The central part of the trace follows.  The message about the SSL 
connection seems ambiguous:
ERROR: error: src/conn.c:392: init_ssl_conn: SSL certificate verification 
status: 0: ok

I take this to mean that somehow this is not managing the credentials 
properly




bareos-sd (150): stored/mount.cc:84-144 Enter mount_next_volume(release=0) 
dev="awstest" (bareos-test-uw)
bareos-sd (150): stored/mount.cc:97-144 mount_next_vol retry=0
bareos-sd (100): stored/mount.cc:673-144 No swap_dev set
bareos-sd (50): stored/askdir.cc:179-144 >dird CatReq 
Job=TestOpt.2020-11-11_09.14.54_26 GetVolInfo VolName=cfull0010 write=1
bareos-sd (50): stored/askdir.cc:106-144 <dird 1000 OK VolName=cfull0010 
VolJobs=0 VolFiles=0 VolBlocks=0 VolBytes=0 VolMounts=0 VolErrors=0 
VolWrites=0 MaxVolBytes=53
687091200 VolCapacityBytes=0 VolStatus=Append Slot=0 MaxVolJobs=0 
MaxVolFiles=0 InChanger=0 VolReadTime=0 VolWriteTime=0 EndFile=0 EndBlock=0 
LabelType=0 MediaId=10 En
cryptionKey= MinBlocksize=0 MaxBlocksize=0
bareos-sd (50): stored/askdir.cc:141-144 DoGetVolumeInfo return true slot=0 
Volume=cfull0010, VolminBlocksize=0 VolMaxBlocksize=0
bareos-sd (50): stored/askdir.cc:144-144 setting dcr->VolMinBlocksize(0) to 
vol.VolMinBlocksize(0)
bareos-sd (50): stored/askdir.cc:147-144 setting dcr->VolMaxBlocksize(0) to 
vol.VolMaxBlocksize(0)
bareos-sd (150): stored/mount.cc:134-144 After find_next_append. 
Vol=cfull0010 Slot=0
bareos-sd (100): stored/autochanger.cc:136-144 Device "awstest" 
(bareos-test-uw) is not an autochanger
bareos-sd (150): stored/mount.cc:204-144 autoLoadDev returns 0
bareos-sd (150): stored/mount.cc:239-144 want vol=cfull0010 devvol= 
dev="awstest" (bareos-test-uw)
bareos-sd (100): stored/dev.cc:646-144 open dev: type=6 dev_name="awstest" 
(bareos-test-uw) vol=cfull0010 mode=OPEN_READ_WRITE
bareos-sd (100): stored/dev.cc:665-144 call OpenDevice mode=OPEN_READ_WRITE
bareos-sd (190): stored/dev.cc:1097-144 Enter mount
bareos-sd (100): stored/dev.cc:741-144 open disk: mode=OPEN_READ_WRITE 
open(bareos-test-uw/cfull0010, 00000002, 0640)
bareos-sd (10): backends/droplet_device.cc:111-144 ERROR: error: 
src/conn.c:389: init_ssl_conn: SSL connect error: 0: 0
bareos-sd (10): backends/droplet_device.cc:111-144 ERROR: error: 
src/conn.c:392: init_ssl_conn: SSL certificate verification status: 0: ok
bareos-sd (100): backends/droplet_device.cc:344-144 
check_path(device="awstest" (bareos-test-uw), bucket=bareos-test-uw, 
path=/): DPL_FAILURE
bareos-sd (100): backends/droplet_device.cc:364-144 CheckRemote("awstest" 
(bareos-test-uw)): failed
bareos-sd (100): backends/chunked_device.cc:673-144 setup_chunk failed, as 
remote device is not available
bareos-sd (100): stored/dev.cc:748-144 open failed: stored/dev.cc:747 Could 
not open: bareos-test-uw/cfull0010, ERR=Success

