Re: TDP for Databases 6.3 -- Documentation

2011-10-25 Thread Sascha Askani
Del,

thanks for your reply. The link you provided does not work for me, though...

"Bad Gateway
The proxy server received an invalid response from an upstream server."

Any hints?

BR,

Sascha

2011/10/24 Del Hoobler 
>
> http://publib.boulder.ibm.com/infocenter/tsminfo/v6r3/index.jsp
>
>
>
> Thanks,
>
> Del
>
> 
>
> "ADSM: Dist Stor Manager"  wrote on 10/24/2011
> 09:47:20 AM:
>
> >> From: Sascha Askani 
> >> To: ADSM-L@vm.marist.edu
> >> Date: 10/24/2011 09:52 AM
> >> Subject: TDP for Databases 6.3 -- Documentation
> >> Sent by: "ADSM: Dist Stor Manager" 
> >>
> >> Hi List ;)
> >>
> >> Thanks to Passport Advantage, I downloaded the TDP for Databases 6.3
> today,
> >> but I cannot seem to find any updated documentation for this product.
> Since
> >> there have been significant changes in the software (at least in TDP
> for
> >> MSSQL), it would be great if there was one available ;)
> >>
> >> Has anybody found a Website or PDF?
> >>
> >> Thanks in advance!
> >>
> >> Sascha
> >> --
> >> How many surrealists does it take to screw in a lightbulb? A fish.
> >>



--
How many surrealists does it take to screw in a lightbulb? A fish.


Re: TDP for Databases 6.3 -- Documentation

2011-10-25 Thread Richard Sims
On Oct 25, 2011, at 7:26 AM, Sascha Askani wrote:

> Del,
> 
> thanks for your reply. The link you provided does not work for me, though...
> 
> "Bad Gateway
> The proxy server received an invalid response from an upstream server."
> 

Indeed...  Going to
  
http://www.ibm.com/developerworks/wikis/display/tivolidoccentral/Tivoli+Storage+Manager
and clicking on either the 6.2 or 6.3 Information Center links yields that 
error.
The IBM Web people aren't testing what they put into production.

 Richard Sims


cross setup libray master/client setup

2011-10-25 Thread Stefan Folkerts
I have never build this setup before and I was just wondering if there is
any reason a cross library master/client setup would not work with TSM.

Regards,
  Stefan


Re: TDP for Databases 6.3 -- Documentation

2011-10-25 Thread Richard Cowen
It has been working, and just now started working again.
Richard Cowen

-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of 
Richard Sims
Sent: Tuesday, October 25, 2011 7:38 AM
To: ADSM-L@VM.MARIST.EDU
Subject: Re: [ADSM-L] TDP for Databases 6.3 -- Documentation

On Oct 25, 2011, at 7:26 AM, Sascha Askani wrote:

> Del,
> 
> thanks for your reply. The link you provided does not work for me, though...
> 
> "Bad Gateway
> The proxy server received an invalid response from an upstream server."
> 

Indeed...  Going to
  
http://www.ibm.com/developerworks/wikis/display/tivolidoccentral/Tivoli+Storage+Manager
and clicking on either the 6.2 or 6.3 Information Center links yields that 
error.
The IBM Web people aren't testing what they put into production.

 Richard Sims


Re: TDP for Databases 6.3 -- Documentation

2011-10-25 Thread Stefan Folkerts
It worked yesterday but it's down now, the 6.2 documentation was also down
earlier today so there is probably some kind of bigger issue going on here.

On Tue, Oct 25, 2011 at 1:37 PM, Richard Sims  wrote:

> On Oct 25, 2011, at 7:26 AM, Sascha Askani wrote:
>
> > Del,
> >
> > thanks for your reply. The link you provided does not work for me,
> though...
> >
> > "Bad Gateway
> > The proxy server received an invalid response from an upstream server."
> >
>
> Indeed...  Going to
>
> http://www.ibm.com/developerworks/wikis/display/tivolidoccentral/Tivoli+Storage+Manager
> and clicking on either the 6.2 or 6.3 Information Center links yields that
> error.
> The IBM Web people aren't testing what they put into production.
>
> Richard Sims
>


Re: cross setup libray master/client setup

2011-10-25 Thread Nick Laflamme
I've run that way at least once in past shops. This was back in 5.3 days, but I 
can't imagine why it'd have changed. 

Nick

On Oct 25, 2011, at 6:45 AM, Stefan Folkerts wrote:

> I have never build this setup before and I was just wondering if there is
> any reason a cross library master/client setup would not work with TSM.
> 
> Regards,
>  Stefan


Re: TDP for Databases 6.3 -- Documentation

2011-10-25 Thread Del Hoobler
I have notified the team that manages the web site.


