On 3/6/24 10:19, Ken Mandelberg wrote:
I I notice these two permission errors in my logs. I'm on Ubuntu. What do I 
need to do to correct them.
The backups succeed but I guess they are missing info.

05-Mar 23:19 orac-dir JobId 7661: shell command: run BeforeJob 
"/opt/bacula/scripts/make_catalog_backup.pl MyCatalog"
05-Mar 23:19 orac-dir JobId 7661: BeforeJob: mysqldump: Error: 'Access denied; you need (at least one of) the PROCESS privilege(s) for this operation' when trying to dump tablespaces
05-Mar 23:19 orac-dir JobId 7661: Start Backup JobId 7661, 
Job=BackupCatalog.2024-03-05_23.10.00_05
05-Mar 23:19 orac-dir JobId 7661: Connected to Storage "File" at localhost:9103 
with TLS
05-Mar 23:19 orac-dir JobId 7661: Using Device "FileStorage" to write.
05-Mar 23:19 orac-dir JobId 7661: Connected to Client "orac-fd" at orac:9102 
with TLS
05-Mar 23:19 orac-fd JobId 7661: Connected to Storage at localhost:9103 with TLS
05-Mar 23:19 orac-sd JobId 7661: Vol
ume "Vol0010" previously written, moving to end of data.
05-Mar 23:19 orac-sd JobId 7661: Ready to append to end of Volume "Vol0010" 
size=52,690,472,345
05-Mar 23:19 orac-sd JobId 7661: Elapsed time=00:00:02, Transfer rate=325.8 M 
Bytes/second
05-Mar 23:19 orac-sd JobId 7661: Sending spooled attrs to the Director. 
Despooling 233 bytes ...
05-Mar 23:19 orac-dir JobId 7661: Error: Could not open WriteBootstrap file:
/opt/bacula/working/BackupCatalog.bsr: ERR=Permission denied
05-Mar 23:19 orac-dir JobId 7661: Error: Bacula Enterprise orac-dir 13.0.3 
(02May23):
   Build OS:               x86_64-pc-linux-gnu-bacula-enterprise ubuntu 22.04


Hello Ken,

There are two unrelated issues here.



First, somehow, the bsr file "Permission denied" error:
----8<----
05-Mar 23:19 orac-dir JobId 7661: Error: Could not open WriteBootstrap file: /opt/bacula/working/BackupCatalog.bsr: ERR=Permission denied
----8<----

This problem is that somehow (guessing someone started the Director as the root user at some point), so the BackupCatalog.bsr file permissions do not allow the Director (normally running as 'bacula' user to write to this file:
----8<----
-rw-r--r--  1 root   root    190 Jul 11  2023 BackupCatalog.bsr
----8<----

Simple fix, as root, do:
----8<----
# chown bacula:bacula /opt/bacula/working/BackupCatalog.bsr
----8<----


Second problem is not a Bacula problem, but a MySQL user/permissions issue:
----8<----
05-Mar 23:19 orac-dir JobId 7661: shell command: run BeforeJob 
"/opt/bacula/scripts/make_catalog_backup.pl MyCatalog"
05-Mar 23:19 orac-dir JobId 7661: BeforeJob: mysqldump: Error: 'Access denied; you need (at least one of) the PROCESS privilege(s) for this operation' when trying to dump tablespaces
----8<----

With the Director running as the bacula user, this means the Before Script (/opt/bacula/scripts/make_catalog_backup.pl) in the Catalog job `BackupCatalog` will be called as the bacula user, then the sc ript calls the mysqldump program to dump the 'bacula' (by default) database.

This one is not a filesystem permissions issue/error.

The error is the MySQL database server telling you that the MySQL database user you have configured in the Catalog{} resource in your Director's configuration (usually bacula) does not have the "...PROCESS privilege(s) for this operation' when trying to dump tablespaces"


Find out how your Catalog resource (named "MyCatalog") in the Director is set up (ie: user, password, DB address, DB port, etc) is configured.


Then, make any DB privilege modifications necessary, and make sure you can (outside of Bacula, and as the 'bacula' user, *not* the root user) successfully run the command:

bacula@hostname] $ /opt/bacula/scripts/make_catalog_backup.pl MyCatalog

This will (by default) create a file `/opt/bacula/working/bacula.sql`

I see there is one there already from 23:19 yesterday evening, which means the 
mysqldump command called i
n the Before script by your BackupCatalog job was able to dump something, but clearly the MySQL DB server is not completely happy. :)



Hope this helps!
Bill

--
Bill Arlofski
w...@protonmail.com

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to