Chapter 7. Managing data loss
Chapter 7. Managing data loss The proper response to a data loss event will depend on the number of replicas that have been affected and the type of lost data. 7.1. Responding to isolated data loss When a data loss event occurs, minimize replicating the data loss by immediately isolating the affected servers. Then create replacement replicas from the unaffected remainder of the environment. Prerequisites A robust IdM replication topology with multiple replicas. See Preparing for server loss with replication . Procedure To limit replicating the data loss, disconnect all affected replicas from the rest of the topology by removing their replication topology segments. Display all domain replication topology segments in the deployment. Delete all domain topology segments involving the affected servers. Perform the same actions with any ca topology segments involving any affected servers. The servers affected by the data loss must be abandoned. To create replacement replicas, see Recovering multiple servers with replication . 7.2. Responding to limited data loss among all servers A data loss event can affect all replicas in the environment, such as replication carrying out an accidental deletion among all servers. If data loss is known and limited, manually re-add lost data. Prerequisites A Virtual Machine (VM) snapshot or IdM backup of an IdM server that contains the lost data. Procedure If you need to review any lost data, restore the VM snapshot or backup to an isolated server on a separate network. Add the missing information to the database using ipa or ldapadd commands. Additional resources Recovering from data loss with VM snapshots Backing Up and Restoring IdM 7.3. Responding to undefined data loss among all servers If data loss is severe or undefined, deploy a new environment from a Virtual Machine (VM) snapshot of a server. Prerequisites A Virtual Machine (VM) snapshot contains the lost data. Procedure Restore an IdM Certificate Authority (CA) Replica from a VM snapshot to a known good state, and deploy a new IdM environment from it. See Recovering from only a VM snapshot . Add any data created after the snapshot was taken using ipa or ldapadd commands. Additional resources Recovering from data loss with VM snapshots
ipa topologysegment-find Suffix name: domain ------------------ 8 segments matched ------------------ Segment name: segment1 Left node: server.example.com Right node: server2.example.com Connectivity: both ---------------------------- Number of entries returned 8 ---------------------------- ipa topologysegment-del Suffix name: domain Segment name: segment1 ----------------------------- Deleted segment "segment1" ----------------------------- ipa topologysegment-find Suffix name: ca ------------------ 1 segments matched ------------------ Segment name: ca_segment Left node: server.example.com Right node: server2.example.com Connectivity: both ---------------------------- Number of entries returned 1 ---------------------------- ipa topologysegment-del Suffix name: ca Segment name: ca_segment ----------------------------- Deleted segment "ca_segment" -----------------------------