List Info

Thread: Digest Number 1250




Digest Number 1250
country flaguser name
United States
2007-08-22 09:01:24

Messages In This Digest (4 Messages)

1a.
Re: Anyone using Kerberos in 2.5.2 and having trouble with performan From: Jean-Louis Martineau
2a.
delay tape write? From: Christopher McCrory
2b.
Re: delay tape write? From: Frank Smith
2c.
Re: delay tape write? From: Paul Bijnens

Messages

1a.

Re: Anyone using Kerberos in 2.5.2 and having trouble with performan

Posted by: "Jean-Louis Martineau" martineauzmanda.com?Subject= Re%3A%20Anyone%20using%20Kerberos%20in%202%2E5%2E2%20and%20having%20trouble%20with%20performan"> martineauzmanda.com

Tue Aug 21, 2007 7:47 am (PST)

Klas,

Try amanda-2.5.3alpha-kencrypt.tar.gz from
http://www.zmanda.com/community-builds.php
It add support for the DLE kencrypt option with krb5.

I don't know how to changer the encryption method.

Jean-Louis

Klas Heggemann wrote:
>
> 20 aug 2007 kl. 19.13 skrev Jean-Louis Martineau:
>
>> Klas Heggemann wrote:
>>> Hi!
>>>
>>>; We are inte transition from amanda 2.4.2 to 2.5.2. We seem to have a
>>;> working
>>>; build and configuration. We've also switched from Solaris 9 to 10,
>>;> and newer
>>> hardware.
>>>
>>> However, with 2.5.2 encryption is no longer an option, when using
>>;> Kerberos 5 authentication.
>;>> The backup server seems to have problems with the backup of nearly
>>;> 200 filesystems on 80 hosts.
>> With 2.5.2, krb5 must encrypt nothing or encrypt everything, it is
>>; set at compile time with AMANDA_KRB5_ENCRYPT,
>> it must be the same for all clients and server.
>
> Yes we are aware of that. Since Kerbers encryption seems very slow
> (about 2 or 3 times slower
> backus then with ssh). We will not be able to use encryption for all
> filesystems.
>
> If we stick to Amanda, we need to find s a solution. What i have in
> mind is two different
> backup sets, one for encryption and one for non encrypted transfers.
> Perhaps this could be
> a amanda.conf option, so you could use the same binary. The client,
> unfortunatly need to listen
> on different ports.
>
> We will do some tests with this approach and report bac
>
> Another solution could be to use another encryption method. I guess
> 3DES is used, but
> I do not know where the encrytion method is choosen. Ayone who knows?
> Perhaps AES is faster?
>
>
>> Jean-Louis
>
>
> /klas
>

2a.

delay tape write?

Posted by: "Christopher McCrory" chrismccpricegrabber.com?Subject= Re%3Adelay%20tape%20write%3F"> chrismccpricegrabber.com

Tue Aug 21, 2007 10:31 ;am (PST)

Hello...

I seem to remember a feature request for delaying the start of writing to tape until X%/Xbytes are done dumping and ready to write. It was on sourceforge? zmanda wiki? I cannot seem to find it now. Does anyone know where it was?

Writing 500M to a 800G tape is irritating. I would be willing to sponsor a developer to work on this. Any takers?

--
Christopher McCrory
"The guy that keeps the servers running"

To the optimist, the glass is half full.
To the pessimist, the glass is half empty.
To the engineer, the glass is twice as big as it needs to be.

2b.

Re: delay tape write?

Posted by: "Frank Smith" fsmithhoovers.com?Subject= Re%3A%20delay%20tape%20write%3F"> fsmithhoovers.com

Tue Aug 21, 2007 4:41 pm (PST)

Christopher McCrory wrote:
> Hello...
>
> I seem to remember a feature request for delaying the start of
> writing to tape until X%/Xbytes are done dumping and ready to
> write. It was on sourceforge? zmanda wiki? I cannot seem to
> find it now. Does anyone know where it was?
>;
> Writing 500M to a 800G tape is irritating. I would be willing
> to sponsor a developer to work on this. Any takers?

