From SEPsesam

General Questions

How do I obtain the Community Version?

The SEP Community Version is available to the general private user community. Please note that the software, hand books and licensing and terms from SEP AG and SEP Software LLC remain unchanged.

During the installation of a SEP sesam demo version (located at Download page from SEP) a Community License file is automatically created. This file must be used in perpetuity and copied to the license file location after the 30-Day trial period is over.

The file sm_lic.ini.com can be found at <SESAM_ROOT>/skelCopy the file as sm_lic.ini to <SESAM_ROOT>/var/ini

You can check the license status using the GUI under "Help -> License Info".

The SEP-Community-Version is available for Windows and Linux. It is not supported and cannot be updated. However, the SEP Forum SEP-Forum and the Wiki SEP-Wiki is available any time for your use.

How do I obtain the free Zarafa Extension

Free Backup for Zarafa environments

SEP sesam provides a complete Backup-, Restore- and Recovery solution for all types IT environments from simple single server, single operating system solutions to multi-O/S, complex heterogeneous environments running hardware and software applications from many vendors.

Besides the typical Server Operating Systems like Novell Netware, Linux, Windows, Unix and Solaris, SEP sesam offers extensions to execute an online backup of common groupware and database applications.

A complete overview of supported software is available in the SEP sesam OS and database support matrix

Zarafa users may receive a complete SEP sesam environment to backup their Zarafa installation free of charge. The following modules are provided in the free download:

• One "SEP sesam ONE Server" for scheduling and managing of all backup and restore tasks. SEP sesam ONE supports backup to tape as well as backup to disk. A 500 GB Virtual Tape Library is integrated in the base product.

• The SEP sesam Zarafa Online Module for up to 10 Users. The module offers the online backup and restore of the complete Zarafa Server environment. Restore and recovery of single mailboxes or even E-Mails are possible up to 10 users.

• The SEP sesam mySQL Online Module. It provides the online backup and restore of the Zarafa Database.

• The SEP sesam Graphical User Interface (GUI) including our powerful 'Restore Wizard'.

The free licenses to backup the Zarafa Server do not expire. However, the license is limited to this dedicated environment.Please note that no Update Service or support is included.

It is possible to upgrade the free version with the following enhancements:

• high-capacity SEP sesam Servers License (Standard Server with 5-Streams and 1TB, or Advanced Server with 64 data streams and 1TB)
• additional Clients to backup servers beside the Zarafa Server
• further Online Database Extensions
• Autoloader Support
• Disaster Recovery Modules
• SAN backup capability
• XEN or VMware disaster recovery
• Expanded Storage Capability
• or additional Zarafa Users

are available at the SEP Homepage

To apply for a free Zarafa Backup please send the following information to sales at sep.de* Name of your company* Complete address* Contact person incl. phone and email* Which additional servers do you use in your IT environment* Which backup software do you use beside SEP sesamAdditionally, please provide the Zarafa related information:* Installation of SEP sesam Server - Is it on a Zarafa Server or a dedicated SEP sesam server?* IP Adress of the SEP sesam Server* Hostname of the SEP sesam Server will be installed* Operating System of the SEP sesam Server* Number of Zarafa Users 

All SEP sesam Software is available from SEP Download Center

SEP sesam Server for Linuxhttp://download.sep.de/linux/

SEP sesam Server for Windowshttp://download.sep.de/windows/

Zarafa Modulehttp://download.sep.de/extensions/groupware/zarafa/

MySQL Modulhttp://download.sep.de/modules/databases/mysql/

An introduction to setup a backup of the Zarafa Server with SEP sesam is available on the SEP WIKI:SEP_sesam_Extension_for_Zarafa

Where can I get the latest 64-bit version of Sun's JRE

The latest 64-bit version (there is also a 32-bit version available) of the Sun's Java Runtime Environment for different platforms and languages is available under the following link:

https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_Developer-Site/en_US/-/USD/ViewProductDetail-Start?ProductRef=jre-6u7-oth-JPR@CDS-CDS_Developer

What is sesam 'Newday'?

SEPsesam NEWDAY gives System Managers the flexibility to extend backup routines to run after midnight and retain the backup date of the prior day. This is very useful when the computers requiring backup exceed the time allotment between End of Day and midnight. SEP sesam defines the period between two NEWDAY events as one backup day. This event is predetermined at installation and may be adjusted to specific requirements.

When a daily NEWDAY event is set to 08:00 the backup day lasts until the morning of the next day 08:00 (8 a.m.). Backups which run after midnight - the real new day - will be administered (recorded) as a backup from the the prior day.

Example: The SysAdm begins a backup at 19.00 (7 p.m.) and the projected finish time is 0200 (2 a.m.) By selecting a NEWDAY event at 0800 (8 a.m.) the job will have time to complete and all data will reside on the backup file from the day the job was started.

Weekends are often used for full-backups. When this is the case, it is advisable to interrupt the Newday event on the weekend. Define the execution as a weekly event but without execution since a Full Backup is performed instead.

A NEWDAY event carries out the following tasks additionally:

• finish all running backups
• restart of the SMS- and STPD-processes
• erase files and database entries of no longer existing backup files
• calculates in the calander the future tasks

You can configure the NEWDAY to a different time than 8 a.m. But you should not deactivate the NEWDAY event because the internal administration jobs in the system and database will not work. This could provoke malfunctions in the Sesam system in the medium term.

How do I order a new license or activate a new license?

If you need a new license please contact sales@sepsoftware.com and provide the following information:

• Hostname: SEPsesam Server
• IP Address: of the SEPsesam Servers

To determine which specific names Sesam uses (E.g. in the event more than one network card is installed on the server) you should use the information contained in the Sesam GUI under Help->Licenseinfo. The compliance/marketing team will send a new license via email.

Follow these steps to activate your license:

1. Unzip the License file
2. Copy it to the directory: <SESAM_ROOT>/var/ini
3. Switch to the directory <SESAM_ROOT>/bin/sesam
4. You can verify the license information with the following commands:

• Windows

     sm_info c

• Linux

    ./sm_info c

If the program returns errors in the hostname or IP address please contact our licensing department immediately at support@sepsoftware.com. If all the information is correct please send the license file back to support@sepsoftware.com (support@sep.de) with a copy of the output file returned after running the above commands.

Is there an overview of SEPsesam services?

There are different services depending on whether you dealing with SEPsesam Servers, a client or a tape server.

The services can be found in the SEP sesam 'Install Directory' <SESAM_ROOT>/bin/sesam

For Linux use the following command:

 ./sm_main status

For Windows Windows use the following command:

 sm_main status

To check services.

