Mastering Exchange 2000 and Active Directory with Tivoli. Bruno Friess

Transcription

1 Mastering Exchange 2000 and Active Directory with Tivoli Bruno Friess Exchange 2000 Overview STORE.EE MTA xapi MAPI DB DBDB IS Active Directory Forest Communication Layer SMTP POP3 IMAP IIS No Exchange Directory Exchange Backup without AD Mailbox is an attribut of an user Mailboxes can be transferred

2 Exchange 2000 Overview STORE.EE (Web Storage System) Storage Group ESE Instance LOG LOG LOG EDB EDB STM STM Information Store One STORE.EE Service for all DBs ESE = Extensible Storage Engine Up to 4 Storage Groups Up to 5 databases per Storage Group One Log per Storage Group Mount/Dismount from single DBs 1 Database consists of 1 database file (x.edb) 1 streaming file (x.stm) 1 log file (with contents from other DBs) 1 patch file Backup types What s new for backups? Backup/Restore of single databases MSExchangeIS must be started during Restore System Attendant is not in use Database must be dismounted during restore Parallel Backup/Restore Type Copies DB Copies logs Truncates logs Full Copy Incremental Differential circular logging off

3 TDP for Exchange - Backup process tdpexcc backup * full /tsmoptfie=galaxy.opt /excserver =galaxy Backup API Call ESE Backup-Mode Begin Backup Backup calls the IS, that a backup process starts Backup type delivered IS informs ESE and selects the backup type for each database ESE creates one patch file New generation of log files (full/copy) Flushing of contents into the database database pages are requested sequentially building a checksum for each page Backup completed ESE Normal-Mode End Backup Full/Copy/Incr/Diff/DBCopy All pages are processed Log and patch files are saved New generation of log files (incremental/differential) Old logs are deleted Closing Backup API Restore process tdpexcc restore oxford,london full /tsmoptfile=galaxy.opt /excserver=galaxy Database Offline ESE in Restore-Mode Begin Restore Backup tool or administrator dismounts the database IS informs ESE that restore starts Creation of the restore Storage group Backup tool copies EDB/STM from tape to disk Log and patch files are copied to the specified log dir Restore completed Params: /mountdb /partial /recover /templogrestorepath ESE in Normal-Mode Mounting of the database to the storage group Deletion of the temporary Log and patch files End Restore Logs are applied to databases patch files are applied to databases existing logs are applied as well Deletion of the restore storage group

4 Do you work with LAN or SAN? enablelanfree yes TSM Client 1) Meta data 3) Write data LAN TSM server TAPE DATA 2) Read Data FC DATA SAN FC Client moves data from disk to tape Client disk can be SCSI or FC Server manages backups Eliminates network bandwidth Frees up host cycles High speed Scalable SAN Part 2 Is it fast??? Fast-Ethernet 18GB/h Giga-Ethernet 35GB/h Fibre Channel 45GB/h If you have better results then you have better hardware. No NAS please!! (Recommendation from Microsoft)

5 Exchange 2000 Active-Active Cluster clusternode yes Private Network C: local: Zaphod.demo.com zaphod.opt Local Area Network Public Network C: local: Marvin.demo.com marvin.opt virtual: Galaxy.demo.com galaxy.opt Exchange: galaxy_exch.opt galaxy_full.cmd galaxy_incr.cmd R: S: FC Enclosure tdpexc.cfg virtual: Starwars.demo.com starwars.opt Exchange: starwars_exch.opt starwars_full.cmd starwars_incr.cmd Cluster Part 2 TCP/IP From TSM Server Private Network (NIC for Heartbeat) C: local: Zaphod.demo.com zaphod.opt virtual: Galaxy.demo.com galaxy.opt Exchange: galaxy_exch.opt galaxy_full.cmd galaxy_incr.cmd Public Network R: tdpexc.cfg port port 1502 Attention: 1503 is occupied from Win2k is a virtual address Win2k doesn t work with this IP TSM contacts the client via Session opens with port 1502 For Exchange: port port 1505

