eDirectory DSMASTER recovery in lab

I've got a rather simple eDirectory tree setup:
servers srv1, srv2 and srv3, all eDirectory 9.2.8 on SLES15 (virtual machines in Vmware)
There's only the root partition, srv1 has master replica, srv2 and srv3 r/w replicas, rolling forward logs are not activated.
I wanted to try a disaster recovery, in case all servers are lost.
So I backed up srv1 with dsbk as described at www.netiq.com/.../bn4jkts.html .


dsbk backup -f /root/[hostname].dsbk -l /root/[hostname].dsbk.log -b -t -w -e [nicipassword]


Then I set up a new VM in an isolated environment with the same os, eDirectory and ip address as srv1.
I set up a dummy tree, then first restored nici:

dsbk restore -f /root/backup/srv1.dsbk -l /root/restore_nici.log -e [nicipassword]

This did not raise any errors, then I restarted eDirectory and restored the tree:

dsbk restore -f /root/backup/srv1.dsbk -l /root/restore_tree.log -r -a -e [nicipassword] -o

|==================DSBackup Log: Restore================|
Log file name: /root/dsbk_restore_tree.log
Restore started: 2024-2-6'T15:32:52
Restore file name: /root/backup/srv1.dsbk
Restoring file /var/opt/novell/eDirectory/data/dsnici.bak
NICI RESTORE: "NICI Files have been Restored Successfully"
Starting database restore...
Restoring file /root/backup/srv1.dsbk
Server: \T=TREE\O=service\CN=srv2
   Replica: \T=TREE
      Status: ERROR = -626
Server: \T=TREE\O=service\CN=srv3
   Replica: \T=TREE
      Status: ERROR = -626
Error!: -626
Warning! Roll forward logs have been turned off and reset to the default location
Database restore finished
Completion time 00:00:05
1 Error!

/var/opt/novell/eDirectory/log/ndsd.log:
Command line   restore -f /root/backup/srv1.dsbk -l /root/dsbk_restore_tree.log -r -a -e XXXX -o
Processing command line
Log file name: /root/dsbk_restore_tree.log
Restore started: 2024-2-6'T15:32:52
Restore file name: /root/backup/srv1.dsbk
Restoring file /var/opt/novell/eDirectory/data/dsnici.bak
NICI RESTORE: "NICI Files have been Restored Successfully"
Starting database restore...
Restoring file /root/backup/srv1.dsbk
Error!: -626
Warning! Roll forward logs have been turned off and reset to the default location
Database restore finished
Completion time 00:00:05
1 Error!
DSBK error! -626

The error is expected, because the other servers srv2 and srv3 are not available in the lab.
But ndssat says "Failed to obtain a NetIQ eDirectory Server connection to srv1.O=novell.DUMMY or NetIQ eDirectory Server is not running"
ndsrepair -P says "The Directory Services Database is closed" and doesn't display any partitions.
How do I proceed from here to get a running eDirectory again? I can see, that there are RST files in /var/opt/novell/eDirectory/data/dib.
I think I have to activate the recovered dib and remove the other servers, also called DSMASTER recovery. But how?
I couldn't find this in the documentation, any hints or links are more than welcome!

Parents Reply Children
  • 0 in reply to   

    Thank you for the tip! I had to add the parameter -v to your suggested command to skip verification, but now the tree is restored and working, as far as I can see.

    dsbk restadv -o -k -v -l /path/to/logfile

    I also removed the replicas of the other servers using ndsrepair -P -Ad and deleted all objects referencing the old servers using iManager.

    I had tested this some time ago in a single server setup, where these additional steps were not necessary.