bareos-sd (100): stored/dev.cc:757-144 open dev: disk fd=-1 opened
bareos-sd (100): stored/dev.cc:673-144 preserve=33376204060 fd=-1
bareos-sd (150): stored/mount.cc:794-144 Create volume label
bareos-sd (100): stored/dev.cc:590-144 setting minblocksize to 64512, 
maxblocksize to label_block_size=64512, on device "awstest" (bareos-test-uw)
bareos-sd (150): stored/label.cc:365-144 write_volume_label()
bareos-sd (150): stored/label.cc:382-144 New VolName=cfull0010
bareos-sd (100): stored/dev.cc:646-144 open dev: type=6 dev_name="awstest" 
(bareos-test-uw) vol=cfull0010 mode=OPEN_READ_WRITE
bareos-sd (100): stored/dev.cc:665-144 call OpenDevice mode=OPEN_READ_WRITE
bareos-sd (190): stored/dev.cc:1097-144 Enter mount
bareos-sd (100): stored/dev.cc:741-144 open disk: mode=OPEN_READ_WRITE 
open(bareos-test-uw/cfull0010, 00000002, 0640)
bareos-sd (10): backends/droplet_device.cc:111-144 ERROR: error: 
src/conn.c:389: init_ssl_conn: SSL connect error: 0: 0
bareos-sd (10): backends/droplet_device.cc:111-144 ERROR: error: 
src/conn.c:392: init_ssl_conn: SSL certificate verification status: 0: ok
bareos-sd (100): backends/droplet_device.cc:344-144 
check_path(device="awstest" (bareos-test-uw), bucket=bareos-test-uw, 
path=/): DPL_FAILURE
bareos-sd (100): backends/droplet_device.cc:364-144 CheckRemote("awstest" 
(bareos-test-uw)): failed
bareos-sd (100): backends/chunked_device.cc:673-144 setup_chunk failed, as 
remote device is not available


On Wednesday, November 11, 2020 at 9:07:06 AM UTC-6 Frank Ueberschar wrote:

