IRIX® Admin: Backup, Security, and Accounting

230 Pages·1995·1.09 MB·English

IRIX® Admin:
Backup, Security, and Accounting
007-2862-006
CONTRIBUTORS
Written by Karen Johnson, Jeffrey B. Zurschmeide, John Raithel, Terry Schultz, and Bill Tuthill
Illustrated by Dany Galgani
Production by Karen Jacobson
Engineering contributions by RobBradshaw, ChuckBullis, RobertClark, DaveOlson, RebeccaUnderwood, VesnaVrdoljak,
SupriyaWickrematillake, LauraWirth-Peters, and DonnaYobs.
COPYRIGHT
©1996-2003 Silicon Graphics, Inc. All rights reserved; provided portions may be copyright in third parties, as indicated elsewhere herein. No
permissionisgrantedtocopy,distribute,orcreatederivativeworksfromthecontentsofthiselectronicdocumentationinanymanner,inwhole
or in part, without the prior written permission of Silicon Graphics, Inc.
LIMITED RIGHTS LEGEND
Theelectronic(software)versionofthisdocumentwasdevelopedatprivateexpense;ifacquiredunderanagreementwiththeUSAgovernment
or any contractor thereto, it is acquired as "commercial computer software" subject to the provisions of its applicable license agreement, as
specified in (a) 48 CFR 12.212 of the FAR; or, if acquired for Department of Defense units, (b) 48 CFR 227-7202 of the DoD FAR Supplement; or
sections succeeding thereto. Contractor/manufacturer is Silicon Graphics, Inc., 1600 Amphitheatre Pkwy 2E, Mountain View, CA 94043-1351.
TRADEMARKS AND ATTRIBUTIONS
Silicon Graphics, SGI, the SGI logo, IRIX, and WebFORCE are registered trademarks and IRIXNetworker and XFS are trademarks of Silicon
Graphics, Inc., in the United States and/or other countries worldwide.
Macintosh is a trademark of Apple Computer, Inc. POSIX is a trademark of the Institute of Electrical and Electronic Engineers, Inc. Netscape,
NetscapeNavigator,andNetscapeProxyServeraretrademarksofNetscapeCommunicationsCorporation.NetWareisaregisteredtrademark
of Novell, Inc. UNIX and the X Window System are registered trademarks of the Open Group in the United States and other countries.
New Features in This Manual
This revision of theIRIX Admin: Backup, Security, and Accounting manual supports the
IRIX 6.5.22 release.
New Features Documented
This revision of theIRIX Admin: Backup, Security, and Accounting manual documents no
new features.
Major Documentation Changes
Updated and corrected information about thexfsrestore command in “About
xfsrestore” on page47.
Added information about Pluggable Authentication Modules (PAM) in “Pluggable
Authentication Modules” on page119.
007-2862-006 iii

Record of Revision
Version Description
004 February 1999
Incorporates information for the IRIX 6.5.3 release.
005 May 2003
Updated to support the IRIX 6.5.20 release.
006 November 2003
Updated to support the IRIX 6.5.22 release.
007-2862-006 v

