PreviousNext

Procedure for Restoring the Registry Database

This topic provides instructions for restoring the master replica's database files and master key file. The procedure assumes that the database is being restored to the same machine from which it was backed up, and that you are using the DCE control program. If you are moving the database to a different machine, follow the instructions in Handling Network Reconfigurations.

To restore the registry database to a machine, perform the following steps:

1. Log in as root at the master registry site.

2. If secd is running, stop it by issuing the registry stop command. When you use this command, you must supply the fully qualified name of a specific replica as an argument. The following sample command stops the secd named master:

dcecp> registry stop /.../giverny.com/subsys/dce/sec/oddball
dcecp>

3. Copy the backup files from the backup media to the machine. If you have backed up only the registry data files and the master key files, be sure to copy the registry database to dcelocal/var/security/rgy_data and the master key file to dcelocal/var/security/.mkey. Note that, because the dcelocal/var/security/.mkey file contains the master key, restoring a backup of the registry database is useless unless the dcelocal/var/security/.mkey file is also restored.

4. Restart the server by invoking secd with the -restore_master option, as follows:

dcelocal/bin/secd -restore_master &

This command will start secd and cause the master to mark all slaves to be reinitialized.

5. Verify that secd starts automatically at system startup.

Note: If you are restoring only a master key file and have not changed the master key, you can simply copy the master key file from the backup media without performing all of the other steps that are in the restore procedures.