Thanks,

Del



"ADSM: Dist Stor Manager"  wrote on 10/25/2011
08:04:18 AM:

>> From: Stefan Folkerts 
>> To: ADSM-L@vm.marist.edu
>> Date: 10/25/2011 08:09 AM
>> Subject: Re: TDP for Databases 6.3 -- Documentation
>> Sent by: "ADSM: Dist Stor Manager" 
>>
>> It worked yesterday but it's down now, the 6.2 documentation was also
down
>> earlier today so there is probably some kind of bigger issue going on
here.
>>
>> On Tue, Oct 25, 2011 at 1:37 PM, Richard Sims  wrote:
>>
>> > On Oct 25, 2011, at 7:26 AM, Sascha Askani wrote:
>> >
>> > > Del,
>> > >
>> > > thanks for your reply. The link you provided does not work for me,
>> > though...
>> > >
>> > > "Bad Gateway
>> > > The proxy server received an invalid response from an upstream
server."
>> > >
>> >
>> > Indeed...  Going to
>> >
>> > http://www.ibm.com/developerworks/wikis/display/tivolidoccentral/
>> Tivoli+Storage+Manager
>> > and clicking on either the 6.2 or 6.3 Information Center links yields
that
>> > error.
>> > The IBM Web people aren't testing what they put into production.
>> >
>> > Richard Sims
>> >
>>


Re: cross setup libray master/client setup

2011-10-25 Thread Stefan Folkerts
Thanks Nick.

On Tue, Oct 25, 2011 at 2:13 PM, Nick Laflamme  wrote:

> I've run that way at least once in past shops. This was back in 5.3 days,
> but I can't imagine why it'd have changed.
>
> Nick
>
> On Oct 25, 2011, at 6:45 AM, Stefan Folkerts wrote:
>
> > I have never build this setup before and I was just wondering if there is
> > any reason a cross library master/client setup would not work with TSM.
> >
> > Regards,
> >  Stefan
>


FODC (First Occurrence Data Capture) dumps

2011-10-25 Thread Zoltan Forray/AC/VCU
I have been looking around on our servers to cleanup large/unnecessary
files and came upon the /dumps/FODC_Panic_ folders with many gigs of
cores and such.

Any need to keep these around and can they be deleted?  Some of them date
back to 2009.


Zoltan Forray
TSM Software & Hardware Administrator
Virginia Commonwealth University
UCC/Office of Technology Services
zfor...@vcu.edu - 804-828-4807
Don't be a phishing victim - VCU and other reputable organizations will
never use email to request that you reply with your password, social
security number or confidential personal information. For more details
visit http://infosecurity.vcu.edu/phishing.html


Re: TSM v63 is out there to download from the Passport Advantage page

2011-10-25 Thread Howard Coles
Forgive me for coming late to the party, but:
I see Win 2003 Server, and windows vista (both 32 and 64 bit) is
supported, but we can't support 32 bit Linux boxes?  What kind of crap
is that?
If anyone from IBM is paying attention, you need to pick up 32 bit
Linux, or risk alienating much of your customer base.  I know quite a
few companies who are evaluating changes already, and these kinds of
moves just give them another reason to do so.


See Ya'
Howard Coles Jr.
John 3:16!


-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of
Roger Deschner
Sent: Saturday, October 22, 2011 2:55 PM
To: ADSM-L@VM.MARIST.EDU
Subject: Re: [ADSM-L] TSM v63 is out there to download from the Passport
Advantage page

That's wonderful. And the TSM 6.3 Mac client supports OSX 10.7 "Lion",
which is important to us.

But there's plenty of rather bad news here. V6.3 servers and clients
cannot interoperate with V5.5 clients and servers. So Mac Lion cannot
back up to a V5.5 server. This also makes migration from V5.5 to V6.3 a
lot harder, because a V5.5 server cannot be a Library Client to a V6.3
Library Manager. The restriction that the Library Manager must be at the
same or higher release level than all of its clients means we will have
to completely eliminate all of our V5.5 TSM server instances before we
can migrate any of our instances to V6.3. That's going to be hard.

V6.3 has dropped support for a number of client and server platforms
that are still rather mainstream, such as AIX 5.3, Windows XP (still 50%
of our clients), Windows Server 2003, any 32-bit Linux. See it all at:

http://www-01.ibm.com/support/docview.wss?uid=swg21243309

http://www-01.ibm.com/support/docview.wss?uid=swg21302789

Looks like we can't go beyond V6.2 for quite a while, except for a few
V6.3 clients who will be restricted to our new V6.2 server that's
currently in test mode.

IBM: Supporting V6.3 interoperablility with V5.5 would help a LOT, at
least for some limited pain areas, such as Library Manager
configurations, and an Apple Mac client that can run on OSX 10.7 "Lion"
with a V5.5 server.

P.S. No documentation yet. The V6.3 infocenter is a broken link.

