[OpenAFS] Backup-strategy

Klaas Hagemann kerberos@northsailor.de
Fri, 13 Dec 2002 15:34:50 +0100


every user has its own volume as his home directory.
They only have the write option on their home directory, so that the cannot
administer it.
If they get managed to change the administer rights of a subdirectory, it
would have no affect, because other users won't be able to reach it.
And they do not have a shell to make these things work by standart.
If they change the acl of a subdirectory of their home directory, they can
do that, but it don't need to be backed up.

We use a large HP Surestore, or something like that and Ommniback, so we
want to use dumps for making backups.
Since full dumps are easier to handle than incremental dumps, we want to
take central full dumps. For getting all the date to the central, i want to
use some delta level transfer of afs (like vos release).

That's why i want to have something like read only replicas central, but
they should not be accessable by the users.

Thanks
Klaas
----- Original Message -----
From: "Todd M. Lewis" <utoddl@email.unc.edu>
To: <openafs-info@openafs.org>
Sent: Friday, December 13, 2002 3:16 PM
Subject: Re: [OpenAFS] Backup-strategy


> Users have implicit administer rights in any directory they own,
> regardless of whether they are listed explicitly on the directory's ACL.
> They may not be allowed to change ACLs; that doesn't mean they don't do
> it. :-)
>
> Wasn't there some discussion earlier about changing that behavior (of
> OpenAFS that is, not of users)?
>
> Klaas Hagemann wrote:
> > Todd,
> >
> > i thought of making backup using the vos dump and vos restore commands
and
> > save the dumps on disk.
> > So i know very well, that i do not save ACLs, users are not allowed to
> > change the acl here.
> >
> > Thanks,
> > Klaas
> > ----- Original Message -----
> > From: "Todd M. Lewis" <utoddl@email.unc.edu>
> > To: <openafs-info@openafs.org>
> > Sent: Friday, December 13, 2002 1:25 PM
> > Subject: Re: [OpenAFS] Backup-strategy
> >
> >
> >
> >>Klass, if you're doing incremental file transfers, how are you
> >>transfering the ACL changes?  Or am I missing something?
> >>
> >>Klaas Hagemann wrote:
> >>
> >>>I considered using the .backup volumes, too, but when i dump these
> >>> volumes i have incremental dumps as well.
> >>>
> >>>The goal is to get an incremental file transfer using afs to the
central
> >>> and beeing able to do full dumps there.
> --
>     +----------------------------------------------------------------+
>    / Todd_Lewis@unc.edu                  http://www.unc.edu/~utoddl /
>   /(919) 962-5273  Linux - It's now safe to turn on your computer. /
> +----------------------------------------------------------------+
>
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info