Su-log-2009-03-02

page_title: Su-log-2009-03-02 page_touched: 20090310213636 old_text: ==Monday== * Fix zimbra backup wrapper script at NCSD * Read Mail * Fill out self-assessment * Remedy request to have hedge04 moved into ldap/shib firewall zone * netdb entries for ldap-testo0 and ldap-testo1 * removed ldap-test3 from puppet, nessus scans, nagios and tripwire. * Directory meeting minutes

==Tuesday== * Reset the password for dave01/02 * Try and get procurement-test to build and fail. * Send Craig Bernstein a note about building snsr-ipt3. * Create ldap environments page. * Debug problem with zimbra cold backup at NCSD

==Wednesday== * cmr for vppa ipmi * cmr for snsr-ipt2 quarterly updates * uninet update * Manually run ldap-log * Work up pushing git packages up to git.stanford.edu * Help NCSD get a Windows system to join the domain * Figure out how really cool ssh tunneling is.

==Thursday== * Read mail * tripwire * Note to Anne P about CMR and Remedy reports/searching. Actually this task was to figure out how to better use the CMR and Remedy systems for looking at historical data. I spent some time looking at the basic functions and did not see the need to ask questions of Anne yet. ;CMR Searches :There are two searches available from the CMR web interface: Request and Task. The Task search is useful when searching for an individual request. To look at a group or class of requests the Request search is best. The default search is to look for Open items and the check box to include Closed items is easy to over look. But, the interface is straight forward and does allow for searches by host. ;Remedy Searches :As always, Remedy is more of a pain in the neck. First, it is not possible to use the mid-tier application and run Reports. Reports can only be run with the Remedy client. It is possible to search for a group of tickets. The search lists are returned in a window at the top of the normal Incident view. It is easy to miss the list and think that nothing has been returned when the Search button is clicked because the initial list window is tiny. Expanding the window is the simple solution, but it is easy to over look. * Tried again to access pchg-web2-ipmi.console.sunet to no avail. Waiting on networking. * db-defaults create shared git repository backport to lenny * db 4.7 create shared git repository backport to lenny * test slapadd on ldap-unixdev1 * build 2.4.15 openldap push to remote git repo upload to stable-ldap

==Friday== * Look at disk space problem on ldap-dev1 * Study pam-krb5 problem at NCSD and decide that it is a pam-openafs problem instead. Then figure out that the kadmin interface used by User Maintenance that I write is really trash. Need to replace it with a remctl interface. * Figure out what a dstring is and how you quote it to file a bug report with openldap. * Talk to Sean H about VM problem * afs restore Get Tilak to create an account on barsprod4 Account is created initial with a local home directory because the account creation script tries to create the home directory and write some files there which doesn't work for AFS. Once the account is created then the passwd file can be modified to have the correct home directory path in afs. Make sure the uidnumber is the correct uidnumber for the new account. Command to login to barsprod4 rlogin -x -f -l whm barsprod4

==Saturday== * Installed new cert on events-prod * Starting afs balance space on some servers because of space problems.

===afs restore work=== Path: /afs/ir/service/calendar/data File: calendar-server.calendar-db.tar.*.b2z Date: Feb 28, 2009 AFS Volume: service.calendar.data

rlogin -x -l whm barsprod4 cd / ./set_adsm3 cd /afs/ir/site/leland/backups/ dsmcafs

tsm> restore -su=y -pitd=02/28/09 service.calendar.data/* restore.dir/service.calendar.data.restored/ Node Name: RESCUE3 Session established with server ADSM_3: AIX-RS/6000 Server Version 5, Release 2, Level 3.0 Server date/time: 03/08/09 00:01:41 Last access: 03/07/09 11:48:39 Restore function invoked. ANS1247I Waiting for files from the server... Unsuccessful ANS4028E Error processing '/afs/ir.stanford.edu/site/leland/backups/restore.dir/service.calendar.data.restored/migration': cannot create file/directory entry Interrupted ANS1114I Waiting for mount of offline media.

tsm> restore -su=y -pitd=02/28/09 service.calendar.data/*z restore.dir/service.calendar.data.restored/ Node Name: RESCUE3 Session established with server ADSM_3: AIX-RS/6000 Server Version 5, Release 2, Level 3.0 Server date/time: 03/08/09 00:09:06 Last access: 03/08/09 00:01:41 Restore function invoked. ANS1302E No objects on server match query

tsm> restore -su=y -pitd=02/28/09 service.calendar.data/*2 restore.dir/service.calendar.data.restored/ Node Name: RESCUE3 Session established with server ADSM_3: AIX-RS/6000 Server Version 5, Release 2, Level 3.0 Server date/time: 03/08/09 00:12:20 Last access: 03/08/09 00:09:06 Restore function invoked. Interrupted ANS1114I Waiting for mount of offline media. Unsuccessful ANS4028E Error processing '/afs/ir.stanford.edu/site/leland/backups/restore.dir/service.calendar.data.restored/calendar-server.calendar-db.tar.0.bz2': cannot create file/directory entry Interrupted ANS1114I Waiting for mount of offline media.

For some reason I cannot obtain AFS tokens on barsprod4. The version of aklog does not appear to be creating tokens. There is no tokens command do it is a bit tough to tell, but I am not able to create files in my home directory. I can successfully ksu, but following this up with aklog appears to do nothing. To get past the problem for the restore I have opened up the directory to system:anyuser. This appears to have solved the problem.

tsm> restore -su=y -pitd=02/28/09 service.calendar.data/*2 service.calendar.data.restored/

SUDailyLogs 23. row