4 4 3 Beefalo:Configuration

From SEPsesam
Jump to: navigation, search
Other languages:
Deutsch • ‎English
<<<Back
Activities
User Manual
Next>>>
Window


GUI configuration options

You can access the configuration options from the menu bar -> Configuration. Configuration provides different settings and parameters that define SEP sesam look and feel as well as its behavior. The following functions are available by selecting the Configuration option in the menu bar.

Configuration overview Beefalo.jpg

Defaults

Under Defaults, you can define the access to SEP sesam online help, change UI mode, customise the GUI font and tables, set the date format, set retention periods for logs and restore tasks, define some extra settings, configure the default permissions and check the settings.

General tab

  • UI Mode: You can select between different UI modes: Basic, Advanced or Expert. For example, basic mode makes GUI simpler for less advanced users, but in the expert and advanced mode some additional options are available, e.g., Expert Options button in the restore wizard.
  • Filter panels: You can select that filter panels are not hidden automatically by checking Show filter panels by default option.
  • Help: By default, the option Link to WEB help file is set. The online help is set to the SEP sesam Wiki main page, thus providing the latest updated version of help topics online. You can use the Test It button to check the access to help files.

Defaults general Beefalo.jpg

Fonts and Tables tab

You can customize your SEP sesam GUI appearance by changing:

  • Font: The predefined GUI font is plain. You can select Choose button to change the default font, font style and/or size.
  • Font used in tables and trees: You can change the default font (proportional) to non-proportional (monospaced).
  • Table Striping: You can change the appearance of GUI tables by selecting one of the zebra striping tables from the drop-down list.

Defaults fonts Beefalo.jpg
You can reset GUI to SEP sesam default at any time.

Display Format tab

Under the tab Display Format, you can change the default setting for the date format as well as default setting for data size units. The data size can be specified either with decimal (KB, MB, GB, TB) or binary prefix (KiB, MiB, GiB, TiB, etc.). For details, see Changing data size units.

Defaults display format Beefalo.jpg

Install/Update tab

Under the tab Install/Update, you can set the desired Update mode. By default, SEP sesam checks for updates automatically and updates its database accordingly without automatically installing the update; an icon (yellow ) notifying the user that an update is available is shown for the respective client and a popup notification on hover suggests that there is a new version available. The following options are available:

  • Do not download or install any updates (default): If selected, updates will not be automatically downloaded and installed when a new version is available.
  • Download updates automatically, but install manually: If selected, updates will be automatically downloaded, but you have to install them manually.
  • Download and install updates automatically (at Sesam newday): If selected, updates will be automatically downloaded and installed based on SEP sesam NEWDAY, when a new version is available in the SEP Download Center.

Configuration install-update.jpg

Retention Periods tab

You can set up the retention period in days for SEP sesam logs, readability check logs, calendar sheet entries and restore tasks. The retention period is the time period for which the SEP sesam retaines specified data. Once the retention period expires, the data is removed from the database and is no longer available. Click the arrows to increase or decrease the predefined retention time per file.

  • SEP sesam logs: The default value for preserving the SEP sesam log files is 7 days.
  • Readability check logs: The default value for preserving the readability check log files is 2190 days.
  • Calendar sheet entries: The default retention time for old calendar sheet entries is 35 days.
  • Restore tasks: The default retention time for old restore tasks is 7 days.

Defaults retention periods Beefalo.jpg

Extras tab

Under the Extras tab, the following settings can be activated:

  • Switch off the scrolling for warning "30 days remaining for maintenance authorization": You can switch off the scrolling for notification about the pending expiration of updates. If there is no update permission, the notification never appears. After installing update, this option is reset.
  • Provide selection of "broken backups" in the restore wizard: If this option is checked, you are allowed to perform a restore from incomplete, broken, or interrupted backups. By default, this selection is not provided.
  • Number of trace log lines to display: The default value for trace log lines is 60. Click the arrows to increase or decrease the number of lines.
  • RSS notification polling interval: The default polling interval for RSS notification is 720 minutes. Click the arrows to increase or decrease the polling interval.
  • Compress LIS files: By default, the LIS files are compressed after 14 days. You can change the number of days after which the LIS files are compressed or deactivate the checkbox to prevent compression of LIS files.
  • Globally activate Changed Block Tracking (CBT): By default, the CBT is enabled to provide change tracking thus saving disk space with optimized block level incremental and differential backups of VMDKs. Note that disabling CBT globally will affect your backup performance and use more disk space. For more details, see Changed Block Tracking (CBT).
  • Task name template: You can configure a template to generate backup task name automatically, when creating new backup tasks. Note that the template applies to all task types, except if a task type provides its own template.

Defaults extras Beefalo.jpg

Permissions tab

You can configure the default permissons (ACLs) for all top level locations by simply selecting or adding the relevant user or group (ADMIN, OPERATOR, BACKUP or RESTORE), and enabling or disabling access (to locations) per user/group. For details on how to configure ACLs for a specific location or client, see Using Access Control Lists.