Roger Deschner  University of Illinois at Chicago rog...@uic.edu
   Academic Computing & Communications Center


On Fri, 21 Oct 2011, Oscar Kolsteren wrote:

>Hi all, > > > >Don't know if this was already posted here, but TSM 63
is now available >on the Passport Advantage page > > > >Best Regards, >
>Oscar > > >
>---

>ATTENTION: >The information in this electronic mail message is private
and confidential, and only intended for the addressee. Should you
receive this message by mistake, you are hereby notified that any
disclosure, reproduction, distribution or use of this message is
strictly prohibited. Please inform the sender by >reply transmission and
delete the message without copying or opening it. > >Messages and
attachments are scanned for all viruses known. If this message contains
password-protected or encrypted attachments, the files have NOT been
scanned for viruses by the ING mail domain. Always scan attachments
before opening them. > >ING Direct NV is limited liability company
incorporated in The Netherlands. Registered in England & Wales, Branch
Ref BR7357, 410 Thames Valley Park Drive, Reading, Berkshire, RG6 1RH.
>---

>
DISCLAIMER: This communication, along with any documents, files or attachments, 
is intended only for the use of the addressee and may contain legally 
privileged and confidential information. If you are not the intended recipient, 
you are hereby notified that any dissemination, distribution or copying of any 
information contained in or attached to this communication is strictly 
prohibited. If you have received this message in error, please notify the 
sender immediately and destroy the original communication and its attachments 
without reading, printing or saving in any manner. Please consider the 
environment before printing this e-mail.


Re: TSM Client 6.2.3.3 installtion issue

2011-10-25 Thread Howard Coles
I've only seen that once in a while.  I changed our SOP to use the
command line install, as it's easy to just copy and paste the command
into a command prompt window to avoid such issues.  Especially since it
can take a while for the gui wizard to run at times.


See Ya'
Howard Coles Jr.
John 3:16!


-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of
Grigori Solonovitch
Sent: Monday, October 24, 2011 5:57 AM
To: ADSM-L@VM.MARIST.EDU
Subject: [ADSM-L] TSM Client 6.2.3.3 installtion issue

I have problems with TSM Client Acceptor 6.2.3.3 configuration on
Windows 2003 Standard Edition 32 bit and Windows 2008 32 bit.
TSM Client Setup wizard is not able to create and start Windows service.
Problem is applicable to many servers.
Anybody else have faced similar problem?


Grigori G. Solonovitch



CONFIDENTIALITY AND WAIVER: The information contained in this electronic
mail message and any attachments hereto may be legally privileged and
confidential. The information is intended only for the recipient(s)
named in this message. If you are not the intended recipient you are
notified that any use, disclosure, copying or distribution is
prohibited. If you have received this in error please contact the sender
and delete this message and any attachments from your computer system.
We do not guarantee that this message or any attachment to it is secure
or free from errors, computer viruses or other conditions that may
damage or interfere with data, hardware or software.

Please consider the environment before printing this Email.
DISCLAIMER: This communication, along with any documents, files or attachments, 
is intended only for the use of the addressee and may contain legally 
privileged and confidential information. If you are not the intended recipient, 
you are hereby notified that any dissemination, distribution or copying of any 
information contained in or attached to this communication is strictly 
prohibited. If you have received this message in error, please notify the 
sender immediately and destroy the original communication and its attachments 
without reading, printing or saving in any manner. Please consider the 
environment before printing this e-mail.


Re: TSM v63 is out there to download from the Passport Advantage page

2011-10-25 Thread Remco Post
How so? Given the choice I would always install linux amd64/x86_64 if at all 
possible (and it almost always is on any hardware purchased in the past 5 years 
or so), even if I wouldn't need the 64 bit part for the application. For those 
few servers that are not 64-bit capable, TSM 5.5, 6.1 and 6.2 are all still 
fully supported. Even for 5.5 there is not even an announcement of an EOS 
date...

I for one are happy that IBM finally after so may years provides a native 64 
bit client for linux, relieving me of having to install a 32 bit runtime just 
for the backup client


On 25 okt. 2011, at 17:44, Howard Coles wrote:

