RE: encryption on IDS 11.50.FC5 on Solaris 10
Larry asked whether ontape and onunload on IDS 11.50.FC5/Solaris 10 support encryption, and wanted real BACKUP_FILTER examples. Replies: neither utility encrypts natively; ontape can pipe archives through an external program via the BACKUP_FILTER/RESTORE_FILTER onconfig parameters (e.g. "gzip -c" / "gunzip -c", or gpg), while onunload output must be piped/encrypted separately. Art also warned of a bug (fixed in 11.50xC6) preventing archecker from reading filtered archives. A later poster showed a working gpg BACKUP_FILTER but reported that the matching RESTORE_FILTER/ontape -r failed; no answer to that is recorded.
Auto-generated by DrWatson from the posts below — may be imperfect; read the full thread.
I am having a hard time researching what is available for encryption for the
"ontape" and "onunload" utilities, if anything. Can anyone tell me if
encryption is available for the above two utilities and tell me the syntax
and/or point me in the right direction for documentation on the utilities?
Thank you.
Larry
Hi,
There is no encryption built into either ontape or onunload. There are no
command line switches to create or read encrypted files with either ontape
or onlunload.
For ontape, you can use the BACKUP_FILTER and RESTORE_FILTER onconfig
parameters to pass the data through another program as archives are
created or restored. If you use something like gpg on Linux you can use
those onconfig parameters to create and read encrypted files. I have no
idea whether or not Solaris provides any equivalent utility, but IDS does
not include anything like it.
For onunload, you can apply the same idea, but there are no onconfig
parameters that apply. You have to pipe the output of onunload through
some program to encrypt the data.
Cheers,
Dick Snoke
Executive IT Specialist
IBM Software Group - ChannelWorks
Tel: (404) 487-1595
Email: dsnoke@us.ibm.com
From:
"LARRY SORENSEN" <lsorensen25@msn.com>
To:
ids@iiug.org
Date:
01/18/10 03:02 PM
Subject:
RE: encryption on IDS 11.50.FC5 on Solaris 10 [18701]
Sent by:
ids-bounces@iiug.org
I am having a hard time researching what is available for encryption for
the
"ontape" and "onunload" utilities, if anything. Can anyone tell me if
encryption is available for the above two utilities and tell me the syntax
and/or point me in the right direction for documentation on the utilities?
Thank you.
Larry
*******************************************************************************
Forum Note: Use "Reply" to post a response in the discussion forum.
VERSION INFORMATION - PLEASE? Encryption is possible in ontape and onbar
for IDS versions 10.00 and later. The documentation is in the Backup and
Restore Guide manual which is part of the IDS documentation set. I do not
believe that onunload/onload support encryption directly, you would have to
encrypt the output files after running onunload or decrypt the file before
running onload.
Art
Art S. Kagel
Advanced DataTools (www.advancedatatools.com)
IIUG Board of Directors (art@iiug.org)
See you at the 2010 IIUG Informix Conference
April 25-28, 2010
Overland Park (Kansas City), KS
www.iiug.org/conf
Disclaimer: Please keep in mind that my own opinions are my own opinions and
do not reflect on my employer, Advanced DataTools, the IIUG, nor any other
organization with which I am associated either explicitly, implicitly, or by
inference. Neither do those opinions reflect those of other individuals
affiliated with any entity with which I am affiliated nor those of the
entities themselves.
On Mon, Jan 18, 2010 at 3:01 PM, LARRY SORENSEN <lsorensen25@msn.com> wrote:
> I am having a hard time researching what is available for encryption for
> the
> "ontape" and "onunload" utilities, if anything. Can anyone tell me if
> encryption is available for the above two utilities and tell me the syntax
> and/or point me in the right direction for documentation on the utilities?
>
> Thank you.
>
> Larry
>
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
--0023545bde38f472f2047d77457e
I appreciate the input that everyone has shared; however, I am looking for
specific examples from people running on Solaris 10 servers. (onconfig
parameters including BACKUP_FILTER, as well as actual scripts/commands run) I
am using ontape; however, I am sure that onbar commands will translate across.
I am not sure what is available on Solaris 10. I believer that I have to have
the encryption package installed, but beyond that, I am not sure how to actual
take advantage of it.
Thanks.
Larry
> To: ids@iiug.org
> From: art.kagel@gmail.com
> Subject: Re: encryption on IDS 11.50.FC5 on Solaris 10 [18703]
> Date: Mon, 18 Jan 2010 16:45:42 -0500
>
> VERSION INFORMATION - PLEASE? Encryption is possible in ontape and onbar
> for IDS versions 10.00 and later. The documentation is in the Backup and
> Restore Guide manual which is part of the IDS documentation set. I do not
> believe that onunload/onload support encryption directly, you would have to
> encrypt the output files after running onunload or decrypt the file before
> running onload.
>
> Art
>
> Art S. Kagel
> Advanced DataTools (www.advancedatatools.com)
> IIUG Board of Directors (art@iiug.org)
>
> See you at the 2010 IIUG Informix Conference
> April 25-28, 2010
> Overland Park (Kansas City), KS
> www.iiug.org/conf
>
> Disclaimer: Please keep in mind that my own opinions are my own opinions and
> do not reflect on my employer, Advanced DataTools, the IIUG, nor any other
> organization with which I am associated either explicitly, implicitly, or by
> inference. Neither do those opinions reflect those of other individuals
> affiliated with any entity with which I am affiliated nor those of the
> entities themselves.
>
> On Mon, Jan 18, 2010 at 3:01 PM, LARRY SORENSEN <lsorensen25@msn.com> wrote:
>
> > I am having a hard time researching what is available for encryption for
> > the
> > "ontape" and "onunload" utilities, if anything. Can anyone tell me if
> > encryption is available for the above two utilities and tell me the syntax
> > and/or point me in the right direction for documentation on the utilities?
