Chronic catastrophic data loss with Lion & servers

Auto-save and versions, when combined with multiple users and a server environment virtually guarantees catastrophic data loss.


Here's how you replicate it.


(1) Place a photo on a server.


For us, this is where we recommend people keep important files. Their desktop may be backed up with time machine, but the server is RAID 6 with hot spares, and on top of that is backed up every night. Much, much safer.


(2) Open that photo in preview. Crop it so that you can print it. Close preview. Notice it didn't ask you if you wanted to save?


(3) Open that file again. It's still cropped. The original? Gone. Choose "Revert to Saved" from the file menu. Notice the large number of empty windows on the right? Yup, you can't get back to the prior version, even though you never saved.


Now, as a network administrator, imagine the consequences of this for your network. Users accessing shared files and making changes they need, but not saving them because they don't need to be saved. Yup, their version is now THE definitive version for the entire network.


The ability to do non-destructive edits is something that computer users have been doing since, well, the dawn of computing more or less. Lion removes this. Now, add on top of that user mistakes in a network environment. User accidentally deletes all the text from a 24 page document. They don't know what to do so they close the app. Unless the backup has run since that 24 page document was created, it's gone. Forever. And ever. Amen.


Go to backups you say? What if the document isn't accessed for six months from when the user accidentally wiped it out. Hope your backup server is petabyte big, because otherwise that data is gone.


This is a huge, huge problem.


Joel

iMac, Mac OS X (10.7), Tested on both Server 10.6 and 10.7

Posted on Jul 29, 2011 4:19 PM

Reply
64 replies

Aug 1, 2011 2:30 PM in response to mythrenegade

If you used Mac server with a native filesystem you wouldn't have this problem. Such a file system would support versions. You could also run Time Machine on the server that would preserve all versions of all documents. Both would be really handy things to have.


You can lock any file at any time. You can write a script to go through and lock all files if you want.


While Photoshop and Office will probably support Autosave one day, it isn't going to be any time soon. Apple Preview and TextEdit really aren't collaboration tools. Photoshop and Word are.


I don't think you have anything to worry about.

Aug 1, 2011 2:48 PM in response to etresoft

This problem exists with Snow Leopard Server and Lion Server, both running HFS+. I don't think I could get anymore native than that. Microsoft is planning to add support for autosave, versions etc. to Office 2011 so I absolutely do have to worry about this.


TimeMachine is awesome, but it can't every second of every day, and the versions are lost on the server, which is my point in its entirety. Watch the video I posted and you'll understand.


Joel

Aug 1, 2011 6:15 PM in response to mythrenegade

OK. I've played around with it a bit more and learned a couple of things.


In Lion, you aren't supposed to close documents until you are completely done with them. Quitting the application without manually closing the document does not fully close the document. You will have all the versions of the file, on any file system, until you manually close the document. If the file system where the file resides does not support versions (neither a USB FAT Flash nor AFP from my 10.6.8 Machine do), you will get a warning message that you are about to lose old versions. If you just do File > Quit, unmount the server, and reconnect after a month vacation, all of your versions will still be there.


This is a significant change that we will all have to get used to. I don't see how it is going to lead to catastrohpic data loss.


Your concern about your backups was that you aren't using Time Machine on the server and if a change goes undetected, you could lose the good version. Using Time Machine on your server should prevent that. No, Time Machine doesn't do every second, but it does do every hour. Your chances of losing a file forever are pretty slim.


I still think there is nothing to worry about. If you are really worried about it, you can still run a script to manually lock every shared file and keep locking them as they are created. That would give the users an extra hoop to jump through.

Sep 12, 2011 1:40 PM in response to etresoft

This explains another common scenario:

http://www.blueboxmoon.com/wordpress/?p=281


Now everyone can come up with a bunch of excuses and work-arounds, but suffice to say those are ridiculous to *require* users to change their behaviour.


Consider my workplace - running on Linux (servers & desktops) for more than 10 years. 10-20 employees. I think we've had to get out a backup due to user error induced file loss about 3 times in the past decade. We don't normally lock our files, we just tend to be conciensious during our work.


Increasingly we've been buying Macs, but there are a lot of things that Apple doesn't cater for - certain types of workstations suitable for compiling VHDL for large FPGAs being one of them.


There is no way that we are changing our well running servers over to OS X - after all Apple kills legacy support frequently and it doesnt serve our needs (or can OS X natively run Agilent ADS, Zuken CR-5000 and similar 100k+ USD software systems?), so people saying "run Time Machine" is not acceptable to *many* environments.


The biggest danger is insidious data loss - a few things were changed - a quick test of some new number in a spreadsheet to get some different filter coefficients and bam... autosave.


Doesnt matter if "Lock file after x amount of time" was on, because there is always a time period in which the file if vulnerable, and there is no warning that the changes have been saved.


As an added downside - the autosave sends a lot of data back across WAN links - leading to beachballing when accessing files over VPN.


Now, for the consumer the whole Versions and Autosave might be a good idea. In a heterogenous environment it's a data loss that's waiting to happen - and one that's not necessarily easy to detect.


Apple should really have given use a switch - even if this is default on, to stop this behaviour, it's as simple as that. BS about "Apple is showing us the future" - some of us have work to do in the present.


PS. The arguement about not switching is specious - the newer Macbook airs, etc *only* support Lion - no downgrade possible.

Sep 12, 2011 1:56 PM in response to Azathoth101

Azathoth101 wrote:


Consider my workplace - running on Linux (servers & desktops) for more than 10 years.

I'm sorry to hear that. I find Linux still has many years to go until reaches the stability of MacOS X or even Solaris circa 1997.


