Power

 View Only
  • 1.  Backing up and recovering of EIM data

    Posted Thu January 11, 2024 02:00 PM

    My apology if this is not the correct location to have this kind of a discussion.

    I'm trying to better understand how to recover missing EIM entries when doing a MIMIX role swap to our DR server. It seems that whenever we do a role swap that there are always missing EIM entries that I have to add manually. I'm thinking there has got to be a better way to do this.

    Doing a search, I came across the following IBM article. 
    https://training.ops.bsb:8001/goanywhere/auth/Login.xhtml

    If I'm reading this correctly it seems like there are multiple ways to do this. One of them that seems to be the easiest to do is to use the command CPYTOLDIF to backup the data into an .ldif file, send it to the DR server, and use the command CPYFRMLDIF to load all the EIM entries. I don't know if I'm over thinking things, but is it that simple? Should the LDAP server be up or down when doing the CPYFRMLDIF command or does it matter? We are planning another role swap on Wednesday; January 17th and I'm thinking that is what I'd like to try. 



    ------------------------------
    Michael Soucy
    ------------------------------


  • 2.  RE: Backing up and recovering of EIM data

    Posted Fri January 12, 2024 01:36 AM

    Dear Michael

    Is the OS involved IBM i ?  If so, I find this information :  Backup and recovery considerations for EIM at  https://www.ibm.com/docs/en/i/7.4?topic=i-backup-recovery-considerations-eim    that mentions the use of CPYTOLDIF and CPTFRMLDIF commands without any more details.   You should try it in a straightforward way to see if it works or not.  It may be as simple as it describes.

    This one discuss the use of Replica LDAP Server :  LDAP replication with emphasis on EIM data at  https://www.ibm.com/support/pages/ldap-replication-emphasis-eim-data  



    ------------------------------
    Chance favors only the prepared mind.
    -- Louis Pasteur
    ------------------------------
    Satid S.
    ------------------------------



  • 3.  RE: Backing up and recovering of EIM data

    Posted Fri January 12, 2024 09:16 AM

    My first suggestion would be to contact Mimix and ask them for their recommendations.  You pay a pot of money for support so you might as well take advantage of it.

    My second suggestion would be to try the IBM i community at https://community.ibm.com/community/user/power/communities/community-home?CommunityKey=f0246bc4-08f3-43c5-a7f8-b6a64d387894



    ------------------------------
    Robert Berendt IBMChampion
    ------------------------------



  • 4.  RE: Backing up and recovering of EIM data

    Posted Fri January 12, 2024 09:50 AM

    Hi Robert,

    Thank you for your reply. It's funny this morning during a team meeting one of my coworkers asked why we don't replicate the EIM entries with MIMIX. I wasn't sure why. Like you recommended I'll open a case with Precisely and ask them about it. 

    I'll also check our the IBM i community like you recommended. Thank you for sharing the link. 

    -Mike



    ------------------------------
    Michael Soucy
    ------------------------------



  • 5.  RE: Backing up and recovering of EIM data

    Posted Fri January 12, 2024 02:36 PM

    Hi Robert,

    In regards to contacting Precisely about using MIMIX I found an article on their website. It reference an IBM redbook called "Understanding LDAP Design and Implementation" . The article goes onto say that both Precisely and IBM recommend not using MIMIX to replicate the LDAP data. Instead it recommends using IBM's own internal replication. I think it might be worth looking into the future. I think for next week when we do our DR role swap I'll use some of the tools I have already for adding in missing entries. 

    Thank you,

    Mike



    ------------------------------
    Michael Soucy
    ------------------------------



  • 6.  RE: Backing up and recovering of EIM data

    Posted Fri January 12, 2024 03:08 PM

    Good find on that document.  Hope you grind this out.



    ------------------------------
    Robert Berendt IBMChampion
    ------------------------------



  • 7.  RE: Backing up and recovering of EIM data

    Posted Thu February 29, 2024 10:27 AM

    Here is the solution. We do three mimix switches a year, Have around 4000 SSO users, About 300 added and removed a month  (High Staff Turnover)

    SAVLIB LIB(QUSRDIRDB)  

    SAVLIB LIB(QUSRDIRDB) DEV(*SAVF) SAVF(SSO/USRDIRDB)

    RSTLIB SAVLIB(QUSRDIRDB)

    eq RSTLIB SAVLIB(QUSRDIRDB) DEV(*SAVF) SAVF(SSO/USRDIRDB) >>>>> Copies the New Users missing

    I save both to a save file in a private Library , mimix replicates to DR , - At time of DR , - do the save , -  before the switch do the restore on DR system

    Or more often if you prefer

    All your Mappings will be there as per Prod,  Mimix does the profiles on IBMi already. 



    ------------------------------
    Kevin Grimwood
    ------------------------------



  • 8.  RE: Backing up and recovering of EIM data

    Posted Thu February 29, 2024 10:27 AM

    SAVLIB LIB(QUSRDIRDB) DEV(*SAVF) SAVF(SSO/USRDIRDB) - Production  - Mimix to DR

    On DR

    RSTLIB SAVLIB(QUSRDIRDB) DEV(*SAVF) SAVF(SSO/USRDIRDB) >>>>> Copies the New Users missing mappings 



    ------------------------------
    Kevin Grimwood
    ------------------------------



  • 9.  RE: Backing up and recovering of EIM data

    Posted Thu February 29, 2024 11:31 AM

    Hi Kevin,

    Thank you for sharing this information. I'll add this to my procedure for doing a MIMIX role swap. We are planning on doing a role swap near the end of April. I'm assuming that the LDAP server is up and running when you do the restore. My predecessor recommended disabling the LDAP server prior to the role swap on the target server and then enabling it after the swap. 

    Thank you,

    Mike



    ------------------------------
    Michael Soucy
    ------------------------------