> >
> > Thank you.
> >
> > Larry
> >
> >
> >
> >
>
*******************************************************************************
> > Forum Note: Use "Reply" to post a response in the discussion forum.
> >
> >
>
> --0023545bde38f472f2047d77457e
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
Note that there is a outstanding bug that is not fixed until 11.50xC6 (don't
think it has been backported to 11.10 or 10.00 yet) which causes archecker
to not be able to access any archive that was created with a BACKUP_FILTER.
You would have to manually 'unfilter' the file(s) before archecker could
read them.
Art
Art S. Kagel
Advanced DataTools (www.advancedatatools.com)
IIUG Board of Directors (art@iiug.org)
See you at the 2010 IIUG Informix Conference
April 25-28, 2010
Overland Park (Kansas City), KS
www.iiug.org/conf
Disclaimer: Please keep in mind that my own opinions are my own opinions and
do not reflect on my employer, Advanced DataTools, the IIUG, nor any other
organization with which I am associated either explicitly, implicitly, or by
inference. Neither do those opinions reflect those of other individuals
affiliated with any entity with which I am affiliated nor those of the
entities themselves.
On Thu, Jan 21, 2010 at 11:28 AM, LARRY SORENSEN <lsorensen25@msn.com>wrote:
> I appreciate the input that everyone has shared; however, I am looking for
> specific examples from people running on Solaris 10 servers. (onconfig
> parameters including BACKUP_FILTER, as well as actual scripts/commands run)
> I
> am using ontape; however, I am sure that onbar commands will translate
> across.
> I am not sure what is available on Solaris 10. I believer that I have to
> have
> the encryption package installed, but beyond that, I am not sure how to
> actual
> take advantage of it.
>
> Thanks.
>
> Larry
>
> > To: ids@iiug.org
> > From: art.kagel@gmail.com
> > Subject: Re: encryption on IDS 11.50.FC5 on Solaris 10 [18703]
> > Date: Mon, 18 Jan 2010 16:45:42 -0500
> >
> > VERSION INFORMATION - PLEASE? Encryption is possible in ontape and onbar
> > for IDS versions 10.00 and later. The documentation is in the Backup and
> > Restore Guide manual which is part of the IDS documentation set. I do not
> > believe that onunload/onload support encryption directly, you would have
> to
> > encrypt the output files after running onunload or decrypt the file
> before
> > running onload.
> >
> > Art
> >
> > Art S. Kagel
> > Advanced DataTools (www.advancedatatools.com)
> > IIUG Board of Directors (art@iiug.org)
> >
> > See you at the 2010 IIUG Informix Conference
> > April 25-28, 2010
> > Overland Park (Kansas City), KS
> > www.iiug.org/conf
> >
> > Disclaimer: Please keep in mind that my own opinions are my own opinions
> and
> > do not reflect on my employer, Advanced DataTools, the IIUG, nor any
> other
> > organization with which I am associated either explicitly, implicitly, or
> by
> > inference. Neither do those opinions reflect those of other individuals
> > affiliated with any entity with which I am affiliated nor those of the
> > entities themselves.
> >
> > On Mon, Jan 18, 2010 at 3:01 PM, LARRY SORENSEN <lsorensen25@msn.com>
> wrote:
> >
> > > I am having a hard time researching what is available for encryption
> for
> > > the
> > > "ontape" and "onunload" utilities, if anything. Can anyone tell me if
> > > encryption is available for the above two utilities and tell me the
> syntax
> > > and/or point me in the right direction for documentation on the
> utilities?
> > >
> > > Thank you.
> > >
> > > Larry
> > >
> > >
> > >
> > >
> >
>
>
*******************************************************************************
> > > Forum Note: Use "Reply" to post a response in the discussion forum.
> > >
> > >
> >
> > --0023545bde38f472f2047d77457e
> >
> >
> >
>
>
*******************************************************************************
> > Forum Note: Use "Reply" to post a response in the discussion forum.
> >
>
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
--0015174be9eab5fb00047dafc789
I appreciate all of the comments on this topic, but I am still looking for
someone with experience using the BACKUP_FILTER for Informix on Solaris 10. I
am not sure what the possible values for BAKUP_FILTER are. I would like some
specific examples from people who may have done this in the past on Solaris.
> To: ids@iiug.org
> From: art.kagel@gmail.com
> Subject: Re: encryption on IDS 11.50.FC5 on Solaris 10 [18731]
> Date: Thu, 21 Jan 2010 12:10:40 -0500
>
> Note that there is a outstanding bug that is not fixed until 11.50xC6 (don't
> think it has been backported to 11.10 or 10.00 yet) which causes archecker
> to not be able to access any archive that was created with a BACKUP_FILTER.
> You would have to manually 'unfilter' the file(s) before archecker could
> read them.
>
> Art
>
> Art S. Kagel
> Advanced DataTools (www.advancedatatools.com)
> IIUG Board of Directors (art@iiug.org)
>
> See you at the 2010 IIUG Informix Conference
> April 25-28, 2010
> Overland Park (Kansas City), KS
> www.iiug.org/conf
>
> Disclaimer: Please keep in mind that my own opinions are my own opinions and
> do not reflect on my employer, Advanced DataTools, the IIUG, nor any other
> organization with which I am associated either explicitly, implicitly, or by
> inference. Neither do those opinions reflect those of other individuals
> affiliated with any entity with which I am affiliated nor those of the
> entities themselves.
>
> On Thu, Jan 21, 2010 at 11:28 AM, LARRY SORENSEN <lsorensen25@msn.com>wrote:
>
> > I appreciate the input that everyone has shared; however, I am looking for
> > specific examples from people running on Solaris 10 servers. (onconfig
> > parameters including BACKUP_FILTER, as well as actual scripts/commands run)
> > I
> > am using ontape; however, I am sure that onbar commands will translate
> > across.
