So, this is what I am doing this week. I need to have a backup mechanism for the Single Sign-On infrastructure which I have set up for the local education ministry.
This book comes in handy - OpenAM by Indira. There's this chapter on Backup, Recovery and Logging.
The safest way to backup OpenSSO/OpenAM configuration data is non other than filesystem backup. (not mentioned in Sun's documentation)
The critical files and directories that need to be backed up are as follows:
• OpenDS (whole directory)
• certificate stores
• config/xml (whole directory; if there is customized service schema)
ssoadmin@node01 $ /usr/sfw/bin/gtar -cvf opensso-bak.tar --exclude "opensso/opends/logs" opensso/bootstrap opensso/opends opensso/.configParam opensso/.version opensso/.configParam opensso/opensso/.keypass opensso/opensso/.storepass opensso/opensso/keystore.jks