I think we've had to get out a backup due to user error induced file loss about 3 times in the past decade.


Your experience is not typcial.


there are a lot of things that Apple doesn't cater for - certain types of workstations suitable for compiling VHDL for large FPGAs being one of them... can OS X natively run Agilent ADS, Zuken CR-5000 and similar 100k+ USD software systems?


Can it? Absolutely! Those packages you listed run on both Linux and Solaris. They could be ported to MacOS X very quickly. Perhaps you should ask them to do so.


so people saying "run Time Machine" is not acceptable to *many* environments.


Sure it is.


The biggest danger is insidious data loss - a few things were changed - a quick test of some new number in a spreadsheet to get some different filter coefficients and bam... autosave.


Doesnt matter if "Lock file after x amount of time" was on, because there is always a time period in which the file if vulnerable, and there is no warning that the changes have been saved.

You've got to hand it to Apple. Only with the mass hysteria that surrounds Apple would features like Time Machine, Versions, and Autosave be equated with "data loss". Talk about your reality distortion fields!

Sep 12, 2011 2:18 PM in response to etresoft

there are a lot of things that Apple doesn't cater for - certain types of workstations suitable for compiling VHDL for large FPGAs being one of them... can OS X natively run Agilent ADS, Zuken CR-5000 and similar 100k+ USD software systems?


Can it? Absolutely! Those packages you listed run on both Linux and Solaris. They could be ported to MacOS X very quickly. Perhaps you should ask them to do so.


You clearly have no idea of what you are talking about. But yes, I'll just ask Zuken nicely to recompile for OS X (it's just copy and paste into Xcode, right?) - or perhaps they can release their source code to the Macports group so I can build it myself?


You've got to hand it to Apple. Only with the mass hysteria that surrounds Apple would features like Time Machine, Versions, and Autosave be equated with "data loss". Talk about your reality distortion fields!

Concrete examples were given of data loss.




All that would be required to resolve this to most people's satisfaction is a System Preferences setting.

Sep 12, 2011 2:36 PM in response to etresoft

You've got to hand it to Apple. Only with the mass hysteria that surrounds Apple would features like Time Machine, Versions, and Autosave be equated with "data loss". Talk about your reality distortion fields!



Reality distortion field indeed.


I demonstrated very clearly how these features can result in total data loss, and you claim it is no issue at all. Whose reality is distorted here? I used a simple "open a picture in preview" to show the problem, but once things like Office support this, we are completely hosed.


The bottom line is that in an enterprise environment we can not install Lion. Period. We are buying machines right now and installing snow leopard on them in order to make them safe to use on our network. What are we going to do when we can no longer install snow leopard?


I began the conversation with my IT department on what we would do if we are forced to move away from Apple. I can't believe I'm having to have the discussion (first time since about 1997 I've had to open this discussion), and none of the options look particularly appealing, but unless this is fixed we have no choice.


You can claim we need to change how we work all we want. The bottom line is that's a ludicrous argument. We should not be taken hostage by our tools.


Joel

Sep 12, 2011 2:45 PM in response to Azathoth101

Azathoth101 wrote:


You clearly have no idea of what you are talking about.


Mais si ! I've been porting Solaris, HP-UX, and Linux code to MacOS X (and even MacOS) for many years. Anything that already runs on Linux and Solaris can likely be ported to MacOS X quite easily.


But yes, I'll just ask Zuken nicely to recompile for OS X (it's just copy and paste into Xcode, right?)


No, it's much easier than that 🙂


All that would be required to resolve this to most people's satisfaction is a System Preferences setting.


Much more is required than that. Versions and Autosave are low-level parts of the MacOS X document-saving infrastructure. They would have to re-write the API to make the feature optional.

Jan 9, 2012 5:23 AM in response to etresoft

. so, from what I understand of this conversation,

the thing to worry about with Versioning and Auto-save

is that not even Apple's own apps

are correctly using these new features:

. what each supporting app needs to do is

handle this for user:

when the user asks for a server file,

it's doing the copy to local without being asked to,

and then on a save instruction,

it both saves and copies back to the server .

. does that sound right?

Jan 9, 2012 7:12 AM in response to Azathoth101

Azathoth101 wrote:


The biggest danger is insidious data loss - a few things were changed - a quick test of some new number in a spreadsheet to get some different filter coefficients and bam... autosave.

Yes - that's crazy. Everyone uses spreadsheets to try things out by changing some of the input data to see what would happen. That is kind of what spreadsheets are for !


This plus the ridiculous autosave of images when edited in Preview must surely point towards Apple reviewing the Autosave feature, or risk losing a large number of users.


In the meantime, to get around the issue, I would recommend using MS Word for spreadsheets (so far, MS Office doesn't have Autosave and if/when it does, I am assuming MS will do it in a sensible way. Or you could use Office 2008, which works fine in Lion).


By "a sensible way" I mean what Graphic Converter has done. The latest Lion version of GC has Autosave off by default and you can turn it on if you want to. So for basic editing/cropping of images, GC is a much better option than Preview.


THe trouble is that if you have (say) 20 people accessing your image files from the server and playing around with them, you can't tell them not to use Preview. 😟

Jan 9, 2012 7:23 AM in response to Tom in London

Yes, it would be nice if applications were written so that auto-save was a configurable option.


Yes, anybody who takes important/critical documents, e.g., spreadsheets, images, etc., and just starts tinkering with them to experiment instead of making a copy and then tinkering, is just plain dumb - autosave or not. That's just rookie behavior.


charlie

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Chronic catastrophic data loss with Lion & servers

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.