> > I am not sure what is available on Solaris 10. I believer that I have to
> > have
> > the encryption package installed, but beyond that, I am not sure how to
> > actual
> > take advantage of it.
> >
> > Thanks.
> >
> > Larry
> >
> > > To: ids@iiug.org
> > > From: art.kagel@gmail.com
> > > Subject: Re: encryption on IDS 11.50.FC5 on Solaris 10 [18703]
> > > Date: Mon, 18 Jan 2010 16:45:42 -0500
> > >
> > > VERSION INFORMATION - PLEASE? Encryption is possible in ontape and onbar
> > > for IDS versions 10.00 and later. The documentation is in the Backup and
> > > Restore Guide manual which is part of the IDS documentation set. I do not
> > > believe that onunload/onload support encryption directly, you would have
> > to
> > > encrypt the output files after running onunload or decrypt the file
> > before
> > > running onload.
> > >
> > > Art
> > >
> > > Art S. Kagel
> > > Advanced DataTools (www.advancedatatools.com)
> > > IIUG Board of Directors (art@iiug.org)
> > >
> > > See you at the 2010 IIUG Informix Conference
> > > April 25-28, 2010
> > > Overland Park (Kansas City), KS
> > > www.iiug.org/conf
> > >
> > > Disclaimer: Please keep in mind that my own opinions are my own opinions
> > and
> > > do not reflect on my employer, Advanced DataTools, the IIUG, nor any
> > other
> > > organization with which I am associated either explicitly, implicitly, or
> > by
> > > inference. Neither do those opinions reflect those of other individuals
> > > affiliated with any entity with which I am affiliated nor those of the
> > > entities themselves.
> > >
> > > On Mon, Jan 18, 2010 at 3:01 PM, LARRY SORENSEN <lsorensen25@msn.com>
> > wrote:
> > >
> > > > I am having a hard time researching what is available for encryption
> > for
> > > > the
> > > > "ontape" and "onunload" utilities, if anything. Can anyone tell me if
> > > > encryption is available for the above two utilities and tell me the
> > syntax
> > > > and/or point me in the right direction for documentation on the
> > utilities?
> > > >
> > > > Thank you.
> > > >
> > > > Larry
> > > >
> > > >
> > > >
> > > >
> > >
> >
> >
>
*******************************************************************************
> > > > Forum Note: Use "Reply" to post a response in the discussion forum.
> > > >
> > > >
> > >
> > > --0023545bde38f472f2047d77457e
> > >
> > >
> > >
> >
> >
>
*******************************************************************************
> > > Forum Note: Use "Reply" to post a response in the discussion forum.
> > >
> >
> >
> >
> >
>
*******************************************************************************
> > Forum Note: Use "Reply" to post a response in the discussion forum.
> >
> >
>
> --0015174be9eab5fb00047dafc789
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
Have used gzip in BACKUP filter on several systems, including Solaris:
BACKUP_FILTER "gzip -c"
That's it. To restore just change it to:
BACKUP_FILTER "gunzip -c"
Art
Art S. Kagel
Advanced DataTools (www.advancedatatools.com)
IIUG Board of Directors (art@iiug.org)
See you at the 2010 IIUG Informix Conference
April 25-28, 2010
Overland Park (Kansas City), KS
www.iiug.org/conf
Disclaimer: Please keep in mind that my own opinions are my own opinions and
do not reflect on my employer, Advanced DataTools, the IIUG, nor any other
organization with which I am associated either explicitly, implicitly, or by
inference. Neither do those opinions reflect those of other individuals
affiliated with any entity with which I am affiliated nor those of the
entities themselves.
On Fri, Jan 22, 2010 at 1:31 PM, LARRY SORENSEN <lsorensen25@msn.com> wrote:
> I appreciate all of the comments on this topic, but I am still looking for
> someone with experience using the BACKUP_FILTER for Informix on Solaris 10.
> I
> am not sure what the possible values for BAKUP_FILTER are. I would like
> some
> specific examples from people who may have done this in the past on
> Solaris.
>
> > To: ids@iiug.org
> > From: art.kagel@gmail.com
> > Subject: Re: encryption on IDS 11.50.FC5 on Solaris 10 [18731]
> > Date: Thu, 21 Jan 2010 12:10:40 -0500
> >
> > Note that there is a outstanding bug that is not fixed until 11.50xC6
> (don't
> > think it has been backported to 11.10 or 10.00 yet) which causes
> archecker
> > to not be able to access any archive that was created with a
> BACKUP_FILTER.
> > You would have to manually 'unfilter' the file(s) before archecker could
> > read them.
> >
> > Art
> >
> > Art S. Kagel
> > Advanced DataTools (www.advancedatatools.com)
> > IIUG Board of Directors (art@iiug.org)
> >
> > See you at the 2010 IIUG Informix Conference
> > April 25-28, 2010
> > Overland Park (Kansas City), KS
> > www.iiug.org/conf
> >
> > Disclaimer: Please keep in mind that my own opinions are my own opinions
> and
> > do not reflect on my employer, Advanced DataTools, the IIUG, nor any
> other
> > organization with which I am associated either explicitly, implicitly, or
> by
> > inference. Neither do those opinions reflect those of other individuals
> > affiliated with any entity with which I am affiliated nor those of the
> > entities themselves.
> >
> > On Thu, Jan 21, 2010 at 11:28 AM, LARRY SORENSEN <lsorensen25@msn.com
> >wrote:
> >
> > > I appreciate the input that everyone has shared; however, I am looking
> for
> > > specific examples from people running on Solaris 10 servers. (onconfig
> > > parameters including BACKUP_FILTER, as well as actual scripts/commands
> run)
> > > I
> > > am using ontape; however, I am sure that onbar commands will translate
> > > across.