• Services of the SEPsesam Servers

main    SEPsesam main processessepuler SEP Event calendar to control all tasksdb      Databank services of SEPsesamqm      The Queue Manager administers of backups, restores and devicesrmi     Server part of graphical user interfacesms     Read/Write of SEPsesam Mediastpd    Linking protocol from SEPsesam Client to the Serverpassd   Security adminstration for SEPsesamctrl    Linking protocol from SEPsesam Server to the Client

• Services for a SEPsesam client

 main   SEPsesam main processes ctrl   Linking protocol from SEPsesam Server to the Client

• Services for a SEPsesam Device Server

 main  SEPsesam main processes ctrl  Linking protocol from SEPsesam Server to the Client sms   Read/Write of SEPsesam Media stpd  Linking protocol from SEPsesam Client to the Server passd Security adminstration for SEPsesam

Which Java version is required by SEP sesam

SEP sesam needs a Java Runtime Environment JRE in Version 1.6 or higher.

To check which version of JAVA you are running type

  java -version

Example (MS Windows):

C:\>java -versionjava version "1.6.0_11"Java(TM) SE Runtime Environment (build 1.6.0_11-b03)Java HotSpot(TM) Client VM (build 11.0-b16, mixed mode, sharing)

If a system wide Java version cannot be set appropriate then create a link to a proper version.

UNIX

Create a symbolic link to the correct Java version in SEP bin-sesam directory, e.g.:

  ln -s /usr/java/jre1.6.0_14/bin/java /opt/sesam/bin/sesam

Windows

Enter in the file: <SESAM_ROOT>\var\ini\sm.ini under der section [JAVA] the necessary path:

  [JAVA]  java_interpreter="C:\Program Files\Java\jre6\bin\java"  java_home="C:\Program Files\Java\jre6"  java_exit_on_fail=no

What do the flags mean in the column 'type' looking at Backups by State?

The first letter shows the type of backup

F/D/I/C: Level of backup (Full, Diff, Incr, Copy)

M: Media event

N: Sesam newday

S: Sesam Startup

X: SEPsesam command event

The second letter is used when a database backup is performed. For regular path backups it does not have any significance.

H: Hot, this signifies an online backup of database

C: Cold, this signifies an offline backup of database

How do I schedule a backup task?

To allow access from a client to the SEP server you must insert a command from the administration console. The entry is dependent on the type of client platform.

• Windows Client

User the following to set access: HKEY_LOCAL_MACHINE\SOFTWARE\SEP Elektronik GmbH\sesam\CommandEvents\{user}\{command}

for the user and the command.

Call the Regedit Editor and create a new key under

HKEY_LOCAL_MACHINE\SOFTWARE\SEP Elektronik GmbH\sesam\

(right click, select ,,new Key``) - if not already present - CommandEvents, enter the user and finally as the key the command with full path information. If other commands are present the lastcommand will be completed. It is possible to enter (*) which allows all commands to be executed.

• UNIX Client

The file sesam_cmdusers.allow should be copied from the client from the directory <SESAM_ROOT>/skel to /etc and convert the file, i.e. in the Format {User} {command} you can enter a line for the user and command. The wild card (*) allows all commands to be executed.

Note: For the execution of SEPsesam commands like sm_loader, no explicit permissions are required.[edit]

Why does the SEP sesam GUI create so many Java processes under Linux?

Some Linux operating systems create threads that are also shown in the process table. These are not real processes but only threads. There is a high number of processes since Java creates threads for all objects with 'Listener' functionality.

A support staff member told me to set profile, what does he mean?

The profile is set in the following manner.

In UNIX

Change into the directory<SESAM_VAR>/var/ini and call

  . sesam2000.profile

Important! Do not forget the dot and the space ( )!

Or simply use

  source sesam2000.profile

In Windows

Open a Command Window

Change into the directory<SESAM_VAR>\var\ini and call

  sm_prof.bat

Or use the Link

  <SESAM_VAR>\var\ini\sm_prof.bat.lnk

What is necessary to change the IP-address and the servername of the SEP sesam server?

First your license must be amended to match the new server name and/or IP-address. Please send the original license, the new server name and IP-address to info@sep.de. Until you receive the license please change the following items in the database. Set the sesam profile and execute the following commands:

  sm_db "select * from servers"

In this table the name and ip_address must be changed.

  sm_db "update servers set name='newname',ip_address='new IP' where name='old name'"

  sm_db "update clients set name='new name' where name='old name'"

When you receive the new license information you can change the SEPsesam Server Name using sm_setup. First run the Sesamprofile and enter the following command:

sm_setup change_servername mynewserver

Ports used by SEPsesam

When using the standarad configuration for SEPsesm the following ports must be opened to allow backup:

The program uses ports for control

 stpd     11001, 11002            11003-11006 ctrl     11301                   11302-11305

Network

How can I check the reachability of a client from Sesam server

If you can reach a client from backup server with nslookup and ping over DNS names, it is still possible that the server cannot connect to the client. In this case you can check the reachability of a client from the Sesam server view. You have to put in the following command:

For Linux/UNIX client:

  sm_ctrlc -l root {client} sbc

For Windows client:

  sm_ctrlc -l system {client} sbc

The output should be as follows (example with Linux client) (standard output of the sbc command):

  smsrv:~ # sm_ctrlc -l root dbsrv.local sbc  2007-10-26 13:29:11: sbc-3036: Info:     # @(#)SESAM BACKUP CLIENT FOR UNIX   FILE SYSTEMS, VERSION: 1.8R2 Build: 1.165 20070829 18:45:14 Linux i586   postfix #  2007-10-26 13:29:11: sbc-3000: Info:  usage:   sbc -b|r|g|p|k|h   [-C <control_host>] [-d <device>] [-f <list_source>]                      [-F <data_format>] [-i <saveset_info>] [-j <job_name>]                      [-l <level>] [-L <control_target>] [-n <segment_number>]                      [-o {options}] [-O <STOR/RETR_direct>]                      [-R <restore_target>] [-s <saveset_spec>][-S   <storage_node>]                      [-t <tape_spec>] [-T <since_time>][-x <exclude_patterns>]                      [-X <exclude list>] [-v <level>]  # Backup  #   [<backup_source1>[ <backup_source2> <backup_sourceN>]] |  # Restore #   [<restore_source1>[ <restore_source2> <restore_sourceN>]] |  # Get     #   [<remote_file> [<local_file>]] |  # Put     #   [<local_file> [<remote_file>]]  {options}: comma separated list of                       compress, encrypt[_plain]={passwd}   only for backup:    verify                # verify data after backup                       plain                 # do not decend into subdirectories                       hard=defer            # defer hardlinks                       hard=sort             # expect i-node sorted input                       plain                 # decend into subdirectories   only for restore:   rename, overwrite     # rename/overwrite if file exists                       plain, tree           # restore plain/tree in target dir                       next                  # start from subsequent tape   2007-10-26 13:29:11: sbc-3001: Info:     Exiting.

when a network problem occurs the output could look like:

  2007-10-26 13:25:59: scc-1128: Error:   Network communication problem: STDLIB   error: 110 - Connection timed out. connect() call failed for host:   [dbsrv.sep.de].