I can see two ways this option would be useful.
First, by having taper wait until 100% of the dumps are finished,
it would avoid the contention on the holding disk and potentially
enable faster streaming to the tape drive, at the expense of needing
enough disk space to hold your entire backup. It could also make
better use of the tape space if my taperorder suggestion below was
implemented.
Second, if you have small backups and large tapes, you could set
it to 90% or so and have Amanda only use a tape when you have run
enough dumps to mostly fill a tape. This might have some interaction
with the autoflush parameter, however.
Also, on a somewhat related note, if taper were to wait until
all the dumps finished, and runtapes is greater than 1, could there
be a taperorder parameter similar to dumporder that would do a
largest-fit write to tape, and avoid trying to write a dump too
large to fit in the remaining space on a tape? I haven't dug in
the code, but taper just seems to work in a FIFO fashion, and
writes until it hits EOT and then starts anew on the next tape with
the failed dump. For runtapes = 2, largest fit would be sufficient,
but for runtapes >=3 perhaps another strategy would be better,
although possibly not by enough to justify the extra code.

Frank

--
Frank Smith fsmith%40hoovers.com">fsmithhoovers.com
Sr. Systems Administrator Voice: 512-374-4673
Hoover's Online Fax: 512-374-4501

2c.

Re: delay tape write?

Posted by: "Paul Bijnens" Paul.Bijnensxplanation.com?Subject= Re%3A%20delay%20tape%20write%3F"> Paul.Bijnensxplanation.com

Wed Aug 22, 2007 12:15 ;am (PST)

On 2007-08-22 01:35, Frank Smith wrote:
> Also, on a somewhat related note, if taper were to wait until
> all the dumps finished, and runtapes is greater than 1, could there
> be a taperorder parameter similar to dumporder that would do a
> largest-fit write to tape, and avoid trying to write a dump too
> large to fit in the remaining space on a tape? I haven't dug in
> the code, but taper just seems to work in a FIFO fashion, and
> writes until it hits EOT and then starts anew on the next tape with
>; the failed dump. For runtapes = 2, largest fit would be sufficient,
> but for runtapes >=3 perhaps another strategy would be better,
> although possibly not by enough to justify the extra code.

You're describing the parameter "taperalgo", I believe.

Because there is no "delayed" tapewriting currently, you can
only influence the result of the taperalgo by tuning the
"dumporder" and the number of dumpers ("inparallel") as well.
See my explanation in:

http://wiki.zmanda.com/index.php/How_To:Fill_tapes_to_100%25

Having an option to delay the tapewriting somehow, would make
this a lot simpler, especially for those extremely large and
fast tapes currently on the market.

--
Paul Bijnens, xplanation Technology Services Tel +32 16 397.511
Technologielaan 21 bus 2, B-3001 Leuven, BELGIUM Fax +32 16 397.512
http://www.xplanation.com/ email: Paul.Bijnens%40xplanation.com">Paul.Bijnensxplanation.com
***********************************************************************
* I think I've got the hang of it now: exit, ^D, ^C, ^, ^Z, ^Q, ^^, *
* F6, quit, ZZ, :q, :q!, M-Z, ^X^C, logoff, logout, close, bye, /bye, *
* stop, end, F3, ~., ^]c, +++ ATH, disconnect, halt, abort, hangup, *
* PF4, F20, ^X^X, :, KJOB, F14-f-e, F8-e, kill -1 $$, shutdown, *
* init 0, kill -9 1, Alt-F4, Ctrl-Alt-Del, AltGr-NumLock, Stop-A, ... *
* ... "Are you sure?"; ... YES ... Phew ... I'm out *
***********************************************************************

Recent Activity
Visit Your Group
SPONSORED LINKS
Yahoo! TV

Want the scoop?

Check out today's

news and gossip.

Yahoo! Groups

Find Green Groups

Share with others

Help the Planet.

Sitebuilder

Build a web site

quickly & easily

with Sitebuilder.

Need to Reply?

Click one of the "Reply" links to respond to a specific message in the Daily Digest.

Create New Topic | Visit Your Group on the Web
Yahoo! Groups
Change settings via the Web (Yahoo! ID required)
Change settings via email: amanda-hackers-normal@yahoogroups.com?subject=Email Delivery: Indiviual Email">Switch delivery to Individual | Switch format to Traditional
Visit Your Group | Yahoo! Groups Terms of Use | amanda-hackers-unsubscribe@yahoogroups.com?subject=Unsubscribe"> Unsubscribe
[1]

about | contact  Other archives ( Real Estate discussion Medical topics )