> > > I am not sure what is available on Solaris 10. I believer that I have
> to
> > > have
> > > the encryption package installed, but beyond that, I am not sure how to
> > > actual
> > > take advantage of it.
> > >
> > > Thanks.
> > >
> > > Larry
> > >
> > > > To: ids@iiug.org
> > > > From: art.kagel@gmail.com
> > > > Subject: Re: encryption on IDS 11.50.FC5 on Solaris 10 [18703]
> > > > Date: Mon, 18 Jan 2010 16:45:42 -0500
> > > >
> > > > VERSION INFORMATION - PLEASE? Encryption is possible in ontape and
> onbar> > > > for IDS versions 10.00 and later. The documentation is in the Backup
> and
> > > > Restore Guide manual which is part of the IDS documentation set. I do
> not
> > > > believe that onunload/onload support encryption directly, you would
> have
> > > to
> > > > encrypt the output files after running onunload or decrypt the file
> > > before
> > > > running onload.
> > > >
> > > > Art
> > > >
> > > > Art S. Kagel
> > > > Advanced DataTools (www.advancedatatools.com)
> > > > IIUG Board of Directors (art@iiug.org)
> > > >
> > > > See you at the 2010 IIUG Informix Conference
> > > > April 25-28, 2010
> > > > Overland Park (Kansas City), KS
> > > > www.iiug.org/conf
> > > >
> > > > Disclaimer: Please keep in mind that my own opinions are my own
> opinions
> > > and
> > > > do not reflect on my employer, Advanced DataTools, the IIUG, nor any
> > > other
> > > > organization with which I am associated either explicitly,
> implicitly,
> or
> > > by
> > > > inference. Neither do those opinions reflect those of other
> individuals
> > > > affiliated with any entity with which I am affiliated nor those of
> the
> > > > entities themselves.
> > > >
> > > > On Mon, Jan 18, 2010 at 3:01 PM, LARRY SORENSEN <lsorensen25@msn.com
> >
> > > wrote:
> > > >
> > > > > I am having a hard time researching what is available for
> encryption
> > > for
> > > > > the
> > > > > "ontape" and "onunload" utilities, if anything. Can anyone tell me
> if
> > > > > encryption is available for the above two utilities and tell me the
> > > syntax
> > > > > and/or point me in the right direction for documentation on the
> > > utilities?
> > > > >
> > > > > Thank you.
> > > > >
> > > > > Larry
> > > > >
> > > > >
> > > > >
> > > > >
> > > >
> > >
> > >
> >
>
>
*******************************************************************************
> > > > > Forum Note: Use "Reply" to post a response in the discussion forum.
> > > > >
> > > > >
> > > >
> > > > --0023545bde38f472f2047d77457e
> > > >
> > > >
> > > >
> > >
> > >
> >
>
>
*******************************************************************************
> > > > Forum Note: Use "Reply" to post a response in the discussion forum.
> > > >
> > >
> > >
> > >
> > >
> >
>
>
*******************************************************************************
> > > Forum Note: Use "Reply" to post a response in the discussion forum.
> > >
> > >
> >
> > --0015174be9eab5fb00047dafc789
> >
> >
> >
>
>
*******************************************************************************
> > Forum Note: Use "Reply" to post a response in the discussion forum.
> >
>
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
--0015175d0a026bbebd047dc59b5d
It's not RESTORE_FILTER "gunzip -c" ???? Inquiring minds.....
Dick Snoke
Executive IT Specialist
IBM Software Group - ChannelWorks
Tel: (404) 487-1595
Email: dsnoke@us.ibm.com
From:
"Art Kagel" <art.kagel@gmail.com>
To:
ids@iiug.org
Date:
01/22/10 02:13 PM
Subject:
Re: ontape encryption for IDS 11.50.FC5 on Sol.... [18758]
Sent by:
ids-bounces@iiug.org
Have used gzip in BACKUP filter on several systems, including Solaris:
BACKUP_FILTER "gzip -c"
That's it. To restore just change it to:
BACKUP_FILTER "gunzip -c"
Art
Art S. Kagel
Advanced DataTools (www.advancedatatools.com)
IIUG Board of Directors (art@iiug.org)
See you at the 2010 IIUG Informix Conference
April 25-28, 2010
Overland Park (Kansas City), KS
www.iiug.org/conf
Disclaimer: Please keep in mind that my own opinions are my own opinions
and
do not reflect on my employer, Advanced DataTools, the IIUG, nor any other
organization with which I am associated either explicitly, implicitly, or
by
inference. Neither do those opinions reflect those of other individuals
affiliated with any entity with which I am affiliated nor those of the
entities themselves.
On Fri, Jan 22, 2010 at 1:31 PM, LARRY SORENSEN <lsorensen25@msn.com>
wrote:
> I appreciate all of the comments on this topic, but I am still looking
for
> someone with experience using the BACKUP_FILTER for Informix on Solaris
10.
> I
> am not sure what the possible values for BAKUP_FILTER are. I would like
> some
> specific examples from people who may have done this in the past on
> Solaris.
>
> > To: ids@iiug.org
> > From: art.kagel@gmail.com
> > Subject: Re: encryption on IDS 11.50.FC5 on Solaris 10 [18731]
> > Date: Thu, 21 Jan 2010 12:10:40 -0500
> >
> > Note that there is a outstanding bug that is not fixed until 11.50xC6
> (don't
> > think it has been backported to 11.10 or 10.00 yet) which causes
> archecker
> > to not be able to access any archive that was created with a
> BACKUP_FILTER.
