Shadowing a Volume
Configuring a Shadow-Copy Rule (Source Switch)
15-16 CLI Storage-Management Guide
Translating Local SIDs
After all local groups are duplicated on all source and destination filers, you must
configure the shadow-copy rule to translate them. When SID translation is enabled,
the rule finds a file’s group name (such as “doctors”) at the source volume, then looks
up the SID for that group name at the destination filer. This introduces a slight
performance penalty, but it ensures that doctors can access their files on both the
source and shadow volumes. From gbl-ns-vol-shdwcp mode, use the
sid-translation
command to enable SID translations for the current shadow-copy rule:
sid-translation
For example, the following command sequence causes “DRrule” to translate all SIDs:
bstnA6k(gbl)# namespace wwmed
bstnA6k(gbl-ns[wwmed])# volume /acct
bstnA6k(gbl-ns-vol[wwmed~/acct])# shadow-copy-rule DRrule
bstnA6k(gbl-ns-vol-shdwcp[wwmed~/acct~DRrule])# sid-translation
bstnA6k(gbl-ns-vol-shdwcp[wwmed~/acct~DRrule])# ...
Failing On SID-Translation Errors
If a local group at a source filer is not configured at the target, SID translations fail for
that local group. By default, the shadow-copy rule copies the original SID (a binary
number) to the shadow volume’s filer. The Access Control Entry (ACE) with the SID
does not function at the shadow volume, though it is preserved; if the file is copied
back to the source volume later, the SID will still be valid there. This can be useful in
a disaster-recovery application.
To prevent the rule from copying a file that fails its SID translation, use the
fail-on-errors option at the end of the command:
sid-translation fail-on-errors
For example:
bstnA6k(gbl)# namespace insur
bstnA6k(gbl-ns[insur])# volume /claims
bstnA6k(gbl-ns-vol[insur~/claims])# shadow-copy-rule insurDR
bstnA6k(gbl-ns-vol-shdwcp[insur~/claims~insurDR])# sid-translation fail-on-errors
Comentarios a estos manuales