Netscape MANAGEMENT SYSTEM 6.0 - COMMAND-LINE Manual page 50

Restoring Data
You cannot restore data to a CMS instance that has not been configured. If you
re-installed CMS prior to attempting to restore data, you must configure the new
CMS instance. When you configure the new installation, keep the following points
in mind:
• All services should be running on the same network ports as they were when
the backup archive was created. For example, the administration console port
is a random number by default; be sure to change the default to the same port
that your original installation used.
• During configuration, you still need to create new keys and certificates for any
servers that use the internal token. You only need to create these keys to
complete the configuration process. Your signing, SSL, or DRM transport
certificates will be restored (replacing whatever you create during the new
configuration) when you run the restore script.
The user running the restore tool will probably need superuser (UNIX) or
Administrator (Windows NT) privileges. The user running the tool will need
privileges to do the following:
• Read the backup zip archive
• Create a temporary working directory in the directory where the archive is
located
• Create directories and files in the server root and server instance directories
(for example, if the
• Run the
• (UNIX) Change file ownership of the LDAP database backup files to the
Directory Server user. The Directory Server user is defined by the
parameter in
running
change the owner of the files to the LDAP server user (typically only the
superuser has this privilege).
The process of restoring data will require that some servers be stopped and
restarted. If any of your servers require passwords to start (for example, if they
need to unlock the key database in order to listen for SSL requests), you will be
prompted for the password. If any passwords have changed since you created the
backup archive, make sure you know the password that was valid at the time the
archive was created.
50 Netscape Certificate Management System Command-Line Tools Guide • March 2002
file needs to be restored)
CMS.cfg
tool for any Netscape Directory Servers that are being restored
bak2db
. If the Directory Server user is different from the user
slapd.conf
, the user running the tool must be able to run
cmsrestore
localuser
to
chown