> > You would have to manually 'unfilter' the file(s) before archecker
could
> > read them.
> >
> > Art
> >
> > Art S. Kagel
> > Advanced DataTools (www.advancedatatools.com)
> > IIUG Board of Directors (art@iiug.org)
> >
> > See you at the 2010 IIUG Informix Conference
> > April 25-28, 2010
> > Overland Park (Kansas City), KS
> > www.iiug.org/conf
> >
> > Disclaimer: Please keep in mind that my own opinions are my own
opinions
> and
> > do not reflect on my employer, Advanced DataTools, the IIUG, nor any
> other
> > organization with which I am associated either explicitly, implicitly,
or
> by
> > inference. Neither do those opinions reflect those of other
individuals
> > affiliated with any entity with which I am affiliated nor those of the
> > entities themselves.
> >
> > On Thu, Jan 21, 2010 at 11:28 AM, LARRY SORENSEN <lsorensen25@msn.com
> >wrote:
> >
> > > I appreciate the input that everyone has shared; however, I am
looking
> for
> > > specific examples from people running on Solaris 10 servers.
(onconfig
> > > parameters including BACKUP_FILTER, as well as actual
scripts/commands
> run)
> > > I
> > > am using ontape; however, I am sure that onbar commands will
translate
> > > across.
> > > I am not sure what is available on Solaris 10. I believer that I
have
> to
> > > have
> > > the encryption package installed, but beyond that, I am not sure how
to
> > > actual
> > > take advantage of it.
> > >
> > > Thanks.
> > >
> > > Larry
> > >
> > > > To: ids@iiug.org
> > > > From: art.kagel@gmail.com
> > > > Subject: Re: encryption on IDS 11.50.FC5 on Solaris 10 [18703]
> > > > Date: Mon, 18 Jan 2010 16:45:42 -0500
> > > >
> > > > VERSION INFORMATION - PLEASE? Encryption is possible in ontape and
> onbar> > > > for IDS versions 10.00 and later. The documentation is in the
Backup
> and
> > > > Restore Guide manual which is part of the IDS documentation set. I
do
> not
> > > > believe that onunload/onload support encryption directly, you
would
> have
> > > to
> > > > encrypt the output files after running onunload or decrypt the
file
> > > before
> > > > running onload.
> > > >
> > > > Art
> > > >
> > > > Art S. Kagel
> > > > Advanced DataTools (www.advancedatatools.com)
> > > > IIUG Board of Directors (art@iiug.org)
> > > >
> > > > See you at the 2010 IIUG Informix Conference
> > > > April 25-28, 2010
> > > > Overland Park (Kansas City), KS
> > > > www.iiug.org/conf
> > > >
> > > > Disclaimer: Please keep in mind that my own opinions are my own
> opinions
> > > and
> > > > do not reflect on my employer, Advanced DataTools, the IIUG, nor
any
> > > other
> > > > organization with which I am associated either explicitly,
> implicitly,
> or
> > > by
> > > > inference. Neither do those opinions reflect those of other
> individuals
> > > > affiliated with any entity with which I am affiliated nor those of
> the
> > > > entities themselves.
> > > >
> > > > On Mon, Jan 18, 2010 at 3:01 PM, LARRY SORENSEN
<lsorensen25@msn.com
> >
> > > wrote:
> > > >
> > > > > I am having a hard time researching what is available for
> encryption
> > > for
> > > > > the
> > > > > "ontape" and "onunload" utilities, if anything. Can anyone tell
me
> if
> > > > > encryption is available for the above two utilities and tell me
the
> > > syntax
> > > > > and/or point me in the right direction for documentation on the
> > > utilities?
> > > > >
> > > > > Thank you.
> > > > >
> > > > > Larry
> > > > >
> > > > >
> > > > >
> > > > >
> > > >
> > >
> > >
> >
>
>
*******************************************************************************
> > > > > Forum Note: Use "Reply" to post a response in the discussion
forum.
> > > > >
> > > > >
> > > >
> > > > --0023545bde38f472f2047d77457e
> > > >
> > > >
> > > >
> > >
> > >
> >
>
>
*******************************************************************************
> > > > Forum Note: Use "Reply" to post a response in the discussion
forum.
> > > >
> > >
> > >
> > >
> > >
> >
>
>
*******************************************************************************
> > > Forum Note: Use "Reply" to post a response in the discussion forum.
> > >
> > >
> >
> > --0015174be9eab5fb00047dafc789
> >
> >
> >
>
>
*******************************************************************************
> > Forum Note: Use "Reply" to post a response in the discussion forum.
> >
>
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
--00151
Yup, BACKUP_FILTER and RESTORE_FILTER. That's what I get for answering
questions while loading the washing machine. 8-o
Art
Art S. Kagel
Advanced DataTools (www.advancedatatools.com)
IIUG Board of Directors (art@iiug.org)
See you at the 2010 IIUG Informix Conference
April 25-28, 2010
Overland Park (Kansas City), KS
www.iiug.org/conf
Disclaimer: Please keep in mind that my own opinions are my own opinions and
do not reflect on my employer, Advanced DataTools, the IIUG, nor any other
organization with which I am associated either explicitly, implicitly, or by
inference. Neither do those opinions reflect those of other individuals
affiliated with any entity with which I am affiliated nor those of the
entities themselves.
On Fri, Jan 22, 2010 at 2:52 PM, Richard Snoke <dsnoke@us.ibm.com> wrote:
> It's not RESTORE_FILTER "gunzip -c" ???? Inquiring minds.....