> Forgive me for coming late to the party, but:
> I see Win 2003 Server, and windows vista (both 32 and 64 bit) is
> supported, but we can't support 32 bit Linux boxes?  What kind of crap
> is that?
> If anyone from IBM is paying attention, you need to pick up 32 bit
> Linux, or risk alienating much of your customer base.  I know quite a
> few companies who are evaluating changes already, and these kinds of
> moves just give them another reason to do so.
> 
> 
> See Ya'
> Howard Coles Jr.
> John 3:16!
> 
> 
> -Original Message-
> From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of
> Roger Deschner
> Sent: Saturday, October 22, 2011 2:55 PM
> To: ADSM-L@VM.MARIST.EDU
> Subject: Re: [ADSM-L] TSM v63 is out there to download from the Passport
> Advantage page
> 
> That's wonderful. And the TSM 6.3 Mac client supports OSX 10.7 "Lion",
> which is important to us.
> 
> But there's plenty of rather bad news here. V6.3 servers and clients
> cannot interoperate with V5.5 clients and servers. So Mac Lion cannot
> back up to a V5.5 server. This also makes migration from V5.5 to V6.3 a
> lot harder, because a V5.5 server cannot be a Library Client to a V6.3
> Library Manager. The restriction that the Library Manager must be at the
> same or higher release level than all of its clients means we will have
> to completely eliminate all of our V5.5 TSM server instances before we
> can migrate any of our instances to V6.3. That's going to be hard.
> 
> V6.3 has dropped support for a number of client and server platforms
> that are still rather mainstream, such as AIX 5.3, Windows XP (still 50%
> of our clients), Windows Server 2003, any 32-bit Linux. See it all at:
> 
> http://www-01.ibm.com/support/docview.wss?uid=swg21243309
> 
> http://www-01.ibm.com/support/docview.wss?uid=swg21302789
> 
> Looks like we can't go beyond V6.2 for quite a while, except for a few
> V6.3 clients who will be restricted to our new V6.2 server that's
> currently in test mode.
> 
> IBM: Supporting V6.3 interoperablility with V5.5 would help a LOT, at
> least for some limited pain areas, such as Library Manager
> configurations, and an Apple Mac client that can run on OSX 10.7 "Lion"
> with a V5.5 server.
> 
> P.S. No documentation yet. The V6.3 infocenter is a broken link.
> 
> Roger Deschner  University of Illinois at Chicago rog...@uic.edu
>   Academic Computing & Communications Center
> 
> 
> On Fri, 21 Oct 2011, Oscar Kolsteren wrote:
> 
>> Hi all, > > > >Don't know if this was already posted here, but TSM 63
> is now available >on the Passport Advantage page > > > >Best Regards, >
>> Oscar > > >
>> ---
> 
>> ATTENTION: >The information in this electronic mail message is private
> and confidential, and only intended for the addressee. Should you
> receive this message by mistake, you are hereby notified that any
> disclosure, reproduction, distribution or use of this message is
> strictly prohibited. Please inform the sender by >reply transmission and
> delete the message without copying or opening it. > >Messages and
> attachments are scanned for all viruses known. If this message contains
> password-protected or encrypted attachments, the files have NOT been
> scanned for viruses by the ING mail domain. Always scan attachments
> before opening them. > >ING Direct NV is limited liability company
> incorporated in The Netherlands. Registered in England & Wales, Branch
> Ref BR7357, 410 Thames Valley Park Drive, Reading, Berkshire, RG6 1RH.
>> ---
> 
>> 
> DISCLAIMER: This communication, along with any documents, files or 
> attachments, is intended only for the use of the addressee and may contain 
> legally privileged and confidential information. If you are not the intended 
> recipient, you are hereby notified that any dissemination, distribution or 
> copying of any information contained in or attached to this communication is 
> strictly prohibited. If you have received this message in error, please 
> notify the sender immediately and destroy the original communication and its 
> attachments without reading, printing or saving in any manner. Please 
> co

Re: TSM v63 is out there to download from the Passport Advantage page

2011-10-25 Thread Howard Coles
Easy, most all of the 32bit boxes we have left are so because of
Vendor\App requirements.  I know what you're saying is true, but there
are "vendors" who for some reason haven't realized it up until very
recently, including IBM.  The TKLM servers we run would NOT install on a
64bit RHEL server, I had to back them down to 32 bit.  Now that they're
there I'm not sure I can convert over to a 64bit OS.  There are other
apps/vendors in similar setups.
For me, as long as the 6.2 client works, I'm good.  And, like you I am
glad to see a true 64 bit client for Linux, my problem is that they can
continue to support Vista at 32 bit, and yet not Linux at that same
level.


See Ya'
Howard Coles Jr.
John 3:16!


-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of
Remco Post
Sent: Tuesday, October 25, 2011 2:38 PM
To: ADSM-L@VM.MARIST.EDU
Subject: Re: [ADSM-L] TSM v63 is out there to download from the Passport
Advantage page

How so? Given the choice I would always install linux amd64/x86_64 if at
all possible (and it almost always is on any hardware purchased in the
past 5 years or so), even if I wouldn't need the 64 bit part for the
application. For those few servers that are not 64-bit capable, TSM 5.5,
6.1 and 6.2 are all still fully supported. Even for 5.5 there is not
even an announcement of an EOS date...

I for one are happy that IBM finally after so may years provides a
native 64 bit client for linux, relieving me of having to install a 32
bit runtime just for the backup client


On 25 okt. 2011, at 17:44, Howard Coles wrote:

