Chapter 10. Enabling members of a group to back up Directory Server and performing the backup as one of the group members

Prerequisites

• The entry ou=groups,dc=example,dc=com exists in the database.

Verification

• Display the ACIs set on the cn=config entry:

  # ldapsearch -o ldif-wrap=no -LLLx -D "cn=directory manager" -W -H ldap://server.example.com -b cn=config aci= aci -s base*
  dn: cn=config
  aci: (target = "ldap:///cn=backup,cn=tasks,cn=config")(targetattr="*")(version 3.0 ; acl "permission: Allow backup_users group to create backup tasks" ; allow (add, read, search) groupdn = "ldap:///cn=backup_users,ou=groups,dc=example,dc=com";)
  aci: (target = "ldap:///cn=config")(targetattr = "nsslapd-bakdir || objectClass")(version 3.0 ; acl "permission: Allow backup_users group to access bakdir attribute" ; allow (read,search) groupdn = "ldap:///cn=backup_users,ou=groups,dc=example,dc=com";)
  ...

Prerequisites

• You enabled members of the cn=backup_users,ou=groups,dc=example,dc=com group to perform backups.
• The user you use to perform the backup is a member of the cn=backup_users,ou=groups,dc=example,dc=com group.

Procedure

• Create a backup task using one of the following methods:

  • Using the dsconf backup create command:

    # dsconf -D "uid=example,ou=People,dc=example,dc=com" ldap://server.example.com backup create

  • By manually creating the task:

    # ldapadd -D "uid=example,ou=People,dc=example,dc=com" -W -H ldap://server.example.com
    
    dn: cn=backup-2021_07_23_12:55_00,cn=backup,cn=tasks,cn=config
    changetype: add
    objectClass: extensibleObject
    nsarchivedir: /var/lib/dirsrv/slapd-instance_name/bak/backup-2021_07_23_12:55_00
    nsdatabasetype: ldbm database
    cn: backup-2021_07_23_12:55_00

Verification

• Verify that the backup was created:

  # ls -l /var/lib/dirsrv/slapd-instance_name/bak/
  total 0
  drwx------. 3 dirsrv dirsrv 108 Jul 23 12:55 backup-2021_07_23_12_55_00
  ...