>
> Dick Snoke
> Executive IT Specialist
> IBM Software Group - ChannelWorks
>
> Tel: (404) 487-1595
> Email: dsnoke@us.ibm.com
>
> From:
> "Art Kagel" <art.kagel@gmail.com>
> To:
> ids@iiug.org
> Date:
> 01/22/10 02:13 PM
> Subject:
> Re: ontape encryption for IDS 11.50.FC5 on Sol.... [18758]
> Sent by:
> ids-bounces@iiug.org
>
> Have used gzip in BACKUP filter on several systems, including Solaris:
>
> BACKUP_FILTER "gzip -c">
> That's it. To restore just change it to:
>
> BACKUP_FILTER "gunzip -c">
> Art
>
> Art S. Kagel
> Advanced DataTools (www.advancedatatools.com)
> IIUG Board of Directors (art@iiug.org)
>
> See you at the 2010 IIUG Informix Conference
> April 25-28, 2010
> Overland Park (Kansas City), KS
> www.iiug.org/conf
>
> Disclaimer: Please keep in mind that my own opinions are my own opinions
> and
> do not reflect on my employer, Advanced DataTools, the IIUG, nor any other
>
> organization with which I am associated either explicitly, implicitly, or
> by
> inference. Neither do those opinions reflect those of other individuals
> affiliated with any entity with which I am affiliated nor those of the
> entities themselves.
>
> On Fri, Jan 22, 2010 at 1:31 PM, LARRY SORENSEN <lsorensen25@msn.com>
> wrote:
>
> > I appreciate all of the comments on this topic, but I am still looking
> for
> > someone with experience using the BACKUP_FILTER for Informix on Solaris
> 10.
> > I
> > am not sure what the possible values for BAKUP_FILTER are. I would like
> > some
> > specific examples from people who may have done this in the past on
> > Solaris.
> >
> > > To: ids@iiug.org
> > > From: art.kagel@gmail.com
> > > Subject: Re: encryption on IDS 11.50.FC5 on Solaris 10 [18731]
> > > Date: Thu, 21 Jan 2010 12:10:40 -0500
> > >
> > > Note that there is a outstanding bug that is not fixed until 11.50xC6
> > (don't
> > > think it has been backported to 11.10 or 10.00 yet) which causes
> > archecker
> > > to not be able to access any archive that was created with a
> > BACKUP_FILTER.
> > > You would have to manually 'unfilter' the file(s) before archecker
> could
> > > read them.
> > >
> > > Art
> > >
> > > Art S. Kagel
> > > Advanced DataTools (www.advancedatatools.com)
> > > IIUG Board of Directors (art@iiug.org)
> > >
> > > See you at the 2010 IIUG Informix Conference
> > > April 25-28, 2010
> > > Overland Park (Kansas City), KS
> > > www.iiug.org/conf
> > >
> > > Disclaimer: Please keep in mind that my own opinions are my own
> opinions
> > and
> > > do not reflect on my employer, Advanced DataTools, the IIUG, nor any
> > other
> > > organization with which I am associated either explicitly, implicitly,
> or
> > by
> > > inference. Neither do those opinions reflect those of other
> individuals
> > > affiliated with any entity with which I am affiliated nor those of the
>
> > > entities themselves.
> > >
> > > On Thu, Jan 21, 2010 at 11:28 AM, LARRY SORENSEN <lsorensen25@msn.com
> > >wrote:
> > >
> > > > I appreciate the input that everyone has shared; however, I am
> looking
> > for
> > > > specific examples from people running on Solaris 10 servers.
> (onconfig
> > > > parameters including BACKUP_FILTER, as well as actual
> scripts/commands
> > run)
> > > > I
> > > > am using ontape; however, I am sure that onbar commands will
> translate
> > > > across.
> > > > I am not sure what is available on Solaris 10. I believer that I
> have
> > to
> > > > have
> > > > the encryption package installed, but beyond that, I am not sure how
> to
> > > > actual
> > > > take advantage of it.
> > > >
> > > > Thanks.
> > > >
> > > > Larry
> > > >
> > > > > To: ids@iiug.org
> > > > > From: art.kagel@gmail.com
> > > > > Subject: Re: encryption on IDS 11.50.FC5 on Solaris 10 [18703]
> > > > > Date: Mon, 18 Jan 2010 16:45:42 -0500
> > > > >
> > > > > VERSION INFORMATION - PLEASE? Encryption is possible in ontape and
>
> > onbar> > > > > for IDS versions 10.00 and later. The documentation is in the
> Backup
> > and
> > > > > Restore Guide manual which is part of the IDS documentation set. I
> do
> > not
> > > > > believe that onunload/onload support encryption directly, you
> would
> > have
> > > > to
> > > > > encrypt the output files after running onunload or decrypt the
> file
> > > > before
> > > > > running onload.
> > > > >
> > > > > Art
> > > > >
> > > > > Art S. Kagel
> > > > > Advanced DataTools (www.advancedatatools.com)
> > > > > IIUG Board of Directors (art@iiug.org)
> > > > >
> > > > > See you at the 2010 IIUG Informix Conference
> > > > > April 25-28, 2010
> > > > > Overland Park (Kansas City), KS
> > > > > www.iiug.org/conf
> > > > >
> > > > > Disclaimer: Please keep in mind that my own opinions are my own
> > opinions
> > > > and
> > > > > do not reflect on my employer, Advanced DataTools, the IIUG, nor
> any
> > > > other
> > > > > organization with which I am associated either explicitly,
> > implicitly,
> > or
> > > > by
> > > > > inference. Neither do those opinions reflect those of other
> > individuals
> > > > > affiliated with any entity with which I am affiliated nor those of
>
> > the
> > > > > entities themselves.
