Security

Reply
Highlighted
Super Contributor I

ClearPass backup auto-transfer failing

Hello,

 

CPPM Version 6.9.2.1

 

We set up a File Backup Server yesterday, but the CPPM logs show the transfer failed because the file wasn't found:

 

Transfer backup to File Backup Server failed
Backup File Name: auto-backup-tips-2020-10-09-01-10-01.tar.gz
Backup Server IP Address: ******.ac.uk
Transfer Type: SFTP
Reason: [Errno 2] No such file

 

But the file is showing in Local Shared Folders -> Automated backup files:

 

auto-backup-tips-2020-10-09-01-10-01.tar.gz

 

Am I missing something?

 

Thank you,

 

Guy

 

 

 

 

 


Accepted Solutions
Highlighted
Moderator

Re: Backup auto-transfer failing

Its a documented BUG in the release notes for 6.9 & SFTP

 

https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.3/Default.htm#PriorKnown/OldKnown_PolicyManager.htm?Highlight=backup

 

search for CP-37483


Best Regards
-d

ClearPass Product Manager

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.

View solution in original post

Highlighted
Super Contributor I

Re: Backup auto-transfer failing

Just to update in case anyone else has this issue:

 

In the end for us (backing up to a Linux box) the issue was that I needed to manually create a directory for each controller that we are backing up within the directory pointed to by the backup path (in our case /backups)

 

So within backups I created folders, the names of the folders are the IP address of the boxes you are backing up. The user that is being used to do the backups needs rights to those folders.

 

What I didn't test was whether if I had specified which controllers to backup in the File Backup Server settings that would have made any difference to its ability to automatically create the folders rather than me manually doing it.

 

One question I still have - does the backup contain config for the whole system? ie Guest etc too?

View solution in original post


All Replies
Highlighted
MVP Guru

Re: Backup auto-transfer failing

- Can the CPPM resolve your ******.ac.uk address?

- Can you log into the ******.ac.uk using the SFTP Credentials with an application such as FileZilla?

- Does the SFTP  account have permissions to create a folder? A folder will be automatically created as part of the backups.

- Have you specified a remote directory as well, such as /


ACMP, ACSA, ACDX #985
If my post addresses your query, give kudos:)
Highlighted
Super Contributor I

Re: Backup auto-transfer failing

- Can the CPPM resolve your ******.ac.uk address?

  Yes it should be able to, though I'll try with IP instead on one of the Server entries just in case

 

- Can you log into the ******.ac.uk using the SFTP Credentials with an application such as FileZilla?

  Yes

 

- Does the SFTP account have permissions to create a folder? A folder will be automatically created as part of the backups.

  Yes it has full permissions on this folder

 

- Have you specified a remote directory as well, such as /

  I have, but it turns out the user is chrooted, so the path I have used might be wrong, I'll try changing this...

 

Thanks

 

Highlighted
Moderator

Re: Backup auto-transfer failing

Its a documented BUG in the release notes for 6.9 & SFTP

 

https://www.arubanetworks.com/techdocs/ClearPass/CP_ReleaseNotes_6.9.3/Default.htm#PriorKnown/OldKnown_PolicyManager.htm?Highlight=backup

 

search for CP-37483


Best Regards
-d

ClearPass Product Manager

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.

View solution in original post

Highlighted
Super Contributor I

Re: Backup auto-transfer failing

Thanks, actually we are using Linux, so hopefully we're ok - I'll see what happens tonight....

Highlighted
Super Contributor I

Re: Backup auto-transfer failing

Hello,

 

We're actually backing up to a Linux box (Ubuntu), so in theory I think the bug shouldn't affect is(?). But I'm still having fun and games with this! It seems that if I manually create directories for each of the CPPM nodes in the cluster (dir name = IP address of node) I get some success - we now have a backup entry... but only for one of our ClearPass boxes, the other directories are empty.

 

What we get is a tar'd dir called:

 

auto-backup tips-2020-10-13-01-10-02.tar.gz

 

This is fine, but what I was expecting was that there would be a different backup file for each box (1 in each of the IP address directories). Am I misunderstanding how this works?

 

Thank you,

 

Guy

Highlighted
Super Contributor I

Re: Backup auto-transfer failing

Just to update in case anyone else has this issue:

 

In the end for us (backing up to a Linux box) the issue was that I needed to manually create a directory for each controller that we are backing up within the directory pointed to by the backup path (in our case /backups)

 

So within backups I created folders, the names of the folders are the IP address of the boxes you are backing up. The user that is being used to do the backups needs rights to those folders.

 

What I didn't test was whether if I had specified which controllers to backup in the File Backup Server settings that would have made any difference to its ability to automatically create the folders rather than me manually doing it.

 

One question I still have - does the backup contain config for the whole system? ie Guest etc too?

View solution in original post

Highlighted

Re: Backup auto-transfer failing

Hi,

 

Yes, the auto backup contains complete configuration in it by default. 

 

You will find auto-backup option under Cluster-Wide Parameters >> Database. It is i recommended to leave it in default setting (i.e. Config).


Thanks,
Saravanan

Did something you read in the Community solve a problem for you? If so, click "Accept as Solution" in the post.
NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: