ignite backup

[Tom Gore]

Do you have to log on as "root" to run the ignite backups (make_recovery -A) or can they be run by anyone?

Thanks,
Tom

[Balaji N]

i guess yes. dont have a machine around to check and tell.

-balaji

[Robert-Jan Goossens · Accepted solution]

Hi,

You have to have root permission to execute a make_recovery.

Robert-Jan.

Ps,
If You configure sudo you could let anyone you like execute a make_recovery.

[KCS_1]

hi,

I am sure that this command only running by root,because when I was running this command by general user,I got error message from the command like this:

$ ./make_tape_recovery
ERROR: Must have root capability to use make_net_recovery or
make_tape_recovery
$


have a good time!

[Pete Randall]

Tom,

I had to try it myself to be sure, but yes, you must be root. You can try the command as a regular user and you'll get an error message.

Pete

[John Bolene]

Also think about this....

There are quite a number of files that are only readable by root, so root is required to do this backup.

[Steven E. Protter]

Here is a good working script.

#!/usr/bin/sh
/opt/ignite/bin/make_tape_recovery -Av -x inc_entire=vg00


make_recovery is obsolete, and should not be used.

I have this code inserted in a script called /usr/contrib/bin/rec.tape.sh

cron runs it. Every Friday at 2 p.m. we load tapes, and the system takes care of teh rest.

SEP

[Tom Gore]

Thanks to all. I was hoping for a different answer. Our operators will be running the backup and I did not want them to log on as root if they did not have to. Oh well, such is life.

[Duda_1]

I have the same problem. I need to give to my operator some way to make ignite backups without to give hin the root's password.
Somebosy has a script it can make automatic logon of root?
I mean, some lines to put in .login to make the su - root "password" and then a shell like a menu and logout at the end.

(su - root "password" doesn't work)
Thanks!

[Duda_1]

Hi!!!
I got the answer!!!
Create a special user for backup then edit /etc/passwd (vipw) and change "user id UID" to 0 (same as root). Save changes and READY! try again :)

[Patrick Wallek]

NO NO NO!!!! Very bad idea! Having multiple users with a UID of 0 is a BIG SECURITY HOLE!!!!!!

You would be better off using a product like sudo.

http://www.courtesan.com/sudo

Sudo allows you to grant normal users certain commands and lets those users run the commands as root, but without knowing the root password.

[Bill Hassell]

Please do NOT create duplicate UID=0 user logins. There is a long trail of trashed computers caused by a user not remembering that they were root. The following simple command:

rm -rf *

will destroy any system when run by root. You don't want operators to run the lengthy make_tape_recovery command since they WILL make a mistake and call you at 3am to ask what to do. To allocate operator privileges, you should install sudo and carefully configure it as to what scripts the operators are allowed to use. An Ignite backup script should first check that there is a writable tape (mt -f /dev/.... status), then run the Ignite process with the -I (interactive restore) and -v (verbose) options. make_tape_recovery makes a log of the backup session.

NOTE: The obsolete make_recovery has very different options. Don't use what know about the old options with the new program. Here's a recommended set:

make_tape_recovery -v -I -a /dev/rmt/0mn -x inc_entire=vg00