> > > > >
> > > > > On Mon, Jan 18, 2010 at 3:01 PM, LARRY SORENSEN
> <lsorensen25@msn.com
> > >
> > > > wrote:
> > > > >
> > > > > > I am having a hard time researching what is available for
> > encryption
> > > > for
> > > > > > the
> > > > > > "ontape" and "onunload" utilities, if anything. Can anyone tell
> me
> > if
> > > > > > encryption is available for the above two utilities and tell me
> the
> > > > syntax
> > > > > > and/or point me in the right direction for documentation on the
> > > > utilities?
> > > > > >
> > > > > > Thank you.
> > > > > >
> > > > > > Larry
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > >
> > > >
> > >
> >
> >
>
Speaking about archive encryption here...
I had used gpg, BACKUP_FILTER, and TAPEDEV as follows on HP-UX with IDS
11.50.FC5:
TAPEDEV /backup/unloads/SP_archive.gpg
BACKUP_FILTER '/bin/gpg --batch --symmetric --cipher-algo aes --passphrase-file
/backup/unloads/passphrase.txt'
This writes out an encrypted file ( of size comparable to one I created via
command line execution of gpg). FYI, I used 'ontape -s' after 'touch' on
SP_archive/gpg.
OK, I assume this worked... but..
I have tried several variations of the command line gpg decryption-ontape
restore with RESTORE_FILTER. The `ontape -r` is not successful. Here are my
attempts.
RESTORE_FILTER '/bin/gpg --batch --passphrase-file
/backup/unloads/passphrase.txt -d'
##RESTORE_FILTER '/bin/gpg --batch --passphrase-file
/backup/unloads/passphrase.
txt -d /backup/unloads/SP_archive.gpg'
I'd expect the '-d' to read from TAPEDEV, decrypt and restore. What am I
missing? Should there be a space between -d and the '.
Any help with the syntax with RESTORE_FILTER will be helpful.
No, ontape expects that the BACKUP_FILTER will write to stdout and that the
RESTORE_FILTER will read from stdin. Ontape opens the TAPEDEV file on
stdin/stdout as appropriate and opens a pipe to the filter.
Art
Art S. Kagel
Advanced DataTools (www.advancedatatools.com)
IIUG Board of Directors (art@iiug.org)
See you at the 2010 IIUG Informix Conference
April 25-28, 2010
Overland Park (Kansas City), KS
www.iiug.org/conf
Disclaimer: Please keep in mind that my own opinions are my own opinions and
do not reflect on my employer, Advanced DataTools, the IIUG, nor any other
organization with which I am associated either explicitly, implicitly, or by
inference. Neither do those opinions reflect those of other individuals
affiliated with any entity with which I am affiliated nor those of the
entities themselves.
On Fri, Jan 22, 2010 at 4:20 PM, MURALI PAZHAYANNUR <
pmurali@ftportfolios.com> wrote:
> Speaking about archive encryption here...
>
> I had used gpg, BACKUP_FILTER, and TAPEDEV as follows on HP-UX with IDS
> 11.50.FC5:
>
> TAPEDEV /backup/unloads/SP_archive.gpg
> BACKUP_FILTER '/bin/gpg --batch --symmetric --cipher-algo aes
> --passphrase-file
> /backup/unloads/passphrase.txt'
>
> This writes out an encrypted file ( of size comparable to one I created via
> command line execution of gpg). FYI, I used 'ontape -s' after 'touch' on
> SP_archive/gpg.
>
> OK, I assume this worked... but..
>
> I have tried several variations of the command line gpg decryption-ontape
> restore with RESTORE_FILTER. The `ontape -r` is not successful. Here are my
> attempts.
>
> RESTORE_FILTER '/bin/gpg --batch --passphrase-file
> /backup/unloads/passphrase.txt -d'
>
> ##RESTORE_FILTER '/bin/gpg --batch --passphrase-file
> /backup/unloads/passphrase.
> txt -d /backup/unloads/SP_archive.gpg'
>
> I'd expect the '-d' to read from TAPEDEV, decrypt and restore. What am I
> missing? Should there be a space between -d and the '.
>
> Any help with the syntax with RESTORE_FILTER will be helpful.
>
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
--0023545bf4f8d08953047dc79a8e
What version Art? Is that washing machine 11.1 or 11.5? More inquiring minds!
:)
"Load from sorted pile insert into Maytag;"
Bob
----- Original Message -----
From: "Art Kagel" <art.kagel@gmail.com>
To: ids@iiug.org
Sent: Friday, January 22, 2010 3:56:08 PM GMT -05:00 US/Canada Eastern
Subject: Re: ontape encryption for IDS 11.50.FC5 on Sol.... [18760]
Yup, BACKUP_FILTER and RESTORE_FILTER. That's what I get for answering
questions while loading the washing machine. 8-o
Art
Art S. Kagel
Advanced DataTools (www.advancedatatools.com)
IIUG Board of Directors (art@iiug.org)
See you at the 2010 IIUG Informix Conference
April 25-28, 2010
Overland Park (Kansas City), KS
www.iiug.org/conf
Disclaimer: Please keep in mind that my own opinions are my own opinions and
do not reflect on my employer, Advanced DataTools, the IIUG, nor any other
organization with which I am associated either explicitly, implicitly, or by
inference. Neither do those opinions reflect those of other individuals
affiliated with any entity with which I am affiliated nor those of the
entities themselves.
On Fri, Jan 22, 2010 at 2:52 PM, Richard Snoke <dsnoke@us.ibm.com> wrote:
> It's not RESTORE_FILTER "gunzip -c" ???? Inquiring minds.....