> Forgive me for coming late to the party, but:
> I see Win 2003 Server, and windows vista (both 32 and 64 bit) is
> supported, but we can't support 32 bit Linux boxes?  What kind of crap
> is that?
> If anyone from IBM is paying attention, you need to pick up 32 bit
> Linux, or risk alienating much of your customer base.  I know quite a
> few companies who are evaluating changes already, and these kinds of
> moves just give them another reason to do so.
>
>
> See Ya'
> Howard Coles Jr.
> John 3:16!
>
>
> -Original Message-
> From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf
Of
> Roger Deschner
> Sent: Saturday, October 22, 2011 2:55 PM
> To: ADSM-L@VM.MARIST.EDU
> Subject: Re: [ADSM-L] TSM v63 is out there to download from the
Passport
> Advantage page
>
> That's wonderful. And the TSM 6.3 Mac client supports OSX 10.7 "Lion",
> which is important to us.
>
> But there's plenty of rather bad news here. V6.3 servers and clients
> cannot interoperate with V5.5 clients and servers. So Mac Lion cannot
> back up to a V5.5 server. This also makes migration from V5.5 to V6.3
a
> lot harder, because a V5.5 server cannot be a Library Client to a V6.3
> Library Manager. The restriction that the Library Manager must be at
the
> same or higher release level than all of its clients means we will
have
> to completely eliminate all of our V5.5 TSM server instances before we
> can migrate any of our instances to V6.3. That's going to be hard.
>
> V6.3 has dropped support for a number of client and server platforms
> that are still rather mainstream, such as AIX 5.3, Windows XP (still
50%
> of our clients), Windows Server 2003, any 32-bit Linux. See it all at:
>
> http://www-01.ibm.com/support/docview.wss?uid=swg21243309
>
> http://www-01.ibm.com/support/docview.wss?uid=swg21302789
>
> Looks like we can't go beyond V6.2 for quite a while, except for a few
> V6.3 clients who will be restricted to our new V6.2 server that's
> currently in test mode.
>
> IBM: Supporting V6.3 interoperablility with V5.5 would help a LOT, at
> least for some limited pain areas, such as Library Manager
> configurations, and an Apple Mac client that can run on OSX 10.7
"Lion"
> with a V5.5 server.
>
> P.S. No documentation yet. The V6.3 infocenter is a broken link.
>
> Roger Deschner  University of Illinois at Chicago
rog...@uic.edu
>   Academic Computing & Communications Center
>
>
> On Fri, 21 Oct 2011, Oscar Kolsteren wrote:
>
>> Hi all, > > > >Don't know if this was already posted here, but TSM 63
> is now available >on the Passport Advantage page > > > >Best Regards,
>
>> Oscar > > >
>>
---
> 
>> ATTENTION: >The information in this electronic mail message is
private
> and confidential, and only intended for the addressee. Should you
> receive this message by mistake, you are hereby notified that any
> disclosure, reproduction, distribution or use of this message is
> strictly prohibited. Please inform the sender by >reply transmission
and
> delete the message without copying or opening it. > >Messages and
> attachments are scanned for all viruses known. If this message
contains
> password-protected or encrypted attachments, the files have NOT been
> scanned for viruses by the ING mail domain. Always scan attachments
> before

Can a TSM server admin purloin client backups?

2011-10-25 Thread Keith Arbogast
This question came up again here. If a TSM admin with system authorization 
knows the client password for a certain TSM node, what keeps him from restoring 
files from that node to another server of his choosing?

Sorry to resuscitate this old horse.

With many thanks,
Keith  


Re: Can a TSM server admin purloin client backups?

2011-10-25 Thread Remco Post
Even better, an admin with system privileges can even restore the data without 
knowing the client password, using his own credentials. The lesson here: a 
system admin can do everything with everything.

The only way to prevent that is have the entire actlog be forwarded 'real time' 
to a central logging server that he can't touch and the death penalty on any 
action you don't want him to perform. (And full time auditing etc).

On 25 okt. 2011, at 22:07, Keith Arbogast wrote:

> This question came up again here. If a TSM admin with system authorization 
> knows the client password for a certain TSM node, what keeps him from 
> restoring files from that node to another server of his choosing?
> 
> Sorry to resuscitate this old horse.
> 
> With many thanks,
> Keith  

-- 
Met vriendelijke groeten/Kind Regards,

Remco Post
r.p...@plcs.nl
+31 6 248 21 622


Re: Can a TSM server admin purloin client backups?

2011-10-25 Thread Hart, Charles A
Nothing, it's a policy challenge if they has TSM Sys Admin rights.  Kind
of like a Cop that sells evidence or takes a bribe, a priest that
protects the young ... at some point you have to trust your admin or
fire them.  In my exp a node pw can be overridden with a Sys admin user
and pw.

Maybe I over simplified the situation.



-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of
Keith Arbogast
Sent: Tuesday, October 25, 2011 3:07 PM
To: ADSM-L@VM.MARIST.EDU
Subject: [ADSM-L] Can a TSM server admin purloin client backups?

This question came up again here. If a TSM admin with system
authorization knows the client password for a certain TSM node, what
keeps him from restoring files from that node to another server of his
choosing?

Sorry to resuscitate this old horse.

With many thanks,
Keith  

This e-mail, including attachments, may include confidential and/or
proprietary information, and may be used only by the person or entity
to which it is addressed. If the reader of this e-mail is not the intended
recipient or his or her authorized agent, the reader is hereby notified
that any dissemination, distribution or copying of this e-mail is
prohibited. If you have received this e-mail in error, please notify the
sender by replying to this message and delete this e-mail immediately.