...or a connection from server to the client is forbidden:

  2007-10-26 13:28:29: scc-1128: Error:   Network communication problem: CTRLD   reply: 2007-10-26 13:37:55: scd-1136: Error:   Host [smsrv.local] is not   allowed to connect or security problem for user: [root].

Used ports for backing up a client behind a firewall (DMZ)

The following ports have to be enabled to backup a client behind a Firewall in the GUI properties of the client.

the required ports are

stpd 11001, 110002 (listen port client) --> 11003-11006 (specify in GUI for 2 parallel streams)

ctrl 11301 (listen port) --> -s (specify in GUI )

It's important to check the "timeout" configuration of the used ports on the firewall, because on port 11001 there is only traffic during the beginning and the end of the transaction.

The ports must be enabled for the OOB transaction signal.

How do I use the Nagios monitoring tool to query the SEP sesam database for Monitoring System information?

Using the Nagios plugin from Netway to query and monitor the SEP sesam Database

• Netway's Nagios Plugin for SEP sesam

Netways [NETWAYS GmbH] has developed an Open Source database query routine for SEP sesam - the Nagios plugin. This is, in accordance with the OSF foundation rules a free software packages, and comes with the standard disclaimers regarding warranty, usability and functionality. In other words, use it for free at your own risk.

Download: http://download.sep.de/utils/nagios/Sesam-Nagios-Plugin.tgz

• Demo scripts from projects

There have been various scripts written for specific projects to allow customers to query (retrieve information from) the SEP sesam DB. These scripts are very specific to the client environments and are in no way warrantied to work in other environments. Sample scripts to query the SEP sesam DB have been written illustrating the use of the Nagios methodology are are for demonstration purposes only. They can be found at the third party site:

http://download.sep.de/utils/nagios/SesamToNagios_DemoScripts.tgz

LINUX

Install the SEP sesam GUI under Linux

To install a sesam GUI, the GUI software package must be loaded on the target computer. The actual software for the different Linux distributions can be downloaded from download.sep.de, like e. g. sesam_gui-3.4.1-31.SuSE.i586.rpm.

Install this package after the download. For example:

rpm -Urh sesam_gui-3.4.1-31.SuSE.i586.rpm

Afterwards please check if the sesam server is available by using the following command:

nslookup "name of your sesam server"

Now make a shortcut with the following path:

/opt/sesam/bin/gui/sesam_gui -S "name of your sesam server"

done

How can you allow the Sesam Profile to run automatically during Login?

You need to create a link in the directory /etc/profile.d/.

ln -s /var/opt/sesam/var/ini/sesam2000.profile /etc/profile.d/sesam.sh

Using backup source and exclude from a file with Linux

If many directories or files have to included or excluded in a backup task it could be possible that the limit of counts or characters of the field (max. 255 character) will be exceeded. To solve such problem you can use files to define a backup source or a exclude list. This file has to created on the backup client on which the backup should be executed.

Include:
Create a separate line for each directory or file item in a file (e.g. /etc/sesam/backupfiles.txt):

/lib/usr/share/usr/bin/a2ps/srv/Dos6.22.img/var/opt/sesam/var/ini

In the field Source has to enter one item at least, e.g. you can enter the include file itself. Then this file is also containing in the backup set (e.g. /etc/sesam/backupfiles.txt). In addition to that you have to set up the following entry in the field Save options of register Options 1 in the backup task definition:

-f /etc/sesam/backupfiles.txt

Beside the value of the source field all values containing in the file will be backed up.

Exclude:
The behaviour of the exclude is quite similar. This file is called e.g. /etc/sesam/excludefiles.txt. Each file or directory that should be excluded from the backup has to enter in a separate line in the file:

\./tmp$\./home/Max Mustermann/videos.zip$\./home/Max Mustermann/Verschiedene Versicherungsunterlagen/Abschluss für Geschäftsjahr 2006$

For instance, in the source of the task definition is entered all, the complete system will be backed up exclude the items in the exclude file. In opposite to the include source file definition the leave the field Exclude List empty. Then set up the following entry in the field Save options of register Options 1 in the backup task definition:

-X /etc/sesam/excludefiles.txt

The Sesam will exclude all files and directories from the backup which are containing in the file.

Windows

When I try to connect a client I receive the error: 'Network communication problem: SOCKET error: 10038 - The descriptor is not a socket'. What is going on?

The Layered Service Provider (LSP) Chain is defective/damaged. The cause can be an Antivirus program or a Virus; another possibility is that by DLL's were switched during installation or de-installation. This results in the daughter processes not being able to inherit open your Socket Handles

In this example event the Sesam CTRL connection takes the SM_CTRLD_MAIN daemon call from SM_CTRLC, it opens the necessary Sockets and transfers/passes them on to the newly created daughter processs SM_CTRLD. Due to the defective LSP the Sockets can not use this information and returns during an operation, e.g. setsockopt() the following error:

10038 - The descriptor is not a socket.

The easiest way to check this is to use the following free tools on the client computer:

   * lspfix.exe - identifies blocked DLL's, e.g. bmnet.dll and removes them   * listdlls.exe - checks the chain of DLL's - (alternatively use sm_list -f {PID of SM_CTRLD_MAIN}) 

Typical Action:

1. Check if the Layered Service Provider (LSP) links with lspfix 2. Check the sm_ctrld[_main].exe indirectly used DLL's with listdlls 3. Remove the conflicting DLL with lspfix.

An example of a correct listdlls for an environment:

1. > listdlls.exe sm_ctrld

D:\kit\su\src\gui>listdlls sm_ctrld.ListDLLs v2.25 - DLL lister for Win9x/NTCopyright (C) 1997-2004 Mark RussinovichSysinternals

sm_ctrld_main.exe pid: 4872Command line: D:\programme\SEPsesam\bin\sesam\sm_ctrld_main.exe -D.Base Size Version Path0x00400000 0x23000D:\programme\SEPsesam\bin\sesam\sm_ctrld_main.exe0x7c910000 0xb7000 5.01.2600.2180 D:\WINDOWS\system32\ntdll.dll0x7c800000 0x106000 5.01.2600.2945 D:\WINDOWS\system32\kernel32.dll0x71a10000 0x17000 5.01.2600.2180 D:\WINDOWS\system32\WS2_32.dll0x77be0000 0x58000 7.00.2600.2180 D:\WINDOWS\system32\msvcrt.dll0x71a00000 0x8000 5.01.2600.2180 D:\WINDOWS\system32\WS2HELP.dll0x77da0000 0xaa000 5.01.2600.2180 D:\WINDOWS\system32\ADVAPI32.dll0x77e50000 0x91000 5.01.2600.2180 D:\WINDOWS\system32\RPCRT4.dll0x719b0000 0x40000 5.01.2600.2180 D:\WINDOWS\system32\mswsock.dll0x66710000 0x59000 5.01.2600.2180 D:\WINDOWS\system32\hnetcfg.dll0x77ef0000 0x47000 5.01.2600.3099 D:\WINDOWS\system32\GDI32.dll0x7e360000 0x90000 5.01.2600.3099 D:\WINDOWS\system32\USER32.dll0x719f0000 0x8000 5.01.2600.2180 D:\WINDOWS\System32\wshtcpip.dll

After removing the defective DLL the socket can now be inherited by the daughter process SM_CTRLD.[edit]

How can you set the SBC, so that the Exclude List always uses the file pattern (?,*) instead of using the regular expressions?

