would’ve thought that the RID master somehow prevented this from happening? Either way, a Netapp consultant told me a couple of weeks ago that domain controllers can get upset from the vmware snapshot operation itself but had no direct explanation of why. Have you ever heard this claim?

]]>