Chapter 3. Restoring Directory Server In certain situations, for example after a hardware failure, you need to restore Directory Server. You can do that using the command line or the web console. Note that Directory Server does not support restoration of individual databases. When you want to populate the database with custom data, use the import feature. You can import specific data from a server in LDIF format. For details, see Importing data to Directory Server . 3.1. Restoring all databases using the command line while the instance is running To restore all databases on the Directory Server instance that is running, use the dsconf backup restore command. Prerequisites You have a Directory Server backup. The dirsrv user has read permissions in the backup directory. The Directory Server instance is running. Procedure Restore all databases from the backup stored in the /var/lib/dirsrv/slapd- instance_name /bak/ instance_name-YYYY_MM_DD_hh_mm_ss directory: # dsconf -D "cn= Directory Manager " ldap://server.example.com backup restore /var/lib/dirsrv/slapd- instance_name /bak/ instance_name-YYYY_MM_DD_hh_mm_ss The backup restore task has finished successfully Search the /var/log/dirsrv/slapd- instance_name /errors log for problems during the restore. Additional resources To display all additional settings that you can use to restore data, see the output of the dsconf ldap://server.example.com backup restore --help command. Backing up all databases using the command line while the instance is running Importing data to Directory Server 3.2. Restoring all databases using the command line while the instance is offline To restore all databases when the instance is offline, use the dsctl bak2db command. Prerequisites You have a Directory Server backup. The dirsrv user has read permissions in the backup directory. The Directory Server instance is not running. Procedure Restore all databases from the backup stored in the /var/lib/dirsrv/slapd- instance_name /bak/ instance_name-YYYY_MM_DD_hh_mm_ss directory: # dsctl instance_name bak2db /var/lib/dirsrv/slapd- instance_name /bak/ instance_name-YYYY_MM_DD_hh_mm_ss / bak2db successful Optionally, pass the -v option to the command to display verbose output: # dsctl -v instance_name bak2db /var/lib/dirsrv/slapd- instance_name /bak/ instance_name-YYYY_MM_DD_hh_mm_ss / ... DEBUG: Instance allocated DEBUG: OK group dirsrv exists DEBUG: OK user dirsrv exists DEBUG: systemd status -> True ... INFO: bak2db successful Search the /var/log/dirsrv/slapd- instance_name /errors log for problems during the restore. Optional: Start the instance: # dsctl instance_name start Additional resources Backing up all databases using the command line while the instance is offline Importing data to Directory Server 3.3. Restoring all databases using the web console Directory Server supports restoring data using the web console. Prerequisites A backup is stored in the /var/lib/dirsrv/slapd- instance_name /bak/ directory. The dirsrv user has read permissions in the backup directory. You are logged in to the instance in the web console. Procedure Click the Actions menu, and select Manage Backups . The displayed window lists the available backups in the /var/lib/dirsrv/slapd- instance_name /bak/ directory. Open the Actions menu to the backup you want to restore, and select Restore Backup . Click Yes to confirm. To check the log for problems during the restore, open the Monitoring Logging Errors Log menu. Additional resources Backing up all databases using the web console Importing data to Directory Server 3.4. Restoring databases that include replicated entries Several situations can occur when a supplier server is restored: The consumer servers are also restored. For the very unlikely situation, that all databases are restored from backups taken at exactly the same time (so that the data are in sync), the consumers remain synchronized with the supplier, and it is not necessary to do anything else. Replication resumes without interruption. Only the supplier is restored. If only the supplier is restored or if the consumers are restored from backups taken at different times, reinitialize the consumers for the supplier to update the data in the database. Changelog entries have not yet expired on the supplier server. If the supplier's changelog has not expired since the database backup was taken, then restore the local consumer and continue with normal operations. This situation occurs only if the backup was taken within a period of time that is shorter than the value set for the maximum changelog age attribute, nsslapd-changelogmaxage , in the cn=changelog,cn= database_name ,cn=ldbm database,cn=plugins,cn=config entry. Directory Server automatically detects the compatibility between the replica and its changelog. If a mismatch is detected, the server removes the old changelog file and creates a new, empty one. Changelog entries have expired on the supplier server since the time of the local backup. If changelog entries have expired, reinitialize the consumer. Example 3.1. Restoring a Directory Server replication topology To restore all servers in a replication environment, consisting of two suppliers and two consumer servers: Reinitialize the first supplier using either restore or import. Online-initialize the remaining servers by using replication: Initialize the second supplier from the first one. Initialize the consumers from the supplier. On each server, display the replication status to verify that replication works correctly. The changelog associated with the restored database will be erased during the restore operation. A message will be logged to the supplier server's log files indicating that reinitialization is required. Additional resources nsslapd-changelogmaxage Restoring all databases using the command line while the instance is running Importing data to Directory Server Configuring and managing replication 3.5. Restoring configuration files, the certificate database, and custom schema files You can manually restore configuration files, the certificate database, and custom schema files from the backup. Prerequisites You have a Directory Server backup. The dirsrv user has read permissions in the /var/lib/dirsrv/slapd- instance_name /bak/ backup directory. The Directory Server instance is not running. Procedure Copy files you want to restore from the the backup directory to the Directory Server configuration directory. For example, to restore the dse.ldif configuration file, enter: Start the instance: Verification Verify that the server restored the server configuration: Additional resources Backing up configuration files, the certificate database, and custom schema files

Commands:
dsconf -D "cn= Directory Manager " ldap://server.example.com backup restore /var/lib/dirsrv/slapd- instance_name /bak/ instance_name-YYYY_MM_DD_hh_mm_ss The backup restore task has finished successfully
dsctl instance_name bak2db /var/lib/dirsrv/slapd- instance_name /bak/ instance_name-YYYY_MM_DD_hh_mm_ss / bak2db successful
dsctl -v instance_name bak2db /var/lib/dirsrv/slapd- instance_name /bak/ instance_name-YYYY_MM_DD_hh_mm_ss / DEBUG: Instance allocated DEBUG: OK group dirsrv exists DEBUG: OK user dirsrv exists DEBUG: systemd status -> True INFO: bak2db successful
dsctl instance_name start
cp /var/lib/dirsrv/slapd- instance_name /bak/ example_backup /config_files/dse.ldif /etc/dirsrv/slapd- instance_name /
dsctl instance_name start
dsconf -D "cn=Directory Manager" ldap://server.example.com config get