Contents
List of Figures . . . . . . . . . . . . . . . . . . . . . . . xvii
List of Tables . . . . . . . . . . . . . . . . . . . . . . . .xix
What This Guide Contains . . . . . . . . . . . . . . . . . . . .xxi
Part I . . . . . . . . . . . . . . . . . . . . . . . . .xxi
Part II . . . . . . . . . . . . . . . . . . . . . . . . .xxi
Part III . . . . . . . . . . . . . . . . . . . . . . . . xxii
How to Use This Guide . . . . . . . . . . . . . . . . . . . . xxii
Related Publications . . . . . . . . . . . . . . . . . . . . . xxii
Obtaining Publications . . . . . . . . . . . . . . . . . . . . xxiii
Conventions . . . . . . . . . . . . . . . . . . . . . . . xxiv
Reader Comments. . . . . . . . . . . . . . . . . . . . . . xxiv
PART I Backup
1. Planning a Backup Strategy . . . . . . . . . . . . . . . . . . . . 3
Types of Backup Media . . . . . . . . . . . . . . . . . . . . . 3
IRIX Backup Tools. . . . . . . . . . . . . . . . . . . . . . . 4
IRIX Networker . . . . . . . . . . . . . . . . . . . . . . 6
007-2862-006 vii
Contents
Backup Strategies . . . . . . . . . . . . . . . . . . . . . . . 7
When to Back Up Data and What to Back Up . . . . . . . . . . . . . . 7
Root Filesystem Backup . . . . . . . . . . . . . . . . . . . 7
User Filesystem Backup . . . . . . . . . . . . . . . . . . . 9
Incremental Backup Schedule . . . . . . . . . . . . . . . . . . 9
File Backup Across a Network . . . . . . . . . . . . . . . . . .10
Automatic Backups withcron . . . . . . . . . . . . . . . . . .10
Storage of Backups . . . . . . . . . . . . . . . . . . . . .11
How Long to Keep Backups . . . . . . . . . . . . . . . . . . .12
Guidelines for Tape Reuse . . . . . . . . . . . . . . . . . . .12
2. Backup and Recovery Procedures . . . . . . . . . . . . . . . . . .13
General Backup Procedure . . . . . . . . . . . . . . . . . . . .14
System Backup Tools . . . . . . . . . . . . . . . . . . . . .15
Recovering Data After System Corruption . . . . . . . . . . . . . . . .15
Changing the Default Backup Device . . . . . . . . . . . . . . . . .20
Saving Files Using Data Compression . . . . . . . . . . . . . . . . .21
Backup andRestore Utilities . . . . . . . . . . . . . . . . . . .22
Saving Data withBackup . . . . . . . . . . . . . . . . . . .22
Restoring Data withRestore . . . . . . . . . . . . . . . . . .23
Aboutdump andrestore . . . . . . . . . . . . . . . . . . . .24
Backing Up a Filesystem withdump. . . . . . . . . . . . . . . . .25
Performing Incremental Backups . . . . . . . . . . . . . . . . .25
Recovering a Filesystem withrestore . . . . . . . . . . . . . . .26
Recovering Individual Files withrestore . . . . . . . . . . . . . .27
viii 007-2862-006
Contents
Aboutxfsdump andxfsrestore . . . . . . . . . . . . . . . . . . 28
Features ofxfsdump andxfsrestore . . . . . . . . . . . . . . . 29
Media Layout forxfsdump . . . . . . . . . . . . . . . . . . . 30
Possiblexfsdump Layouts . . . . . . . . . . . . . . . . . . 31
Saving Data with xfsdump . . . . . . . . . . . . . . . . . . . 36
Specifying Local Media withxfsdump . . . . . . . . . . . . . . 37
Specifying a Remote Tape Drive withxfsdump . . . . . . . . . . . . 38
Backing Up to a File withxfsdump . . . . . . . . . . . . . . . 39
Reusing Tapes withxfsdump . . . . . . . . . . . . . . . . . 40
Erasing Used Tapes . . . . . . . . . . . . . . . . . . . . 41
About Incremental and Resumed Dumps. . . . . . . . . . . . . . 41
Performing an Incrementalxfsdump . . . . . . . . . . . . . . . 42
Performing a Resumedxfsdump . . . . . . . . . . . . . . . . 42
Examiningxfsdump Archives . . . . . . . . . . . . . . . . . . 44
Aboutxfsrestore . . . . . . . . . . . . . . . . . . . . . 47
Performing Simple Restores withxfsrestore . . . . . . . . . . . . 48
Restoring Individual Files withxfsrestore . . . . . . . . . . . . 50
Performing Network Restores withxfsrestore . . . . . . . . . . . 51
Performing Interactive Restores withxfsrestore. . . . . . . . . . . 51
Performing Cumulative Restores withxfsrestore . . . . . . . . . . 53
Interruptingxfsrestore . . . . . . . . . . . . . . . . . . 56
About thehousekeeping andorphanage Directories . . . . . . . . . 57
Usingxfsdump andxfsrestore to Copy Filesystems. . . . . . . . . . . 58
Abouttar . . . . . . . . . . . . . . . . . . . . . . . . . 58
Backing Up Files withtar . . . . . . . . . . . . . . . . . . . 59
Usingtar to Back Up Files by Modification Date . . . . . . . . . . . . 59
Performing Incremental Backups withtar . . . . . . . . . . . . . . 59
Improvingtar Performance . . . . . . . . . . . . . . . . . . 60
Examiningtar Archives. . . . . . . . . . . . . . . . . . . . 60
Restoringtar Archives . . . . . . . . . . . . . . . . . . . . 61
007-2862-006 ix
Contents
Aboutcpio. . . . . . . . . . . . . . . . . . . . . . . . .61
Backing Up Files withcpio . . . . . . . . . . . . . . . . . . .62
Usingcpio to Back Up Files by Modification Date . . . . . . . . . . . .62
Performing Incremental Backups withcpio . . . . . . . . . . . . . .62
Examiningcpio Archives . . . . . . . . . . . . . . . . . . .63
Restoringcpio Archives . . . . . . . . . . . . . . . . . . . .63
Aboutdd . . . . . . . . . . . . . . . . . . . . . . . . .63
3. Troubleshooting Backup and Recovery . . . . . . . . . . . . . . . .65
Troubleshooting Unreadable Backups . . . . . . . . . . . . . . . . .65
Reading Media from Other Systems . . . . . . . . . . . . . . . . . .66
Troubleshooting Errors During Backup . . . . . . . . . . . . . . . . .68
Restoring the Correct Backup after the Wrong One . . . . . . . . . . . . .68
Testing for Bad Media . . . . . . . . . . . . . . . . . . . . . .70
Backup and Recovery Error Messages and Actions . . . . . . . . . . . . .71
PART II Security
4. IRIX System Security . . . . . . . . . . . . . . . . . . . . . .75
About System Security. . . . . . . . . . . . . . . . . . . . . .76
Standard Security Features . . . . . . . . . . . . . . . . . . . .76
Security Safeguards and Cautions . . . . . . . . . . . . . . . . . .77
Password Administration . . . . . . . . . . . . . . . . . . . . .81
Guidelines for Devising Passwords . . . . . . . . . . . . . . . . .81
About PROM Passwords . . . . . . . . . . . . . . . . . . . .82
Clearing the PROM Password Usingnvram . . . . . . . . . . . . .83
Setting the PROM Password from the Command Monitor . . . . . . . . .83
Establishing Second (Dialup) Passwords . . . . . . . . . . . . . . .84
About Shadow Passwords . . . . . . . . . . . . . . . . . . .86
Using a Shadow Password File . . . . . . . . . . . . . . . . .86
About Password Aging . . . . . . . . . . . . . . . . . . . .87
Controlling Password Aging with thepasswd Command . . . . . . . . .87
Controlling Password Aging by Editing/etc/passwd . . . . . . . . . . .88
Usingpwck to Check the Password File . . . . . . . . . . . . . . .90
x 007-2862-006