In the configuration file <SESAM_VAR>/var/ini/sm.ini on the sesam client the entry

 [SBC_OPTIONS] EXCLUDE_MATCH=REGEXP

must be changed to

 EXCLUDE_MATCH=PATTERN

Why can't SEPsesam write to Network devices?

Under Windows, services usually run under the special SYSTEM account. This account has all local access rights, but for security reasons none for non-local, or network drives.

The Administrator can access network drives in two ways, but with certain security risks:

• Let the SEP sesam service run under an administrator account, which has all writing privileges for the network drive.
• Share the network drive in such a way, that the user group Network has writing privileges.

Due to increased security after Windows 2000/2003 and XP it is not possible to assign dedicated drive letters, e.g. e:\. Instead the path must be entered using UNC Notation. The backup is carried out over the associated network devices but only after entry of the UNC Names e.g //fileserver/install/Driver.

How can I write SEP sesam disaster information on network drives?

Since in Windows the services run under the special account SYSTEM the SEP sesam processes have no rights to access the network drives. For access to network drives there are two possibilities, but with certain security risks.

• Let the SEP sesam service run under a administrator account, which has all write privileges for the network drive.
• Share the network drive in such a way, that the user group Network has writing privileges.

After Windows 2000/2003 and XP you must use UNC Paths, Disk Drive Letters are no longer allowed because of security issues.

How are Archive Bits processed?

Under Microsoft Windows according to backup type COPY/FULL/DIFF/INCR Windows Archive Bit of the files are treated in the following way:

COPY

Saves all files without regard to the archive bit, Archive Bit is not reset.

FULL

Saves all files without regard to the archive bit, resets Archive Bit.

DIFF

Only files with archive bit are saved, Archive Bit is not reset.

INCR

Only files with archive bit are saved, resets Archive Bit.

Therefore, when selecting a backup strategy the following issues must be considered:

1. A backup sequence FULL-DIFF-INCR-DIFF-... is not logical. Following an INCR backup with a DIFF will not save files saved by the INCR backup because the archive bit is reset!
2. If the Archive Bit of files are reset manually or by other programs a following DIFF or INCR backup may not save this file!
3. If Archive Bits are not changeable, e.g. cannot be reset due to the fact they are in 'ReadOnly' directories warnings will be returned during FULL and INCR backups.

As a consequence of these issues we recommend to save on time based creation/modification. See below.

How do I get Backups to ignore Archive Bits and use Creation/Modification time?

Change into directory <SESAM_ROOT>/bin/sesam and call:

sm_db "INSERT INTO defaults (key,user_name,value) VALUES ('with_archive_bit','sesam','no');"

After this FULL, DIFF and INCR backups ignore Archiv Bits. DIFF and INCR backups use start time of last referenced backup, in case of DIFF a preceding FULL - in case of INCR any preceding backup.

Optional resetting of Archiv Bits is executed with option

-o clear_archive 

when it is inserted in the properties of the backup task in tab 'Options 1' in field 'Save options'.

Why does the backup of encrypted data fail on Windows 2000, returning "The network path was not found"?

Microsoft has released a Hotfix for older Windows 2000 Versions for the backup of encrypted data (Encrypting File System - EFS). Dated March 24, 2004. Please see:

http://support.microsoft.com/?scid=kb%3Ben-us%3B843198&x=10&y=8

Beginning with this Hotfix Unicode Patch Convention with Prefix \\?\ is supported.

How can I Restore Active Directory Subtrees in a Clustered Environment?

1. Boot into Directory Services Restore Mode. This ensures that the directory is offline. In order to do this, during the normal boot menu (Please select the operating system to start) while restarting the computer, notice the message at the bottom of the screen: For troubleshooting and advanced startup options for Windows 2000, press F8. Do so, and then select Directory Services Restore Mode from the Safe Mode and Other Startup Options list.

2. Restore the "System_State" Backup with SEPsesam GUI.

3. To authoritatively restore Active Directory data, you need to run the Ntdsutil utility - Example with Subtree organizational unit Marketing in domain Anitpodes.com:

#> ntdsutilntdsutil: authoritative restoreauthoritative restore: restore subtree OU=Marketing,DC=Antipodes,DC=COM

Refers to Microsoft Publication Windows 2000 Server Disaster Recovery Guidelines - Active Directoryand Disaster Recovery: Active Directory Users and Groupssection "Performing an Authoritative Restore"

Backup

The backup of a client did not function properly. How can I determine where the problem is?

The following test commands should help you, to isolate the problem. From a backup server, or a client, you can make a test backup for the target client, without writing data to a tape drive or disk drive. Run the following commands in the directory <SESAM_ROOT>/bin/sesam/.

• Backup server: Unix, client: Windows

  sm_ctrlc -l system  {client name} sbc -b -s -  f:/test  >/dev/null

The data from Directory F:/ from the Windows computer is written over the network to the Unix computer to the directory: /dev/null.

To view this on the monitor, enter -v 1 into the above command. Everything written to /dev/null visible on the Monitor.

 sm_ctrlc -l system  {client name}   sbc  -b -s  -  -v 1      f:/test  >/dev/null

• Backup server: Unix, client: Unix

sm_ctrlc -l root  {client name}   sbc  -b -s -  /usr  >/dev/null

or with the announcement of the read data:

sm_ctrlc -l root  {client name}   sbc  -b -s -  -v  1   /usr  >/dev/null

• Backup server: Windows, client: Unix

sm_ctrlc -l root  {client name}   sbc  -b -s -             /usr    > NUL

With logging of backup data:

sm_ctrlc -l root  {client name}   sbc  -b -s -  -v  1   /usr    > NUL

If the test backup is only to be run on the target backup client the command

sbc -b -s  -  /usr   >/dev/null

in <sesam>/bin/sesam/ Unix directory is executed.

And entered <SESAM_ROOT>\bin\sesam\ in Windows

sbc  -b -s  -  f:/test    > NUL

Enter -v 1 to show the backed up data on your monitor.

During backup I receive the notice: "'Login incorrect. Password incorrect."' What's wrong?

Please check your name resolution (DNS or etc/hosts file). The server and client must be reachable with or without FQDN. Sesam Server and client should be able to resolve each other correctly, including the so called reverse lookup. If the resolution is correct, please do the following:

In the Sesam GUI go to Tasks > by Clients and move to the client and its incorrect backup job.

