Backing Up Data

There are two ways to back up CA Directory data. The fastest and safest way is to back up the file system. You can also export the data to an LDIF file.
cad1214
There are two ways to back up CA Directory data. The fastest and safest way is to back up the file system. You can also export the data to an LDIF file.
Comparison of Backup Methods
The following table contrasts each backup method:
Backup Method
Status of DSA
Efficiency
Portable Backups
Offline backup using OS tools
Requires DSA to be stopped.
Fastest method.
Backup can be scheduled using OS tools like cron.
Does not produce portable backup.
Offline backup using Directory tool (dxdumpdb)
Requires DSA to be stopped.
-
Produces portable LDIF file.
Online backup using 'dxserver onlinebackup' and console 'dxdump' 
Backup takes place while the DSA is running.
Note
: The backup can be scheduled using dxdump command only.
Slowest method.
Does not produce portable backup.
File System Backup
You can use a file system backup to reflect the changes that are made to CA Directory applications and program scripts.
A file system backup should include the following files:
  • Operating system files
  • CA Directory startup scripts
  • CA Directory installation files
  • CA Directory configuration files
  • CA Directory datastore files
  • User information, including:
    • Environment (DXHOME)
    • User names and passwords
Example of File System Backup Plan
Company A is a large multinational bank that uses CA Directory as an authentication repository.
Their directory contains hundreds of millions of user entries and uses eight Solaris computers. Each computer has four data DSAs and several layers of router DSAs on it. Company A runs a 24-hours-a-day, 7-days-a-week operation with strict SLAs relating to availability, and a small weekly maintenance window.
At Company A, the directory is managed by a Directory team. The IT infrastructure is handled by a different team.
The IT team automatically backs up the file system once a day at 4 a.m.
Using an LDIF file to Back Up and Load Data
LDIF files
are text files that store directory information in LDIF. You can use LDIF files to transfer directory information between LDAP directory servers or to describe a set of changes to be applied to a directory.
CA Directory comes with the DXdumpdb tool, which lets you unload data from a datastore into an LDIF file. You can then later load the data from the LDIF file into a datastore to recover the directory content.
Back Up a Directory to an LDIF File
To back up a directory to an LDIF file
  1. Log in as the user
    dsa
    (on UNIX) or the DXserver administrator (on Windows).
  2. Use the following command to back up the datastore to the LDIF file:
    dxdumpdb -f filename -z dsaname
    • -f
      filename
      Specifies the file path and name where the data is dumped.
    • -z
      Specifies that DXdumpdb dumps from the copy of the datastore that is produced by the console command dump dxgrid-db.
    • dsaname
      Specifies the name of the DSA.
How to Load Directory Data from an LDIF File
You can load data from an LDIF file in two ways, as follows:
  • Load an entire datastore from an LDIF file, using the DXloaddb tool. For more information, see dxloaddb in the
    Reference
    section.
  • Load some data into an existing datastore, using the DXmodify tool. For more information, see dxmodify in the
    Reference
    section.
Online Datastore Dump
You can take a consistent snapshot copy of the datastore of a running DSA (an online dump). The DSA completes any pending updates before starting the online dump. This action does not impact the ability of the DSA to perform any operation while the backup is running.
The datastore file is copied to a file with extension starting .z, so the database file is
dxgrid-db
.zdb
Each dump overwrites the previous backup file. If you want to save the backup file, copy it to another location before the next dump.
The command has the following format:
dxserver onlinebackup {dsaname}
See dump dxgrid-db Command for reference.