Domino 12 support

[peterlai]

I am looking for advise for the agent based backup to support Domino 12.

[HannesK]

Hello,
and welcome to the forums.

With the latest version, there is an integration from HCL side. Did you already check out this website ?

Best regards,
Hannes

[lucajordi]

Hello together,

i have a question for setting up domino backup for Veeam.
I followed the installation Guide but something is not really clear:

On a HCL12 Domino server on Windows i need to install also OpenSSH Server?
Or only on the veeam B&R Server?

Thanks

[HannesK]

Hello,
the SSH server is only needed on the backup server server. The HCL (formerly IBM or Lotus) Domino server needs the SSH client.

Best regards,
Hannes

[peterlai]

Yes, I am aware of that URL, I am looking for something official from Veeam also.

[HannesK]

as the integration is 100% on the HCL side, there is nothing from our side right now. I worked together with HCL on the solution and what they told me is that customer feedback is good so far.

What would be official for you? A link in a KB article? I can check whether that's possible.

[lucajordi]

i got a error if i want to add the veeam-mount user credentials:

Unknown SSH private key type

i select the earlier created pub file...

[HannesK]

just guessing
1) too old Veeam version (please use latest or at least 11a)
2) ssh key format is not RSA (the guide uses "-t rsa", but maybe you did something else)

[daniel-nashed]

Domino Backup integrations like the Veeam integration are supported via community support in the HCL GitHub repository --> https://github.com/hCL-TECH-SOFTWARE/domino-backup.
But without technical details like "what you are doing exactly" when it fails and "where you get the error", nobody can help you.

How should we understand what step your are getting an error?
And how should we know what kind of key you have?

The current documentation on the Domino Backup side on purpose uses RSA keys.
Newer key types are supported in current Veeam versions and also with current OpenSSH server versions.
And it is recommended to install the latest OpenSSH server from the GitHub links provided in the HCL GitHub repository mentioned on top of this post.

Can you provide more details please?

Thanks

[lucajordi]

My Guide shows the following:

ssh-keygen -t ed25519

wrong guide?

We are using Windows Domino Server

[lucajordi]

Good Morning,

so i tryto explain something:

User that running Domino server is a domain user with admin rights.
i create a rsa key, that gave me a rsa and a rsa.pub file.
if i try to create credentials for veeam-mount user on Veeam and select the rsa.pub the invalid key message appears.
if i select the rsa file only it is ok.
But if i try to test the connection with ssh veeam-mount@server -i keyfile it returns connection refused...

Thanks...

[lucajordi]

so, one step closer...
ssh is connecting, but still ask for password of the veeam-mount user, but i use the private key (-i)

[lucajordi]

sorry, but next step closer!
he is trying to do the connect, but permision denied.
Do i need the veeam-mount user also on the domino server?
or is he using the user, that is in the key file?

[daniel-nashed]

So you are on the Veeam side and try to connect to the Domino server via SSH?
The veeam-mount user is only required for Domino on Linux.

For backup and restore on Windows the Veeam side uses Windows credentials only with freeze/thaw scripts and a mount based on Windows technology.
The only part where SSH is used for Domino on Linux is the restore operation where Domino invokes a Powershell script on the Veeam server initiated over SSH.

Can you double check the step by step documentation.

1. Backup requires freeze/thaw scripts with Windows authentication
2. Restore connects from Domino to Veeam via SSH and runs a Powershell script to mount the restore volumes
3. Mount operation from Veeam side initiated via Powershell uses Windows credentials

SSH is only used from Domino to Veeam and the OpensSSH server only needs to run on the Veeam Backup & Replication server.

I hope this clarifies it?
If you spot a place where the documentation on GitHub is unclear, raise an issue in GitHub repository or post it here.

Thanks

Daniel

[lucajordi]

Thank you Daniel,

i give it a try...

[lucajordi]

if i want to test the connection drom dominoserver to veeam i got the following message:

ssh notes@xxxx check

c:/dominobackup/DominoRestore.ps1 : Die Datei "C:\dominobackup\DominoRestore.ps1" kann nicht geladen werden, da Sie
festgelegt haben, diese Software jetzt nicht auszuf�hren.
In Zeile:1 Zeichen:1
+ c:/dominobackup/DominoRestore.ps1
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : Sicherheitsfehler: (:) [], PSSecurityException
+ FullyQualifiedErrorId : UnauthorizedAccess

[HannesK]

it's about the powershell execution policy.

If that information is missing in the guide, I suggest to post that on github. daniel-nashed is the author of everything on the HCL side, so he knows every piece that is involved much better than I do.