Open the properties of the backup here and move to the registry Options 1.

Insert -v 4 at backup options .

Start the backup again and go to Backup by State. There go to the properties of the backup an then to Protocol. Here, search for the point "'Login incorrect. Password incorrect."' and correct here the respective name resolution.

Where is the Encryption key stored?

The encryption key is stored encrypted in SEPsesam Database in the backup task entry - table tasks - and in the result entry - table results. If the encryption key is changed then the subsequent task will be executed with the new key and the new key is stored in table results.

A restore uses the stored encryption key from Table Results.

Compression settings

To activate compression globally for all backup tasks under Linux the sms.ini under /var/opt/sesam/var/ini/ have to be modified. Under the caption [SMS_Server] the option Compresslevel can be enabled by

Compresslevel=1

This entry is also valid under Windows.

How can configure a backup using another Network or Interface?

The first thing that must be done is to establish an IP Address for the new interface.The IP Address will then be entered the properties table of the (Tape) server under Topology - Clients (Interface).In the Backup Appointments the IP Name must be selected from the Tab Parameter, in the field interfaces.

Example: Computer 'testme' has a 2nd Interface Module, with the name 'testmeb'.In backup task select 'testmeb'.

How do you backup Backup the eDirectory on a Novell OES Linux - without SP2 -?

Since OES SP2 a TSANDS is available for eDirectory on Novell OES Linux. SEPsesam provides a special backup type "OES Novell Directory" for older versions. This backup type is using SEP's sbc_nds and Novell's ndsbackup to back up eDirectory. sbc_nds is generating an apropriate commandline for backup level FULL/DIFF and INCR. ndsbackup needs User and Password. These values must be defined in the properties of the Backup Task as Backup Option and Restore Option with -a user={your user},pass={your password}

For instance:

-a user=cn=admin.o=novell,pass=novell

There is no selective restore possible but you can filter specific subtrees. To do this you have to choose "Expert Options" in the restore wizard and enter the requested subtree under tab 'Filter'.

Step by Step Instructions

  1. Availability of Backup Task Type 'OES Novell Directory'        1. Which SEP sesam version are you using? Should be version 3.0 or higher.   2. Availability of recent sbc_nds        1. Please use recent version: http://download.sep.de/netware/ sbc_nds_*.*         or sesam-novell-client-*.*        2. Is sbc_nds in bin/sesam on client side available and executable?   3. Backup Task with User and Password        1. If not existing define a Backup User with Password for eDirectory Backup in         Novell iManager.        2. Define Backup Task with Type 'OES Novell Directory'. The source is the identifier         of your eDirectory tree or subtree. You may check this with ndsbackup scan function.        3. Set Backup Option and Restore Option to: -a user={your user},pass={your password}   4. Restore        1. Use target '/', to restore into original tree.        2. With Expert Option you may set Filter to requested subtree.

Path for ndsbackup since eDirectory 8.8.1

Since eDirectory version 8.8.1 ndsbackup is not any longer located in /usr/bin butunder /opt/novell/eDirectory/bin/ndsbackup

To enable an execution with SEPsesam a link into the SEPsesam bin directory is necessary.

Use the following comand in case of a standard installation:

ln -sf /opt/novell/eDirectory/bin/ndsbackup /opt/sesam/bin/sesam

After the initial backup does sesam do incremental backups?

sesam can be set to full, incremental, differential or copy. The disadvantage to incremental is that only changes are backed up to a daily/weekly tape file. In the event of a data restore it will require loading all the incremental tapes up to the data restore. Differential does not require this extra effort. With Differential Backups, restores can be accomplished in Generational View. In this mode, Sesam will automatically restore the base file and the latest differential backup. Sesam will request/mount the appropriate medias, simplifying the restore process. It will manage this for all files selected for restore. Copy allows you to make a copy of the data without taking the place of the normal archival activity set by the Master Administrator--it is not to be used when doing a data or a system restore.

Can users do their own backup and restore?

Users typically cannot backup their own computers, but it can be done. The most efficient way to accomplish this would be to install a sesam server license on the target client (i.e. the user's computer). In this mode the user can be designated as the administrator for his/her desktop and the server can be backed up as if it were a client by the sesam GUI Administrator.

Are backups performed directly to disk or tape?

Backups can be written either to tape or disk, sesam after version 3.0 supports Disk-to-Disk-Tape functionality. All backup functions are written by the server and/or controlled by the server and may be written directly to the backup disk or tape, or remote tape server. Sesam supports virtual tape libraries on disk with a pseudo autoloader function. Removable disk media is also supported.

I have decided to use removable or USB media for my backup strategy. Does sesam support these types of devices?

Yes, Removable disk media including USB drives are supported.

Restore

Common Questions

How is it possible to restore only single files if the sesam listing file is no longer available ?

In order to do this you can enter file patterns into the Restore Wizard. First the desired "Saveset" is selected in the registry tasks and the option fully restore is selected. In the registry the Start the expert option window is opened with the button Expert Options. Enter the file patterns in the registry Filter. Many patterns are separated with blanks. Only files which fit to this pattern will be restored. All others are ignored.

Examples:

 /*.xls          -> restores all files with the ending ".xls" /*/X11/XF86*    -> restores all files from the directory "/X11" which start with                    "XF86". /*.ini /*.conf  -> restores all files which end on ".ini" or ".conf"

Attention: the '/' when writing the pattern is essential.

How do I use the Selective Restore Commands?

  1. In the directory <SESAM_ROOT>\var\work create a new directory root  2. You will need from the backup the files: .sgm and .lis   3. Execute 'Sesamprofile' 

In the 'root' directory create a Text File with the name: "selected.txt" and from the .lis File extract the desired lines, e.g.:

     "C :/WINDOWS/system32/config/AppEvent.Evt" f 8.10.2004 13:26:54 8.8.2005 15:56:07 1 4096 540672

On the command line of the sesam server enter:

sm_restore -s SC20050809155617 -R c:/temp -v 1 -l s -c client -d 1 -V

Paramater:

-j Original Task Name of the backup job-s The Saveset Name of the backup job must be entered. You can find this in .sel File from the Restore Job-r Restore Target (Please note the slash "/")-l The "s" is used for selective Restore-S The Hostname of the SEPsesam Servers-v 1 increase the Log levels-V To suppress output to the background-c Hostname of the client to be restored-d Disk drive entry of the LW's where the SEPsesam Media is kept, e.g. "1"

How do I restore all the data from a tape media without the SEPsesam DB?

