A bacula user called Dave wrote me the following message:

>Hi,
>   Do you have a procedure for setting up those tls keys? I'm trying to
>find a tutorial on that subject.
>   As for your tls issue what OS are you running on and what version of
>bacula? The tls error required, but not configured in bacula, suggests
>to me that when you compiled and installed bacula or did it from a
>distribution package it didn't pull in the tls dependencies. Here's a
>way to find out:
>
>ldd `which bacula-dir`
>
>amoung that output you should see the following libs:
>
>libssl.so.4
>libcrypto.so.4
>libcrypt.so.3
>
>If you don't have those that's at least the first part of the problem.
>As for the other errors about config file errors with tls require that
>might fix them as well, but i am not sure.
>   Please keep me up to date on this issue as i am trying to get tls
>going here as well.
>Thanks.
>Dave.



And my answer is the following:


Hi Dave,

I have used the bacula manual information
http://bacula.org/rel-manual/Bacula_TLS.html
and the following web information
http://www.calivia.com/blog/mike/bacula-with-support-for-tls-encryption

My bacula director machine has installed a Red Hat Enterprise 4 and I use
bacula version
1.38.9.

I have solved some errors putting the next lines in all places that use TLS:

  TLS Key = /etc/bacula/cert.pem
  TLS CA Certificate File = /etc/bacula/cert.pem

(I use the same certificate that I used with TLS Certificate).

Now, when I start bacula, the errors only are:

[EMAIL PROTECTED] bacula]# ./bacula start
Starting the Bacula Storage daemon
07-Jul 11:14 bacula-sd:  Fatal error: TLS required but not configured in
Bacula.Starting
the Bacula File daemon
07-Jul 11:14 bacula-fd:  Fatal error: TLS required but not configured in
Bacula.07-Jul
11:14 bacula-fd: ERROR in filed.c:188 Please correct configuration file:
/etc/bacula/bacula-fd.conf
Starting the Bacula Director daemon
07-Jul 11:14 bacula-dir:  Fatal error: Failed to initialize TLS context for
Director
"bacula-dir" in /etc/bacula/bacula-dir.conf.
07-Jul 11:14 bacula-dir:  Fatal error: TLS required but not configured in
Bacula.
07-Jul 11:14 bacula-dir:  Fatal error: TLS required but not configured in
Bacula.
07-Jul 11:14 bacula-dir:  Fatal error: TLS required but not configured in
Bacula.
07-Jul 11:14 bacula-dir:  Fatal error: TLS required but not configured in
Bacula.
07-Jul 11:14 bacula-dir ERROR TERMINATION
Please correct configuration file: /etc/bacula/bacula-dir.conf


Furthermore, I tryed   ldd `which bacula-dir`   comand, and the output is
the following:

[EMAIL PROTECTED] ~]# ldd `which bacula-dir`
        libmysqlclient_r.so.10 => /usr/lib/mysql/libmysqlclient_r.so.10
(0x00a7e000)
        libz.so.1 => /usr/lib/libz.so.1 (0x00a64000)
        libpthread.so.0 => /lib/tls/libpthread.so.0 (0x00a50000)
        libssl.so.4 => /lib/libssl.so.4 (0x0028c000)
        libcrypto.so.4 => /lib/libcrypto.so.4 (0x00124000)
        libstdc++.so.5 => /usr/lib/libstdc++.so.5 (0x00c01000)
        libm.so.6 => /lib/tls/libm.so.6 (0x00a25000)
        libgcc_s.so.1 => /lib/libgcc_s.so.1 (0x00b88000)
        libc.so.6 => /lib/tls/libc.so.6 (0x008f9000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0x003a2000)
        libnsl.so.1 => /lib/libnsl.so.1 (0x00438000)
        /lib/ld-linux.so.2 (0x008e0000)
        libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x00de8000)
        libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x00d69000)
        libcom_err.so.2 => /lib/libcom_err.so.2 (0x00d64000)
        libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x00101000)
        libresolv.so.2 => /lib/libresolv.so.2 (0x00b73000)
        libdl.so.2 => /lib/libdl.so.2 (0x00a4a000)


The libcrypt.so.3 lib don't appear! :)

Then, how I can solve this problem? Anybody can help me?

Thanks.

David.
-- 
View this message in context: 
http://www.nabble.com/bacula-TLS-tf1785382.html#a5214386
Sent from the Bacula - Users forum at Nabble.com.


Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to