Re: Can a TSM server admin purloin client backups?

2011-10-25 Thread Skylar Thompson

Nothing at all. If it's a concern, then you can either use the TSM
client encryption, or some application-level encryption prior to TSM
reading it at all.

Of course, even with the data encrypted, the administrator could
compromise the system in other ways, such as deleting backups outright.
To some degree the administrator does have to be trusted, and if you
can't trust him/her then you need to find someone else to do backups.

--
-- Skylar Thompson (skyl...@u.washington.edu)
-- Genome Sciences Department, System Administrator
-- Foege Building S046, (206)-685-7354
-- University of Washington School of Medicine

On 10/25/11 01:07 PM, Keith Arbogast wrote:

This question came up again here. If a TSM admin with system authorization 
knows the client password for a certain TSM node, what keeps him from restoring 
files from that node to another server of his choosing?

Sorry to resuscitate this old horse.

With many thanks,
Keith


Re: Can a TSM server admin purloin client backups?

2011-10-25 Thread Skylar Thompson

It's actually a bit worse than that - an admin can read the data even
without a password reset using proxy nodes. Short of some entries in the
activity log, there wouldn't be any evidence of this.

--
-- Skylar Thompson (skyl...@u.washington.edu)
-- Genome Sciences Department, System Administrator
-- Foege Building S046, (206)-685-7354
-- University of Washington School of Medicine

On 10/25/11 01:22 PM, Hart, Charles A wrote:

Nothing, it's a policy challenge if they has TSM Sys Admin rights.  Kind
of like a Cop that sells evidence or takes a bribe, a priest that
protects the young ... at some point you have to trust your admin or
fire them.  In my exp a node pw can be overridden with a Sys admin user
and pw.

Maybe I over simplified the situation.



-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of
Keith Arbogast
Sent: Tuesday, October 25, 2011 3:07 PM
To: ADSM-L@VM.MARIST.EDU
Subject: [ADSM-L] Can a TSM server admin purloin client backups?

This question came up again here. If a TSM admin with system
authorization knows the client password for a certain TSM node, what
keeps him from restoring files from that node to another server of his
choosing?

Sorry to resuscitate this old horse.

With many thanks,
Keith

This e-mail, including attachments, may include confidential and/or
proprietary information, and may be used only by the person or entity
to which it is addressed. If the reader of this e-mail is not the intended
recipient or his or her authorized agent, the reader is hereby notified
that any dissemination, distribution or copying of this e-mail is
prohibited. If you have received this e-mail in error, please notify the
sender by replying to this message and delete this e-mail immediately.


Re: Can a TSM server admin purloin client backups?

2011-10-25 Thread Ochs, Duane
I guess that depends on the privs the TSM admin has to your servers. 

In my environment as the Senior TSM admin I have admin privs or root access to 
all the machines being backed up.
Which means I could in theory restore data to any server I wanted... however I 
could also copy data from one machine to another, in theory.

For other admins, in our environment, that do not have admin privs they don't 
have access to log into machines to configure a restore from another machine.

FYI: TSM admins could also change the password to a client machine to restore 
data anywhere, if they wanted.



-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of Hart, 
Charles A
Sent: Tuesday, October 25, 2011 3:22 PM
To: ADSM-L@VM.MARIST.EDU
Subject: Re: Can a TSM server admin purloin client backups?

Nothing, it's a policy challenge if they has TSM Sys Admin rights.  Kind
of like a Cop that sells evidence or takes a bribe, a priest that
protects the young ... at some point you have to trust your admin or
fire them.  In my exp a node pw can be overridden with a Sys admin user
and pw.

Maybe I over simplified the situation.



-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of
Keith Arbogast
Sent: Tuesday, October 25, 2011 3:07 PM
To: ADSM-L@VM.MARIST.EDU
Subject: [ADSM-L] Can a TSM server admin purloin client backups?

This question came up again here. If a TSM admin with system
authorization knows the client password for a certain TSM node, what
keeps him from restoring files from that node to another server of his
choosing?

Sorry to resuscitate this old horse.

With many thanks,
Keith  

This e-mail, including attachments, may include confidential and/or
proprietary information, and may be used only by the person or entity
to which it is addressed. If the reader of this e-mail is not the intended
recipient or his or her authorized agent, the reader is hereby notified
that any dissemination, distribution or copying of this e-mail is
prohibited. If you have received this e-mail in error, please notify the
sender by replying to this message and delete this e-mail immediately.


Re: Can a TSM server admin purloin client backups?

2011-10-25 Thread Del Hoobler
How about using client encryption?


Thanks,

Del



"ADSM: Dist Stor Manager"  wrote on 10/25/2011
04:07:06 PM:

>> From: Keith Arbogast 
>> To: ADSM-L@vm.marist.edu
>> Date: 10/25/2011 04:16 PM
>> Subject: Can a TSM server admin purloin client backups?
>> Sent by: "ADSM: Dist Stor Manager" 
>>
>> This question came up again here. If a TSM admin with system
>> authorization knows the client password for a certain TSM node,
>> what keeps him from restoring files from that node to another
>> server of his choosing?
>>
>> Sorry to resuscitate this old horse.
>>
>> With many thanks,
>> Keith
>>


Re: Can a TSM server admin purloin client backups?