To restore the data files without a current license from SEP sesam the following restore procedure should be followed (SESAM DB Restore). Change directories to <SESAM_ROOT>/bin/sesam start the program sm_recover. In the first response you will see all known devices currently active on the system. It is possible to choose one of these drives.

azurix:~ # sm_recovernum device name typ

1  disk1           Drive-1         DISK_HARD2  /dev/nst0       Drive-2         DLT

Enter drive number, (r) to repeat list, (q) to quit:

By entering "2" sm_recover will look for the desired data on the physical tape drive. The next question should be answered with yes "y" if no other backups or restores are active

Analyse media: restore data or listings of savesets

Restoring data while SEPsesam is active may cause conflicts due to concurrently running tasks on the drive. If you're sure, that there are no activities scheduled during recover, you don't need to block SEPsesam. Blocking SEPsesam during recovery prevents execution of backup activities scheduled for the other devices.

Do you want to block SEPsesam ? (y|n] >

Verity with "y"

wait until SEPuler - the timecontrol of SEPsesam - finishes its current work ...SEPuler is blocked ...

The next question should be answered no "n", unless the search for data should continue with a desired filter.

Do you wish to enter label, saveset-name and segment-number directly ( no searching on media ) (y/n) > n

The next response will be that the tape is rewinding.

The tape will now rewind and scanned to the end EOT...

In the next response you may choose the desired savesets. By entering the saveset number, you can insert further instructions to restore the data. After finishing please restart all sesam services, if desired.

How can I restore a backup that has errors? The backup log file reported that the backup was partially successul.

If a backup has failed but some or most of the data was in fact backed up you can update the sesam database manually to show the backup in the restore wizard.First the saveset ID is required. This can be found in the GUI under backups by status-> failed backup> Properties> saveset (p. ..). Then on the command line following commands:

   1 Source the sesam profile from $SESAM_ROOT/var/ini/sesam2000.ini   2 Modify the entry in the DB. The saveset has to be changed below.   3 sm_db "update results set state='1',blocks=1 where saveset='SC20060101121314'"

After this change the saveset for this backup should show in green on the status display and appear in the recovery wizard. Despite this sucessfull appearance, you should check whether data was sucessfully backed up.

Microsoft Windows Restore

How can I Restore Active Directory Subtrees in a Clustered Environment?

1. Boot into Directory Services Restore Mode. This ensures that the directory is off-line. In order to do this, during the normal boot menu (Please select the operating system to start) while restarting the computer, notice the message at the bottom of the screen: For troubleshooting and advanced startup options for Windows 2000, press F8. Do so, and then select Directory Services Restore Mode from the Safe Mode and Other Startup Options list.

2. Restore the "System_State" Backup with SEPsesam GUI.

3. To authoritatively restore Active Directory data, you need to run the Ntdsutil utility - Example with Subtree organizational unit Marketing in domain Anitpodes.com:

    #> ntdsutil       ntdsutil: authoritative restore     authoritative restore: restore subtree OU=Marketing,DC=Antipodes,DC=COM

Refer to Microsoft Publication "Windows 2000 Server Disaster Recovery Guidelines-recovery.doc"

How can I restore a portion of the Active Directory without writing over other ADS files?

Using Boot Mode "Recreate Directory Service" a restore of the "System State" occurs. To prevent overwriting other ADS directories you must use the ntdsutil tool, to restore the sub-tree or sub-directory. Set the switch "authoritative" to prevent overwrite.

Example Sub-Tree Marketing Anitpodes.com

   #> ntdsutil   ntdsutil: authoritative restore   authoritative restore: restore subtree OU=Marketing,DC=Antipodes,DC=COM

See also Microsoft Publication "Windows 2000 Server Disaster Recovery Guidelines-recovery.doc"

How do I install a Remote Device Server?

Detailled description under: How to create a Remote Device Server (RDS).

• LINUX/UNIX: Select and install the Remote Device Server (e.g. sesam_rts-3.4.1-52.rhel5.i386.rpm for Redhat) package from the SEP download center on a selected computer.
• WINDOWS: Select the Sesam Server (e.g. sesam-srv-3.4.1.88-windows.exe) package from the SEP download center on a selected computer. Start the installation and chose 'SEP sesam Remote Tape' as package.
• This computer should be added as a normal SEP sesam client (Components->Topology). Note that the DNS between the SEP sesam Server and Sesam Remote Device Server is properly handled.
• Create a new drive group (Components/->Disk Drives) and select the drive from the remote computer and select as a new drive.
• On the Remote Device Server it should be possible to see the name of the new device using the command: <SESAM_ROOT>/bin/sesam/slu scan (e.g. Tape0 or /dev/nst0). In the event you've selected a disk drive you only need to enter the drive type DISK_HARD.
• Create a new Media Pool, assign it to the new Drive Group.
• Register new media to the Media Pool.

Media

How do I setup Backup to Disk?

   * Check the Sesam GUI check that Loader 0 (in newer Versions Virtual Loader) can be found under the Menu      selection Components/ Loader.   * The local disk storage is detectable. It is also possible to back up using a UNC path on a NAS Device, however      the settings and user rights must be established NAS System using the required method.   * A Diskpool over 1TB in size requires an additional license.   * In the event the Disk Media Pool to be utilized for backup resides on a 2nd or remote system (i.e. not enough     storage on the SEP server) you will need to install a Remote Device Server License. 

In the GUI under Components/Media pools you need to create a 'Pool'. You can identify this pool with any recognizable name.

* The first setting that must be changed is the value "Drive Group". Set this to Disk Drives. * The next step is to enter the directory name where SEP sesam can enter the Virtual Tape Drive.* Next enter the maximum size the Media Pool for the Virtual Loader will be allowed to access.   Enter this in MB using the conversion factor 1 GB = 1024. * After this has been stored you can now enter media into the Media Pool (New Media) * At the line "Media Type" you can set varying sizes for the media, e.g. DISK_100 sets the size of this media to 100 MB.

For example, if a Media Pool had a limitation of 1000MB it is possible to select 10 DISK_100 media types.

* Now select 'Start' to begin the Initialization process. Repeat this step until the maximum capacity has been reached.  Experience tells us the number of Media for a Pool should be between 10 and 20, whereby the size of these media is not   important.  The initializaiton (recognition) of the new media can be automatically accomplished using the "Archive   Adjustment" (GUI->Components->Loader->Loader0-> Archive Adjustment). 

For 10 Media, the first would be Slot 0, the last slot 9. Automatic Initialization must be activated. When the above steps have been successfully performed, you can select 'Immediate Backup' on the new Pool (Disk) to start the backup process.

How do I enter an automatic Archive Adjustment?

• Go to Schedule and establish a new schedule.
• Enter the desired time.
• In this Time Schedule enter an event and make the following edits:

Priority:      Standard set to 1.Name:          Enter a description that is easily recognizable.Command:       Example for Tape Loader 1, Drive 2 and 10 Slots: sm_robot -€“l 1 -“d 2 -€“s 0-9  Client:        Choose the desired Sesam Server NameUser:          If this for a Unix System enter: root. For Windows: system.

