Backup is currently a pretty hot topic - but most of the discussion I've seen has been around backup of the AD and not about files on a share. However, if I'm backing up the files in a Samba share [and lets assume it's a Windows share, with the Windows ACLs] what's a good way to capture the files, AND the ACL data so I could drop that data back on another samba share, if disaster strikes and maintain the ACL data, as best possible. Having the files alone is nice, but if it takes me 6 additional hours [or a couple of days] to go through things and set/reset all the ACL's so people have the right access, well that's a problem. [Or at least a problem I need to plan for...] [And yes, I understand that the AD back-end-data has to stay consistent for the ACLs to apply properly, but lets assume we're going to end up restoring the files to another share on a different AD server in the same domain.] Does rsync work? Duplicati? [my favorite] Thoughts or suggestions? [A search didn't return much.] TIA -Greg
On 3/7/19 5:27 PM, Gregory Sloop via samba wrote:> Backup is currently a pretty hot topic - but most of the discussion I've seen has been around backup of the AD and not about files on a share. > > However, if I'm backing up the files in a Samba share [and lets assume it's a Windows share, with the Windows ACLs] what's a good way to capture the files, AND the ACL data so I could drop that data back on another samba share, if disaster strikes and maintain the ACL data, as best possible. Having the files alone is nice, but if it takes me 6 additional hours [or a couple of days] to go through things and set/reset all the ACL's so people have the right access, well that's a problem. [Or at least a problem I need to plan for...] > > [And yes, I understand that the AD back-end-data has to stay consistent for the ACLs to apply properly, but lets assume we're going to end up restoring the files to another share on a different AD server in the same domain.] > > Does rsync work? > Duplicati? [my favorite]When using tar/rsync tools you should tell those that you want to backup extended attributes (and Podix ACLs), for example with a tar: --xattrs --xattrs-include=security.NTACL --acls This works for me for small backups. For larger ones with deduplication I use borg. rsync should work too (as root) and you should read rsync man page of the --xattrs option if backup is run as non root. You should try your options with a test restore, and I recommend having some kind of filesystem snapshot ability if your backups run when users are using the shares.> > Thoughts or suggestions? > [A search didn't return much.] > > TIA > -Greg >
I'd like to re-flag this. I got a single reply - and wondered if there were any other approaches that I haven't considered - or if someone wants to detail their process. Thanks again -Greg Backup is currently a pretty hot topic - but most of the discussion I've seen has been around backup of the AD and not about files on a share. However, if I'm backing up the files in a Samba share [and lets assume it's a Windows share, with the Windows ACLs] what's a good way to capture the files, AND the ACL data so I could drop that data back on another samba share, if disaster strikes and maintain the ACL data, as best possible. Having the files alone is nice, but if it takes me 6 additional hours [or a couple of days] to go through things and set/reset all the ACL's so people have the right access, well that's a problem. [Or at least a problem I need to plan for...] [And yes, I understand that the AD back-end-data has to stay consistent for the ACLs to apply properly, but lets assume we're going to end up restoring the files to another share on a different AD server in the same domain.] Does rsync work? Duplicati? [my favorite] Thoughts or suggestions? [A search didn't return much.] TIA -Greg
Hi Greg, I'm assuming the reason for this was that Robert's answer pretty much covered it. Most backup tools still in development, and I'm including rsync here, do support extended attributes, so you're covered when it comes to ACL. The main question becomes if you need the backup itself to be encrypted, and if yes you might want to look at alternatives to rsync. I heard good things about Borg that Robert mentioned, Rowland seems to use it, too. Personally, I currently use Restic which is similar to Borg but supports S3 type storage. Hope this helps. -Viktor On 14.03.2019 19:16, Gregory Sloop via samba wrote:> I'd like to re-flag this. > I got a single reply - and wondered if there were any other approaches that I haven't considered - or if someone wants to detail their process. > > Thanks again > -Greg > > > Backup is currently a pretty hot topic - but most of the discussion I've seen has been around backup of the AD and not about files on a share. > > However, if I'm backing up the files in a Samba share [and lets assume it's a Windows share, with the Windows ACLs] what's a good way to capture the files, AND the ACL data so I could drop that data back on another samba share, if disaster strikes and maintain the ACL data, as best possible. Having the files alone is nice, but if it takes me 6 additional hours [or a couple of days] to go through things and set/reset all the ACL's so people have the right access, well that's a problem. [Or at least a problem I need to plan for...] > > [And yes, I understand that the AD back-end-data has to stay consistent for the ACLs to apply properly, but lets assume we're going to end up restoring the files to another share on a different AD server in the same domain.] > > Does rsync work? > Duplicati? [my favorite] > > Thoughts or suggestions? > [A search didn't return much.] > > TIA > -Greg