2011-10-25 Thread Remco Post
anybody willing to do evil could find a way to have a system connected to the 
network where he has full access. Some laptop? Even with port security on the 
switch... just fix the ethernet card mac address :)

Basically, trust your admins to do the right thing, or don't hire them in the 
first place.

On 25 okt. 2011, at 22:43, Ochs, Duane wrote:

> I guess that depends on the privs the TSM admin has to your servers. 
> 
> In my environment as the Senior TSM admin I have admin privs or root access 
> to all the machines being backed up.
> Which means I could in theory restore data to any server I wanted... however 
> I could also copy data from one machine to another, in theory.
> 
> For other admins, in our environment, that do not have admin privs they don't 
> have access to log into machines to configure a restore from another machine.
> 
> FYI: TSM admins could also change the password to a client machine to restore 
> data anywhere, if they wanted.
> 
> 
> 
> -Original Message-
> From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of 
> Hart, Charles A
> Sent: Tuesday, October 25, 2011 3:22 PM
> To: ADSM-L@VM.MARIST.EDU
> Subject: Re: Can a TSM server admin purloin client backups?
> 
> Nothing, it's a policy challenge if they has TSM Sys Admin rights.  Kind
> of like a Cop that sells evidence or takes a bribe, a priest that
> protects the young ... at some point you have to trust your admin or
> fire them.  In my exp a node pw can be overridden with a Sys admin user
> and pw.
> 
> Maybe I over simplified the situation.
> 
> 
> 
> -Original Message-
> From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of
> Keith Arbogast
> Sent: Tuesday, October 25, 2011 3:07 PM
> To: ADSM-L@VM.MARIST.EDU
> Subject: [ADSM-L] Can a TSM server admin purloin client backups?
> 
> This question came up again here. If a TSM admin with system
> authorization knows the client password for a certain TSM node, what
> keeps him from restoring files from that node to another server of his
> choosing?
> 
> Sorry to resuscitate this old horse.
> 
> With many thanks,
> Keith  
> 
> This e-mail, including attachments, may include confidential and/or
> proprietary information, and may be used only by the person or entity
> to which it is addressed. If the reader of this e-mail is not the intended
> recipient or his or her authorized agent, the reader is hereby notified
> that any dissemination, distribution or copying of this e-mail is
> prohibited. If you have received this e-mail in error, please notify the
> sender by replying to this message and delete this e-mail immediately.

-- 
Met vriendelijke groeten/Kind Regards,

Remco Post
r.p...@plcs.nl
+31 6 248 21 622


Re: TDP for Databases 6.3 -- Documentation

2011-10-25 Thread Carol Trible
The TSM V6.3 information center is currently being hosted on a section of
ibm.com that is experiencing intermittent outages. The ibm.com support team
is investigating.

  Two other methods for accessing V6.3 documentation are provided
  below:

  1.  There is a downloadable version of the information center at
  
ftp://public.dhe.ibm.com/storage/tivoli-storage-management/techprev/infocenter/
  .
  Instructions for downloading it are available at
  
http://www.ibm.com/developerworks/wikis/display/tivolistoragemanager/Downloadable
+V6.3+information+center
  .

  2.  PDF versions of the books are available at the IBM Publications
  Center at
  http://www.ibm.com/e-business/linkweb/publications/servlet/pbi.wss.

Carol Trible
 IBM Tivoli Storage Manager Development
 tri...@us.ibm.com





Re: Can a TSM server admin purloin client backups?

2011-10-25 Thread Hans Christian Riksheim
I think the real problem is not with the administrator.

The real problem is that an owner of client A can restore data from
client B only by knowing the TSM admin password. Think many customers
hooked up to the same TSM server.

And how often is that particular password changed in a lib/config
manager environment? Fair chance that it is "out there".

Hans Chr.

On Tue, Oct 25, 2011 at 10:07 PM, Keith Arbogast  wrote:
> This question came up again here. If a TSM admin with system authorization 
> knows the client password for a certain TSM node, what keeps him from 
> restoring files from that node to another server of his choosing?
>
> Sorry to resuscitate this old horse.
>
> With many thanks,
> Keith
>


TSM 6.2 in HACMP Clustered Environment

2011-10-25 Thread pharthiphan
I'm implementing TSM 6.2 in a PowerHA 7.1 Environment.

can somebody guide me or provide some documents,because in the second node i 
not able to update the DB2 configuration.
http://www-01.ibm.com/support/docvie...id=swg1IC70964

$ db2 catalog database TSMDB1 on /home/tsminst1
SQL6028N Catalog database failed because database "TSMDB1" was not found in
the local database directory.

It is a fresh Installation.