Note: For the simple activation of SEPsesam commands no explicit permissions are required. Also see How do I schedule a backup task?

I have found a tape without label and I want to know whether it is a sesam tape or not.

Put the tape into the drive, select the drive in the GUI under Components >drives and execute the Drive action identify label. In the display "CurrentMessages" the label, if found, will be displayed under the drive.

Alternatively you may go to the command line, change into the directory<SESAM_ROOT>/bin/sms and execute:

For Unix

 ./sm_sms_interface getlabel -d /dev/nst0

For Windows

 sm_sms_interface getlabel -d Tape0

you will find the necessary device (switch -d) in GUI under Components >drives.

How can you manually write a label on a tape?

Go to the command line, change into '<SESAM_ROOT>/bin/sms' directory andexecute:

For Unix

./sm_sms_interface init -d /dev/(z.B. nst0) -t testpool00001:1

For Windows

sm_sms_interface init -d Tape0 -t testpool00001:1

Attention: The tape will be overwritten without any warnings!!

The media label consists of three parts:

1. Name of the pool (here testpool), 2. The tape ID, a number of 5 characters 3. A number after the ':', which complies to the number before

How do I automatically remove the tape after the backup is finished?

The best way to accomplish tape removal after backup is by using sm_notify interface. You can find a complete description of this command interface with examples how to unload tapes following backups in the SysAdmin Guide.

The standard command to unload is as follows:

sm_drive dismount 2 unload

This command refers to selected or desired drive, in this case drive 2.

Where do I install the cleaning tape?

At the current time a cleaning tape will not be explicitly identified. When selecting an "Archive Adjustment" the cleaning tape will be automatically loaded in sequence and an unwanted cleaning operation may be initiated.

To prevent an unwanted cleaning operation from starting it is recommended that the last (highest numbered) slot be selected for the cleaning tape and the number of slots reduced by one (1).

Cleaning may take place by manually entering the cleaning tape or by using the manufacturer's instructions.

Sesam GUI

Permissions for allowing a GUI Client up to version 2.4.x

Every GUI client must be allowed access to the SEP sesam Server using sm_setup allow_gui {GUI-client} {user}

Example:

 sm_setup allow_gui pc1 Miller

Problems with the acceptance of a new Client

The following error messages can appear when registering new clients to the sesam server.

Error:

  No Access for Computer pc2 - please enter for pc1

or

  There is no SEPsesam installed on Computer pc2, please install.

Possible Problems:

1. There might be no sesam client software installed; 2. A wrong system name has been entered into the SEPsesam GUI; 3. A Firewall between the two computers is active.

  A firewall is active on Windows XP with SP2 and SuSE Linux after 9.1. by default!

Solution:

   * Install SEPsesam software on the target client    * If the name was entered wrong, delete and reenter   * Deactivate the Firewalls, or install the SEP sesam Firewall option 

Error Message:

  Rights Restriction -  [pc1.domain.de system] in pc2:<SESAM_VAR>/var/ini/sm_ctrld.auth

Problem: The sesam Server has no privileges to access the client

Solution: Enter the value in the [___] into the client's <SESAM_VAR>/var/ini/sm_ctrld.auth

Error Message:

 Test backup from pc2 does not restore to pc1 - please verify ( ping, DNS, local STPD)

Problem: The connection between client and server is not functioning.

Solution: Check with the help of the nslookup command if the name resolution Forward with and without FQDN as well as Reverse is correct.

Attention: Check on SEP sesam Server AND on client:

    nslookup {client}    nslookup {IP-Address of client}                         # important reverse lookup    nslookup {SEPsesam Server name}    nslookup {IP-Address of SEPsesam Server}                # important reverse lookup

Example - check mysesam name resolution and reverse lookup:

  #>nslookup mysesam  Server:   dns.domaine.de  Address:  192.168.1.254

  Name:     mysesam.domaine.de  Address:  192.168.1.1

  #>nslookup 192.168.1.1  Server:   dns.domaine.de  Address:  192.168.1.254

  Name:     mysesam.domaine.de  Address:  192.168.1.1

In the event DNS is not being used and verification is taking place over etc/hosts file, use ping to verify individual clients.

How can I enter a backup source with more than 250 Characters?

Backup sources may be entered into a file. Create the text file with all paths, under one another e.g. /opt/sesam/var/ini/large_source.txt). This means there is a fully qualified file or directory name on each line.

In the properties of the backup task is a flag Option 1 in the lower portion of the Expert Options. There, enter backup option -f {file} e.g.

 -f /opt/sesam/var/ini/large_source.txt

The sesam server reads this file during the backup and stores the additional files and directories, named in the source directories.

How can you specify an exclude list which is longer than 150 characters?

Exclude patterns my be entered into a File. Create a text file where all paths are listed one below the other (e.g. /tmp /opt/sesam/var/ini/large_exclude.txt/......) and save this file in a folder of your choice. During creation of a backup in the backup assistant there is under Option 1 (in the lower part the Expert Options) here please enter the folowing.

   -f /example/directory/text file.txt 

The sesam server reads this then during backup and saves also the here named directories.

Look also at Windows Exclude with File Pattern

In the attributes of the backup task there is a further option 1 in the lower portion of Expert Options. Here you can enter backup option -X {file}, e.g.:

 -X /opt/sesam/var/ini/large_exclude.txt

The sesam server reads these files and during backup and excludes the Pattern that correspond to the files, i.e. that have been excluded in the Exclude List for Backup Tasks.

Request Status or Daily Protocol (Log Files) returns 'Host SEPsesam is not allowed to connect or security problem for user'. What is going on?

This is usually a problem with CTRLD privileges. The error message:

scd-1136: Error: Host [{SEPsesam}] is not allowed to connect or security problem for user: [{user}].

There is a problem with the RMI GUI Server on SEPsesam Server. The system requires CTRLD privileges to complete sesam commands. Look in the directory <SESAM_VAR>/var/ini/sm_ctrld.auth. It is possible that there has been a change the computer name, the domain name, or the entry in sm_ctrld.auth.

Please check these directories and if necessary run 'sm_setup set_client {SEPsesam}'.

For example: In the event SEPsesam Server 'backup_1 is called:

 sm_setup set_client backup_1

If the server name has been changed it has to be reset.

The data lists do not appear in the Restore Wizard.

Please check if the CTRLD switch permission is set to <on>, if not please activate.

I can't type anything into the GUI.

This may occur if Java 1.3 is installed. If this is the case, please install SUN JRE Java version 1.4.2. After installation the Java link must be changed. In the <SESAM_ROOT>/bin/sesam directory the link java refers still to the old Java path. Change it to the new Java version and restart server portion of the Sesam GUI by entering:

./sm_main reload rmi

After SLES9 Unicode is the Standard Character Setting/Coding for SuSE Linux. All SEPsesam Versions for SLES9 and higher are in Unicode. Reset you system to Unicode or install a new toolkit.