Defaults permissions Beefalo.jpg

Settings tab

The Settings tab displays an overview of all internal GUI settings. You can insert or modify the keys, for example, to set up customized retention policy. For details, see Customizing retention policy.

Defaults settings Beefalo.jpg

Media types

Media Types window lists all media types defined in SEP sesam. Entries in black font are the media types currently used. They were set up in the database at the installation of SEP sesam and – contrary to the user defined media types (green font) – cannot be erased nor changed.

  • Media Type: Shows SEP sesam internal identification of the media type.
  • Drive Type: Shows SEP sesam internal drive types.
  • Capacity: Presents storage capacity of allowed media and drive combination. This combination determines which media can be inserted into which drives.

Media types Beefalo.jpg

Command

You can create and define your own commands to be used for various tasks within SEP sesam environment.

When configuring a new command, you have to define the following:

  • Name: Enter the name for a new command.
  • Client: Select a client, on which the command will be executed.
  • User: Enter a user name of the user with sufficient access to execute the command on the client.
  • Command: Enter the complete command (and parameters, if required), e.g., eventlog.ps1.

Configuration commands Beefalo.jpg

Information sign.png Note
When defining your own commands, some security considerations apply and are explained in Access restriction of command events.

Remote server (Master GUI only)

This option is used for the server administration of the Master GUI. It is possible to both configure or remove SEP sesam Servers or add new servers to the backup tree.

Information sign.png Note
The menu option is only available in the SEP sesam version Master sesam.
  • Server name: Name of the additional SEP sesam Server in the network.
  • Connection: Shows if the Server is in the network (green = ON, red = broken, gray = OFF).
  • GUI build: Displays GUI version.
  • Operating system: OS of the SEP sesam Server.

Remoteserver en.jpg

The Master GUI allows the administrator control of all SEP sesam servers and clients.

When entering a new server into the SEP sesam backup scheduler, there are additional parameters which must be set. The values are preset with default settings.

  • Server name: Enter a name of the additional SEP sesam Server in the network.
  • Connection: You can switch the connection ON or OFF.
  • Operating system: OS of the SEP sesam Server.
  • RMI port: Define port number for client-server connection.
  • Comment: Optionally, you can add a comment.

Newremoteserver 4.0 en.jpg

User Permissions

The User Permissions item is only visible if policy-based authentication is activated (default). For details, see Configuring Policy-Based Authentication.

User permissions Beefalo.jpg

In the User Permissions you can configure the user authorization. Options are admin (the only user role with full control over the SEP sesam), operator (monitors the SEP sesam Server backup status), backup (only allowed to start backups) and restore (only allowed to start restores). The assignment of permissions is user- and client-specific. If a non-authorized user or non-authorized client tries to create a GUI connection, it is rejected.

New users permission Beefalo.jpg

Note 1:

If the name resolution for the selected client is not complete (IP name and reverse lookup of the IP address), the connection is also rejected!

Note 2: Alternatively the SEP sesam program sm_setup can be utilized to assign user permissions:

  • Adding a user permission:
  • sm_setup allow_gui -u *|<user> -c *|<client> -m admin|operator|restore
    
  • Removing a user permission:
  • sm_setup disallow_gui -u *|<user> [-c *|<client>] [-m *|admin|operator|restore]
    
  • View permissions of users or clients:
  • sm_setup get_policy [-m user|client]
    

Permission Management

Introduced in v. 4.4.3, SEP sesam provides different authentication methods that are mutually exclusive. For details, see About Authentication and Authorization.

Depending on which authentication mode is active, one of the following options is shown:

  • Policy-based authentication is enabled by default. You can switch to database-based authentication by using the Activate Authentication button in the Permission Management window. If you choose not to activate the database-based authentication, policy-based authentication stays enabled. Policy-based authentication is configured in User Permissions (see previous menu option). For details, see Configuring Policy-Based Authentication.
  • When you turn on database-based authentication by using the Activate Authentication button, upon the restart of a GUI and SEP sesam client, you can use any of the 5 available tabs: Users, Groups, External Groups, Sources and Activation. You can create users, modify their settings, such as adding a user to the group or removing it from the group, delete users, create external groups and add the authentication sources for the LDAP/AD authentication. You can also deactivate the database-based authentication. For details on LDAP/AD authentication, see Configuring LDAP/AD Authentication.
  • Authentication permission management Beefalo.jpg

Email Settings

The email settings allow to configure the email accounts that can be used for sending emails from the SEP sesam interface or from the command line. The default email account is sesam.