6 Dependency to the Active Directory Exchange 2000 uses the AD as directory database and information storage. There is a one-to-one relationship between AD forest and Exchange organization. Exchange is a Schema extension in the AD Not all attributes are replicated!! Clients must have access to the global catalog Configuration data is stored in the AD and IIS A D C Exchange 5.5 Server Have you ever deleted something?? 01:00 am Incremental Backup of all DCs 03:00 am Incremental Backup of Exchange Server Galaxy 06:00 am TSM backup db, reclamation, expire inv starts 08:34 am Admin Joe has the job to delete user Paul in the AD 08:42 am File replication has started; Paul is deleted on all DCs 08:44 am Paul s mailbox is deleted from the Exchange IS 08:45 am Paul s settings in the Terminal Server are deleted 08:45 am Paul s data is deleted in the companies SQL 2000 database 08:46 am Paul s security information (Key Management) is gone 09:10 am Paul s manager calls Joe to cancel the job: Paul stays in the company Where do you start the restore today????

7 Restore of the Active Directory only Non-authoritative Is used to restore the Active Directory as an older version and update this version via normal replication. Howto: Check the consistency with q systemobject As usual, the whole system state must be restored Since Version 4.2 multiple versions of the system state are supported (thanks to the TSM development) Start the Win2k machine in Safe Mode Issue restore systemobject Choose ActivateKey/Overwrite/Original Location Reboot the machine in normal mode Voilà SG Restore of the AD Part 2 only Authoritative Is used to restore the Active Directory as the master version and update all dependent DCs via normal replication. Important: This cannot be done with TSM directly Howto: Check the consistency with q systemobject As usual, the whole system state must be restored Issue restore systemobject Choose ActivateKey/Overwrite/Original Location The files are in the correct directory and the job from TSM is over Do NOT reboot the Win2k machine The nightmare can start... SG

8 How to find the deleted information? (Original text from Microsoft article Q258310) Step 1 What was the distinguished name of Paul?? Very easy Start ldp.exe and connect to the DC (type connectionless) 2. Bind the correct AD version 3. Start a search in the base DN with dc=<mydomain>,dc=<com> 4. One of maybe hundreds of entries could be: B:32:18E2EA80757FG11D2B9AA00F43T88KO93F8:CN=Deleted 5. Copy the data following the second colon 6. Go back to the main view click Search, type <WKGUID=18E2EA80757FG11D2B9AA00F43T88KO93F8> Don t forget the <> 7. In the filter box type (objectclass=*) 8. In the Controls box enter Clear the Value box, set the Control Type to Server, click the critical check box 10. In the search call type section select Attributes only = Cleared 11. Click ok to close the search options dialog box Here comes the result: the DN of Paul was cn=paul_simon,ou=nt,ou=australia,dc=demo,dc=com. Restore of the AD object and all dependent databases Step 2 Start ntdsutil and enter the command authoritative restore restore subtree cn=paul_simon,ou=nt,ou=australia,dc=demo,dc=com. Problems: Tombstone date, USN (Update Sequence number), Type mismatches Step 3 (documented in Q216359) Restore the Sysvol folder and publish it Mapping of GUID and the restored object in Step 2 Manually copy the mapped folder to the orginal place Step 4 Restore the Exchange DB (first you have to find the mailbox of Paul) Map the mailbox to the restored user Restore the Terminal Server Settings Restore the SQL 2000 database SG SG and 6265 Would you ever do this???

9 Principles of the single mailbox restore Or: How long do you want to keep a deleted ?? Use the deleted item recovery from Exchange! Doesn t use so much storage The user itself can restore the mail The problem to map SID to GUID is eliminated Together with an archiving tool!!! Another way: Restore of the database to another Exchange server is necessary Export a PST file and import this to the production system This DR Server cannot be a member of the production AD forest The DR Server needs its own AD and DNS More complicated than with Exchange 5.5 Brick Level Backup or MAPI Backup is still NOT supported from Microsoft. Complementary product Exchange 2000 Server CommonStore TSM CM CM OD Archiving of mail messages: Attachements and/or body of an Administrator defined, fully automated Based on flexible policies Integrated indexing Retrieval/Viewing: From Outlook 2000 (web link, URL) Without Outlook/Exchange via web Windows 2000 Windows NT AI S/390 HP-U Sun Solaris Windows 2000 Windows NT AI S/390 Windows 2000 Windows NT AI HP-U Sun Solaris (product works like CS for Domino)

10 Thank you!!! FINISH Any questions???