Can the Master schedule be changed by a user?

Essentially, no. The most efficient method to handle this is for the user to convey his needs to the System Administrator. Upon initial installation the backup periods are established and entered by the Master GUI, this would be an appropriate time to have input from the users when any special backup and restore commands are required and have them administered centrally. If necessary a sesam server license could be added.

The sesam Master GUI can be installed on the client but this would give the client/user all privileges. Another solution, but one that requires more overhead, is to install a GUI with restricted privileges. Obviously, this requires more work on the part of the Administrator.

How do I set permissions for GUI Client, after Version 3.x?

Set GUI Permission

To set the GUI permission for a GUI client you may use the program <SESAM_ROOT>/bin/sesam/sm_setup with the syntax

sm_setup allow_gui -u (User) -c (Hostname of GUI client} -m (Permission: "admin" - all, "operator" - configure and start backups, "restore" - start restores)

Example for a Windows client with hostname "ruoffnix". User "cr" will get all permission for SEPsesam.

<SESAM_ROOT>/bin/sesam/sm_setup allow_gui -u cr -c ruoffnix -m admin

After this call the RMI Server receives the changes and restarts. It should now be possible to restart the GUI. Start the GUI from host "ruoffnix" user "cr".

Please be careful with upper and lower case and check FQDN or NOFQDN.

In case of an error you may get information of missing entries in "Current Messages" in an active SEPsesam GUI or by using <SESAM_ROOT>/bin/sesam/sm_info p

Every GUI Client must have permissions entered on the SEPsesam Server. Move to the directory <SESAM_ROOT>/bin/sesam and enter sm_setup. After this command you will receive information regarding all possible combinations.

The complete command should be as follows:

sm_setup allow_gui -u (System user that will be GUI administrator) -c (Hostname of server/client where the GUI will be opened) -m (Sets privileges for individual GUI users): "admin" - all, "operator" - creation and start of backups, "restore" - initiate restores)

SCSI Autoloader

[edit]

SuSE LINUX 10.0 Prof. Community Version

How can I install the freeware version of SEPsesam?

The installation can be accomplished using YasT. If there is no SUN Java currently running on your computer it will be automatically selected by YasT. In addition, the SEP sesam can be installed using the rpm -U <sesam serverpackage>.

Problems that may appear after installation with SEPsesam RPM Packets.

The following error messages appear when starting the Sesam GUI:

Connection to the Server sesamserver is denied.The last message reads:

java.rmi.RemoteException: Connection refused to host: [SEPsesam-Server]; nestedexeption is:java.net.Connect.Exception: Connection refused

Please verify if the SEPsesam RMI Server component is active and if the Port being used is correct.

 Program is closing.

If this message appears, first check the Java Version with the following command:

 /opt/sesam/bin/sesam/java -version

In the event the Java Version is not 1.4.2 or greater you will need to update the Jave files.

SBC_SMDR

Tape drives

I have an Exabyte single tape drive. But when I try to initialize it I can't find it in the list of devices. What's wrong"?

First, look at the media pool where you tried to enter the Tape Drive if there is no (X) number, (e.g. 0,1,2, etc.) behind 'Tape' it means the drive was not detected by sesam.You can also do this by moving to a command line prompt and enter slu scan.If the device is not listed the driver is not installed correctly. Go to the manufacturer's site or look for the appropriate driver on the Internet.When found download it to your computer's desktop. Then run the program to install the driver.Look at the media pool and you should now see Tape (0).Now begin to initialize tapes as described in the User Manual.

I have an Exabyte VXA172, and I have configured my backup per the standard instructions. When I try to perform a sesam backup I get the error message: skipping blocks. What does that mean?

Some manufacturers often require a different driver for each tape model they manufacture. In this case the VXA tape you initialized is not recognized by sesam in the Exabyte tape drive. Got to the GUI to tape type selection and change [VXA] to [EXA]. This will correct the problem.

Encryption

When encryption is selected before transferring data to the server, does sesam do a compression before it encrypts the data? Does it compress after it encrypts the data?

Data encrypted by the system and transferred to the server will be compressed if stored to tape using the manufacturer's compression algorithms. In the event it is stored to disk, data can either be encrypted or compressed, but not both.

Multiple Files

Will sesam recognize the fact that several users have saved the same file on separate clients and only backup one file, and various changes?

For example, if members of a workgroup are all sent the same Power Point Presentation and store it on their respective desktops, does it make separate copies or one with pointers to changes?

Sesam stores separate files for each user. We have thought about the alternative and unless there is a very large amount of data being stored in the files, any changes that might be made to the main data array would have to be stored in multiple areas or tapes and, if restore was required, more overhead would be required to restore the data.

Open Files - Will sesam backup open files?

Yes, SEP sesam provide the ability to backup open files for both Linux and Windows.

'For Linux'

sesam for Linux does backup open files.

'For Windows'

Using Volume Shadow Copy Service from Microsoft open files can be backed up. To accomplish open file backup a Windows Snapshot for the data and partition to be backed up is made and then the partition is be backed up. Databases should be backed up using the appropriate sesam database module.

System Requirements:

Client O/S: Windows 2003Sesam Server after Version 3.0Sesam Client after Version 3.0

Data Storage - Methodology

Is data collected for backup stored in a flat file or a database?

Data is stored in a flat file but information about the backup is stored in the sesam database including index pointers for fast and easy data recovery.

Reporting

Can special reports be generated regarding backups, time of backups, restores performed, etc.?

Yes. Specialized scripts may be written and inserted for execution both pre and post operations utilizing the commands execute_pre or execute_post. Due to stringent EU requirements for reporting, data security, and data restore, many desired reports may already be included without additional effort by the Administrator.

I would like to generate reports for both summary and detail for backups. Does sesam provide this extra granularity I require?

SEPsesam provides both a summary and detailed information about every backup run. In addition, the system can send a summary report over the SEPsesam notify interface to an email account after finishing the last backup. This is possible because SEPsesam summarizes the backup information daily. The time schedule and sequence is user or system manager selectable and maybe set be set to any 24-hour period. For example, if you specify a backup time of Monday 11 p.m. to 8 a.m. on Tuesday all backups performed within this window will be recorded as Monday.

How can I send SEP sesam Daily Protocol to an email account?

We recommend to configure Support Accountsand to use sm_notify templates from

{sesam_Root}\skel\templates\sm_notify.cmd

resp.

{sesam_Root}/skel/templates/sm_notify

Please copy into

{sesam_Root}/bin/sesam 

and modify to your needs, especially in the line:

sm_smtp -A sesam -M gv_dayfile: -a gv_prot: -s "Sesam backup status: "+%1+" "+%2+

-A {account} must be modifid to the required email account which was configured with the GUI.

After execution of last backup or command event the sm_notify interface will be called with module "ALL_JOBS_DONE" and the SEP sesam Daily Protocol will be sent to specified email account.