> You may want to switch-on the tracefile on the storage daemon that gives 
> you more debugging output:
>
> i.e. "setdebug trace=1 level=200 storage=awstest"
>
> Additionally you may want to try the current nightly build because we 
> added some other improvements to the droplet backend-device: 
> https://download.bareos.org/bareos/experimental/nightly/
>
>
> Best, Frank
>
>
> Am 10.11.20 um 16:51 schrieb 'JAMES BELLINGER' via bareos-users:
>
>
> I am testing bareos-19-2.7-2 on CentOS Linux release 7.4.1708, including 
> the bareos-storage-droplet RPM.
>
> We want to evaluate how well we can backup to the cloud, or to a ceph 
> server of our own.  I have tried both, and both fail.
>
> The credentials are valid, and were tested independently.  (Unless droplet 
> wants them specially encoded??)
>
> Since other people have been able to get this working, I assume there's 
> some pilot error in the configuration.  (Other backup tests worked.)
>
> I would be grateful for any suggestions as to what I'm doing wrong.
> jim
>
> To illustrate, this is the aws configuration:
>
>         /etc/bareos/bareos-sd.d/device/awstest.conf
> Device {
>   Name = awstest
>   Media Type = S3_Object2
>   Archive Device = "bareostestuw"       # This doesn't work when I use 
> "bareos-test-uw" either
>   # testing:
>   Device Options = 
> "profile=/etc/bareos/bareos-sd.d/device/droplet/awstest.profile,bucket=bareos-test-uw,chunksize=100M,iothreads=0,retries=1"
>   Device Type = droplet
>   Label Media = yes                    # lets Bareos label unlabeled media
>   Random Access = yes
>   Automatic Mount = yes                # when device opened, read it
>   Removable Media = no
>   Always Open = no
>   Description = "S3 device"
>   Maximum Concurrent Jobs = 1
> }
>
>         /etc/bareos/bareos-sd.d/device/droplet/awstest.profile
> host = bareos-test-uw.s3.amazonaws.com
> use_https = true
> backend = s3
> aws_region = us-east-2
> aws_auth_sign_version = 4
> access_key = "redacted"
> secret_key = "redacted"
> pricing_dir = ""
>
>
>         /etc/bareos/bareos-dir.d/storage/awstest.conf
> Storage {
>   Name = awstest
>   Address = bareos-test-sd.icecube.wisc.edu       # N.B. Use a fully 
> qualified name here (do not use "localhost" here).
>   Password = "redacted"
>   Device = awstest
>   Media Type = S3_Object2
> }
>
> Etc.
>
> The job fails in WriteNewVolumeLabel with
> 10-Nov 09:00 bareos-sd: ERROR in backends/droplet_device.cc:111 error: 
> src/conn.c:389: init_ssl_conn: SSL connect error: 0: 0
> 10-Nov 09:00 bareos-sd: ERROR in backends/droplet_device.cc:111 error: 
> src/conn.c:392: init_ssl_conn: SSL certificate verification status: 0: ok
> 10-Nov 09:00 bareos-sd JobId 131: Warning: stored/label.cc:390 Open device 
> "awstest" (bareostestuw) Volume "cfull0010" failed: ERR=stored/dev.cc:747 
> Could not open: bareostestuw/cfull0010, ERR=Success
>
>
> ============
>
> When I test this on our ceph system, the result is quite similar, and I 
> have access to the system logs.
> The ceph server logs include "HEAD", suggesting that it is failing when 
> trying to get bucket information.  The error return logged is 
> 403--something is forbidden
>
>
> 2020-11-09 15:15:42.020 7f84290ea700  1 ====== starting new request 
> req=0x7f84290e37f0 =====
> 2020-11-09 15:15:42.020 7f84290ea700  1 ====== req done req=0x7f84290e37f0 
> op status=0 http_status=403 latency=0s ======
> 2020-11-09 15:15:42.020 7f84290ea700  1 civetweb: 0x55d654014000: 
> 10.128.108.133 - - [09/Nov/2020:15:15:41 -0600] "HEAD / HTTP/1.1" 403 231 - 
> -
>
> The bareos messages say it is failing in both WriteNewVolumeLabel and in 
> MountNextWriteVolume.
> Warning: stored/label.cc:390 Open device "uwcephS3" (baretest) Volume 
> "cfull0009" failed: ERR=stored/dev.cc:747 Could not open: 
> baretest/cfull0009, ERR=Success
> Warning: stored/label.cc:390 Open device "uwcephS3" (baretest) Volume 
> "cfull0009" failed: ERR=stored/dev.cc:747 Could not open: 
> baretest/cfull0009, ERR=Success
> Warning: stored/mount.cc:275 Open device "uwcephS3" (baretest) Volume 
> "cfull0009" failed: ERR=stored/dev.cc:747 Could not open: 
> baretest/cfull0009, ERR=Success
>
> -- 
> You received this message because you are subscribed to the Google Groups 
> "bareos-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to bareos-users...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/bareos-users/a7cb1354-547b-4921-9c56-0995bf673eaan%40googlegroups.com
>  
> <https://groups.google.com/d/msgid/bareos-users/a7cb1354-547b-4921-9c56-0995bf673eaan%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
>
> -- 
> Mit freundlichen Grüßen
>
>  Frank Ueberschar                          frank.ue...@bareos.com
>  Bareos GmbH & Co. KG                      Phone: +49 221 63 06 93-88 
> <+49%20221%2063069388>
>  http://www.bareos.com                     Fax:   +49 221 63 06 93-10 
> <+49%20221%2063069310>
>
>  Sitz der Gesellschaft: Köln | Amtsgericht Köln: HRA 29646
>  Geschäftsführer: S. Dühr, M. Außendorf, J. Steffens, P. Storz
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"bareos-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to bareos-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/bareos-users/b7667172-3559-4f98-b440-ac073cb9108an%40googlegroups.com.

Reply via email to