Configuration email Beefalo.jpg

By clicking New, the Email Account window opens:

Email account Beefalo.jpg

  • Account: Name of the account (mandatory)
  • Customer: Name of the customer
  • Sender: Email address of the sender
  • SMTP server: Name or IP address of the outgoing mail server
  • SMTP user: User name for SMTP server
  • Password: Password for the mail server. Password is mandatory if SMTP server requires authentication.
  • SMTP port: Optionally, specify the SMTP port.
  • Recipient: Email address of the recipient
  • CC: Email address for copy of the email
  • BCC: Email address for hidden copy of the email
  • SSL: Optionally, you can select to connect securely via SSL or TLS.

If no SMTP user name is specified, it is assumed that no authorization is required at the SMTP server.

Interfaces

User interfaces are configurable programs, intended for system administrators that can use them to create their own commands. They can be used to perform additional actions, such as exporting a database, restarting a database, and sending emails. The following interfaces are available: pre (sbc_pre), post (sbc_post), alarm (sm_alarm), disaster (sm_disaster) and notify (sm_notify). The pre/post-interface might affect backup execution; when creating a script, have in mind that any pre/post script should not take a long time to complete as it can delay the backup.

Interfaces pre Beefalo.jpg

User interfaces can be programmed using any text editor. To use an interface, you have to activate it first and create your own commands. From the Interfaces menu, select the interface you want to activate; if you are configuring a pre/post interface, you have to select a client too since these two interfaces are created for each client individually and are only executed on the selected client. The interface script window opens, allowing you to configure the desired action. Once done, click Save to activate the interface. The interface is saved to the <SESAM_ROOT>/bin/sesam directory. For details, see Using Pre and Post Scripts.

Alternatively, you can activate the user interfaces by using the templates that are available in the SEP sesam directory <SESAM_ROOT>/skel/templates. To activate an interface, you have to copy its corresponding template file to the directory <SESAM_ROOT>/bin/sesam. The templates are only active and executed on the client.

If the email configuration is set, SEP sesam interfaces send messages by email. The default email account is sesam. For details, see How to configure Mail Notification.

SEP sesam allows the use of Pre-, Post-, Alarm-, Notify-, and Disaster interfaces to be combined into scripts.

Interfaces pre edit Beefalo.jpg

PRE interface

Before a backup starts, an administrator can specify special actions to be executed before and during the backup activity. For example, the system can generate messages to quickly notify the administrator of either backup job success or failure. Pre-interface can be used to create commands that will stop or start the selected programs; for example, it may be used to stop the database before it is backed up.

POST interface

Once the backup is finished, some special actions may be required (e.g., notifications/messages, program end/start, restart databases etc.). These actions can be programmed by using the post-interface.

Alarm interface

The SEP sesam system needs no special administration during normal operation once SEP sesam Clients are set up and backup tasks are scheduled (except for the restore). If any functional errors occur, e.g., failure of a certain backup, this event is automatically passed on to the alarm interface. This interface is programmable to filter desired messages and their transmission to the authorized person.

If a license violation has occurred and the alarm interface is activated, an email with the license violation information is sent to the SEP sesam account. The license violations occur when you exceed the conditions set in your license, such as the maximum volume size, the maximum number of configured clients, not licensed backup task types (e.g., BSR), etc. The 16th day upon receiving the violation alarm SEP sesam backups are temporarily stopped until the issue is fixed, while the restores are still available. To avoid license violations, review your license; go to SEP sesam GUI -> Help -> License info. For details, see License administration.

Information sign.png Note
Do not use commands which require input from the user, such as OK buttons. Commands that require user interaction may cause interruption of backups during the night.
Notify interface

Similarly, there is a procedure for successful backups and restores which uses the sm_notify. This can be programmed as needed.

Disaster interface

The term disaster refers to a catastrophic failure or complete destruction of the SEP sesam Server and its data. The SEP sesam disaster interface must be properly configured to help carry out the disaster recovery process. To prepare for a possible breakdown of the SEP sesam Server, a self-backup of the SEP sesam installation must be performed. For details on how to prepare, see SEP sesam Server Disaster Recovery.

The disaster interface sends an email describing the recovery procedure in the event of disaster and an attachment containing the SEP sesam bootstrap database with all essential data for the disaster recovery. The sm_disaster file is located in:

  • Linux: <SESAM_BIN>/skel/templates/sm_disaster
  • Windows: <SESAM_BIN>/skel/templates/sm_disaster.ps1

As an alternative to using Interfaces in the GUI, the disaster interface file can also be copied to SESAM_BIN>/bin/sesam/sm_disaster and modified according to the needs of each environment. For details, see SEP sesam Server Disaster Recovery.

See also

Using Access Control ListsAbout Authentication and AuthorizationUsing Pre and Post ScriptsHow to configure Mail NotificationSEP sesam Server Disaster Recovery


Copyright © SEP AG 1999-2019. All rights reserved.

Any form of reproduction of the contents or parts of this manual is allowed only with the express written permission from SEP AG. When compiling and designing user documentation SEP AG uses great diligence and attempts to deliver accurate and correct information. However, SEP AG cannot issue a guarantee for the contents of this manual.