[j-nsp] Steel-Belted RADIUS backups

[Clay Haynes]

How about a MAG running IC + RADIUS License? It's not FreeRADIUS :)

In all seriousness perhaps you can script an export using the LDAP tools,
and import that back in?

http://www.juniper.net/techpubs/software/aaa_802/sbrc/sbrc70/sw-sbrc-admin/
html/LDAPConfig6.html#334279






On 8/29/13 5:10 AM, "Dale Shaw" <dale.shaw+j-nsp at gmail.com> wrote:

>Hi all,
>
>Does anyone out there use SBR?
>
>We have the Global Enterprise Edition (GEE) version v6.1.7 running on
>Linux.
>
>I'm putting something in place to back up SBR itself; currently we
>just tar up /opt/JNPRsbr/radius (after stopping sbrd) but it's
>occurred to me that we have never tested a recovery using this method.
>
>JTAC are telling me there is no automated way to perform the XML
>export function normally performed in the GUI. The product docs don't
>make it clear whether taking a copy of everything in
>/opt/JNPRsbr/radius/ is enough, or whether the XML export is also
>required.
>
>Looking at what the supplied install/upgrade scripts do, it's just a
>recursive 'cp' with some unnecessary folders excluded.
>
>We also take backups of the VM guest that's running SBR but I'm not
>familiar enough with SBR's back-end databases to know whether that
>results in a recoverable data set; there'll be open files for sure
>(hence the stop;tar;start method described above).
>
>What do you do?  "use FreeRADIUS instead" is a valid but unwelcome
>response :-))
>
>Cheers,
>Dale
>_______________________________________________
>juniper-nsp mailing list juniper-nsp at puck.nether.net
>https://puck.nether.net/mailman/listinfo/juniper-nsp