+--
|This was sent by pharthip...@gmail.com via Backup Central.
|Forward SPAM to ab...@backupcentral.com.
+--


Re: TSM Client 6.2.3.3 installtion issue

2011-10-25 Thread Grigori Solonovitch
Thank you very much for advice. I have tried to create service by using command 
line:

C:\Program Files\Tivoli\TSM\baclient>dsmcutil" install cad /name:"TSM Client 
Acceptor" /node:ICM /password:xxx /optfile:"C:\Program 
Files\Tivoli\TSM\baclient\dsm.opt"

TSM Windows NT Client Service Configuration Utility
Command Line Interface - Version 6, Release 2, Level 3.3
(C) Copyright IBM Corporation, 1990, 2011, All Rights Reserved.
Last Updated Jul 11 2011
TSM Api Version 6.2.3
Command: Install TSM Client Service
Machine: ICM(Local Machine)
Installing TSM Client Service:
   Machine  : ICM
   Service Name : TSM Client Acceptor
   Client Directory : C:\Program Files\Tivoli\TSM\baclient
   Automatic Start  : no
   Logon Account: LocalSystem
CreateService: Win32 RC=1072 .
The service was not installed.
C:\Program Files\Tivoli\TSM\baclient>

So problem is much deeper.

Grigori G. Solonovitch


-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of Howard 
Coles
Sent: 25 10 2011 7:02 PM
To: ADSM-L@VM.MARIST.EDU
Subject: Re: [ADSM-L] TSM Client 6.2.3.3 installtion issue

I've only seen that once in a while.  I changed our SOP to use the
command line install, as it's easy to just copy and paste the command
into a command prompt window to avoid such issues.  Especially since it
can take a while for the gui wizard to run at times.


See Ya'
Howard Coles Jr.
John 3:16!


-Original Message-
From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of
Grigori Solonovitch
Sent: Monday, October 24, 2011 5:57 AM
To: ADSM-L@VM.MARIST.EDU
Subject: [ADSM-L] TSM Client 6.2.3.3 installtion issue

I have problems with TSM Client Acceptor 6.2.3.3 configuration on
Windows 2003 Standard Edition 32 bit and Windows 2008 32 bit.
TSM Client Setup wizard is not able to create and start Windows service.
Problem is applicable to many servers.
Anybody else have faced similar problem?


Grigori G. Solonovitch



CONFIDENTIALITY AND WAIVER: The information contained in this electronic
mail message and any attachments hereto may be legally privileged and
confidential. The information is intended only for the recipient(s)
named in this message. If you are not the intended recipient you are
notified that any use, disclosure, copying or distribution is
prohibited. If you have received this in error please contact the sender
and delete this message and any attachments from your computer system.
We do not guarantee that this message or any attachment to it is secure
or free from errors, computer viruses or other conditions that may
damage or interfere with data, hardware or software.

Please consider the environment before printing this Email.
DISCLAIMER: This communication, along with any documents, files or attachments, 
is intended only for the use of the addressee and may contain legally 
privileged and confidential information. If you are not the intended recipient, 
you are hereby notified that any dissemination, distribution or copying of any 
information contained in or attached to this communication is strictly 
prohibited. If you have received this message in error, please notify the 
sender immediately and destroy the original communication and its attachments 
without reading, printing or saving in any manner. Please consider the 
environment before printing this e-mail.


CONFIDENTIALITY AND WAIVER: The information contained in this electronic mail 
message and any attachments hereto may be legally privileged and confidential. 
The information is intended only for the recipient(s) named in this message. If 
you are not the intended recipient you are notified that any use, disclosure, 
copying or distribution is prohibited. If you have received this in error 
please contact the sender and delete this message and any attachments from your 
computer system. We do not guarantee that this message or any attachment to it 
is secure or free from errors, computer viruses or other conditions that may 
damage or interfere with data, hardware or software.


Re: TSM 6.2 in HACMP Clustered Environment

2011-10-25 Thread Remco Post
Hi,

the db2 catalog is part of the startserver script, you may safely skip that 
step.

I'd be interested to hear about your fs layout and experiences. TSM 6.2 in 
HACMP is not very common and many people I talk to have problems with TSM v6 in 
fail-over clusters.

On 26 okt. 2011, at 03:09, pharthiphan wrote:

> I'm implementing TSM 6.2 in a PowerHA 7.1 Environment.
> 
> can somebody guide me or provide some documents,because in the second node i 
> not able to update the DB2 configuration.
> http://www-01.ibm.com/support/docvie...id=swg1IC70964
> 
> $ db2 catalog database TSMDB1 on /home/tsminst1
> SQL6028N Catalog database failed because database "TSMDB1" was not found in
> the local database directory.
> 
> It is a fresh Installation.
> 
> +--
> |This was sent by pharthip...@gmail.com via Backup Central.
> |Forward SPAM to ab...@backupcentral.com.
> +--

-- 
Met vriendelijke groeten/Kind Regards,

Remco Post
r.p...@plcs.nl
+31 6 248 21 622