>
> Dick Snoke
> Executive IT Specialist
> IBM Software Group - ChannelWorks
>
> Tel: (404) 487-1595
> Email: dsnoke@us.ibm.com
>
> From:
> "Art Kagel" <art.kagel@gmail.com>
> To:
> ids@iiug.org
> Date:
> 01/22/10 02:13 PM
> Subject:
> Re: ontape encryption for IDS 11.50.FC5 on Sol.... [18758]
> Sent by:
> ids-bounces@iiug.org
>
> Have used gzip in BACKUP filter on several systems, including Solaris:
>
> BACKUP_FILTER "gzip -c">
> That's it. To restore just change it to:
>
> BACKUP_FILTER "gunzip -c">
> Art
>
> Art S. Kagel
> Advanced DataTools (www.advancedatatools.com)
> IIUG Board of Directors (art@iiug.org)
>
> See you at the 2010 IIUG Informix Conference
> April 25-28, 2010
> Overland Park (Kansas City), KS
> www.iiug.org/conf
>
> Disclaimer: Please keep in mind that my own opinions are my own opinions
> and
> do not reflect on my employer, Advanced DataTools, the IIUG, nor any other
>
> organization with which I am associated either explicitly, implicitly, or
> by
> inference. Neither do those opinions reflect those of other individuals
> affiliated with any entity with which I am affiliated nor those of the
> entities themselves.
>
> On Fri, Jan 22, 2010 at 1:31 PM, LARRY SORENSEN <lsorensen25@msn.com>
> wrote:
>
> > I appreciate all of the comments on this topic, but I am still looking
> for
> > someone with experience using the BACKUP_FILTER for Informix on Solaris
> 10.
> > I
> > am not sure what the possible values for BAKUP_FILTER are. I would like
> > some
> > specific examples from people who may have done this in the past on
> > Solaris.
> >
> > > To: ids@iiug.org
> > > From: art.kagel@gmail.com
> > > Subject: Re: encryption on IDS 11.50.FC5 on Solaris 10 [18731]
> > > Date: Thu, 21 Jan 2010 12:10:40 -0500
> > >
> > > Note that there is a outstanding bug that is not fixed until 11.50xC6
> > (don't
> > > think it has been backported to 11.10 or 10.00 yet) which causes
> > archecker
> > > to not be able to access any archive that was created with a
> > BACKUP_FILTER.
> > > You would have to manually 'unfilter' the file(s) before archecker
> could
> > > read them.
> > >
> > > Art
> > >
> > > Art S. Kagel
> > > Advanced DataTools (www.advancedatatools.com)
> > > IIUG Board of Directors (art@iiug.org)
> > >
> > > See you at the 2010 IIUG Informix Conference
> > > April 25-28, 2010
> > > Overland Park (Kansas City), KS
> > > www.iiug.org/conf
> > >
> > > Disclaimer: Please keep in mind that my own opinions are my own
> opinions
> > and
> > > do not reflect on my employer, Advanced DataTools, the IIUG, nor any
> > other
> > > organization with which I am associated either explicitly, implicitly,
> or
> > by
> > > inference. Neither do those opinions reflect those of other
> individuals
> > > affiliated with any entity with which I am affiliated nor those of the
>
> > > entities themselves.
> > >
> > > On Thu, Jan 21, 2010 at 11:28 AM, LARRY SORENSEN <lsorensen25@msn.com
> > >wrote:
> > >
> > > > I appreciate the input that everyone has shared; however, I am
> looking
> > for
> > > > specific examples from people running on Solaris 10 servers.
> (onconfig
> > > > parameters including BACKUP_FILTER, as well as actual
> scripts/commands
> > run)
> > > > I
> > > > am using ontape; however, I am sure that onbar commands will
> translate
> > > > across.
> > > > I am not sure what is available on Solaris 10. I believer that I
> have
> > to
> > > > have
> > > > the encryption package installed, but beyond that, I am not sure how
> to
> > > > actual
> > > > take advantage of it.
> > > >
> > > > Thanks.
> > > >
> > > > Larry
> > > >
> > > > > To: ids@iiug.org
> > > > > From: art.kagel@gmail.com
> > > > > Subject: Re: encryption on IDS 11.50.FC5 on Solaris 10 [18703]
> > > > > Date: Mon, 18 Jan 2010 16:45:42 -0500
> > > > >
> > > > > VERSION INFORMATION - PLEASE? Encryption is possible in ontape and
>
> > onbar> > > > > for IDS versions 10.00 and later. The documentation is in the
> Backup
> > and
> > > > > Restore Guide manual which is part of the IDS documentation set. I
> do
> > not
> > > > > believe that onunload/onload support encryption directly, you
> would
> > have
> > > > to
> > > > > encrypt the output files after running onunload or decrypt the
> file
> > > > before
> > > > > running onload.
> > > > >
> > > > > Art
> > > > >
> > > > > Art S. Kagel
> > > > > Advanced DataTools (www.advancedatatools.com)
> > > > > IIUG Board of Directors (art@iiug.org)
> > > > >
> > > > > See you at the 2010 IIUG Informix Conference
> > > > > April 25-28, 2010
> > > > > Overland Park (Kansas City), KS
> > > > > www.iiug.org/conf
> > > > >
> > > > > Disclaimer: Please keep in mind that my own opinions are my own
> > opinions
> > > > and
> > > > > do not reflect on my employer, Advanced DataTools, the IIUG, nor
> any
> > > > other
> > > > > organization with which I am associated either explicitly,
> > implicitly,
> > or
> > > > by
> > > > > inference. Neither do those opinions reflect those of other
> > individuals
> > > > > affiliated with any entity with which I am affiliated nor those of
>
> > the
> > > > > entities themselves.
> > > > >
> > > > > On Mon, Jan 18, 2010 at 3:01 PM, LARRY SORENSEN
> <lsorensen25@msn.com
> > >
> > > > wrote:
> > > > >
> > > > > > I am having a hard time researching what is available for
> > encryption
> > > > for
> > > > > > the
> > > > > > "ontape" and "onunload" utilities, if anything. Can anyone tell
> me
> > if
> >