Re: [Bacula-users] client-side data encryption without routine access to private key

2009-02-17 Thread Tom Yates
On Tue, 17 Feb 2009, Landon Fuller wrote: > On Feb 17, 2009, at 8:48 AM, Martin Simmons wrote: > >> That sounds backwards to me. Shouldn't the encrypter (backup) use the >> public key to keep the data safe? Then only the decrypter (restore) >> can read the data, using the private key. > > Righ

Re: [Bacula-users] client-side data encryption without routine access to private key

2009-02-17 Thread Landon Fuller
On Feb 17, 2009, at 8:48 AM, Martin Simmons wrote: That sounds backwards to me. Shouldn't the encrypter (backup) use the public key to keep the data safe? Then only the decrypter (restore) can read the data, using the private key. Right. A symmetric session key is used for each backup r

Re: [Bacula-users] Offsite backup solution

2009-02-17 Thread Jeff Dickens
It was a couple of years ago I first brought this up. I guess you and I are the only one who would find a cross-sd migration/copy useful. The answer I got was "not likely unless you're paying for it", which is certainly fair enough, but I also got the feeling that the idea wasn't well receive

Re: [Bacula-users] bacula-fd starts and then crash (leaving an empty file in /var/lock/subsys/bacula-fd)

2009-02-17 Thread John Drescher
On Tue, Feb 17, 2009 at 10:54 PM, John Drescher wrote: >> FileDaemon { # this is me >> Name= client.bacula.com-fd >> FDport = 9102 # where we listen for the >> director >> WorkingDirectory= /var/lib/bacula

Re: [Bacula-users] bacula-fd starts and then crash (leaving an empty file in /var/lock/subsys/bacula-fd)

2009-02-17 Thread John Drescher
> FileDaemon { # this is me > Name= client.bacula.com-fd > FDport = 9102 # where we listen for the > director > WorkingDirectory= /var/lib/bacula > Pid Directory = /var/run/bacula > Maximum Co

[Bacula-users] bacula-fd starts and then crash (leaving an empty file in /var/lock/subsys/bacula-fd)

2009-02-17 Thread Thomas Manson
Hi, I try to install a client on a Redhat ES 4. I've installed this rpm : bacula-client-2.4.2-1.el4.i386.rpm I've udpated the configuration file for the client to this : Director { Name = home.bacula.com-dir Password = "thepwd" } # # Restricted Director, used by tray-monitor to g

Re: [Bacula-users] Perception of Bacula (was: products based on bacula)

2009-02-17 Thread Mag Gam
Interesting problem. I was the one who started the previous thread about the naming. >When I'm talking with the management of a potential customer, I >neither use the tag line, nor do we read over the website together... >it's more that I offer a solution which can do this and that, works >reliab

Re: [Bacula-users] Offsite backup solution

2009-02-17 Thread Robert LeBlanc
> Hi Robert If you are working on it try to use pdo extension This can > greatly improve the base user which would be interested > > Use bacula with sqlite -> config in sqlite with pdo > Use bacula with mysql -> config in mysql with pdo > Use bacula with postgresql -> config in postgresql with pd

Re: [Bacula-users] Offsite backup solution

2009-02-17 Thread John Drescher
> vi, emacs [put the name of your favorite text editor] rocks in case of bacula > > GUI ? there's gedit, kate, x-term+vi :- > > I use nano via ssh for the most part with my >30 clients, >75 jobs, multiple SDs, external database, > 15 pools . I have my configuration files (50+) arranged in a

Re: [Bacula-users] Offsite backup solution

2009-02-17 Thread Bruno Friedmann
Robert LeBlanc wrote: >> P.S. Hasn't anybody created a graphical configuration program for bacula >> yet? ^^ > > I'm working on one using PHP and MySQL, I'm hoping to be able to pull the > configuration straight from MySQL for the Director and SD. The FD doesn't > change so much so I was going to

Re: [Bacula-users] mt Command and Tape ONLINE status

2009-02-17 Thread Brian Debelius
Lenny does have mt-st http://packages.debian.org/lenny/mt-st so you could try that, instead of gnu mt. I just looked at the mtx-changer from lenny, and it looks like it should work with either mt (as in the one that returns ONLINE, and the one that just returns 'drive status'), so I do not kno

Re: [Bacula-users] Bacula+Exabyte VXA2

2009-02-17 Thread Mark Nienberg
Matthew Conley wrote: > Curious is anyone using a VXA2 with their bacula? I wanted to see the > storage part of other bacula config files. I'm using a VXA-320 with the packetloader changer. Would that help? -- Mark Nienberg Sent from an invalid address. Please reply to the group. --

Re: [Bacula-users] client-side data encryption without routine access to private key

2009-02-17 Thread Martin Simmons
> On Tue, 17 Feb 2009 07:07:19 -0800, Kevin Keane said: > > > The above manual page on data encryption says that the encryption involves > > three steps: > > > > 1. The File daemon generates a session key. > > 2. The FD encrypts that session key via PKE for all recipients (the > > fi

[Bacula-users] Bacula+Exabyte VXA2

2009-02-17 Thread Matthew Conley
Curious is anyone using a VXA2 with their bacula? I wanted to see the storage part of other bacula config files. -- Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest is

Re: [Bacula-users] mt Command and Tape ONLINE status

2009-02-17 Thread Thomas
Brian Debelius schrieb: > There are 2 different mt programs. One is from cpio (i think), and the > other is from the mt-st package. I think you are having problems > detecting which mt you have. > > At the beginning of mtx-changer is a case function that sets the ready > string for wait_for_drive

Re: [Bacula-users] client-side data encryption without routine access to private key

2009-02-17 Thread Kevin Keane
Hi, Disclaimer: I haven't used bacula encryption. Just read the documentation and used to teach PKI. Tom Yates wrote: > I'm curious about encryption; specifically, encrypting the data on the > client-side before the storage daemon lays it down to tape. > > I've read http://www.bacula.org/en/dev

Re: [Bacula-users] mt Command and Tape ONLINE status

2009-02-17 Thread Brian Debelius
There are 2 different mt programs. One is from cpio (i think), and the other is from the mt-st package. I think you are having problems detecting which mt you have. At the beginning of mtx-changer is a case function that sets the ready string for wait_for_drive. The newer mtx-changer script c

Re: [Bacula-users] Finding performance issues

2009-02-17 Thread Daniel Holtkamp
Hi ! (private) HKS wrote: > It seems more and more likely to me that this is a Bacula-specific > issue. What else can I dig into to try to resolve this? Can you check how many queries per second you get on the database while backing up ? Spooling makes no difference i take it ? Does attribute sp

[Bacula-users] client-side data encryption without routine access to private key

2009-02-17 Thread Tom Yates
I'm curious about encryption; specifically, encrypting the data on the client-side before the storage daemon lays it down to tape. I've read http://www.bacula.org/en/dev-manual/Data_Encryption.html, and it seems to suggest that the client *requires* both the client's private key and the client'

[Bacula-users] verify job with differences doesn't finish and blocks storage

2009-02-17 Thread Ralf Gross
Hi, lately I've seen that verify jobs that have differences just doesn't finish. bacula 2.4.4-b1, psql *st dir [...] Running Jobs: JobId Level Name Status == 9602 VolumeT VerifyVU0EF005-Absicherung

Re: [Bacula-users] mt Command and Tape ONLINE status

2009-02-17 Thread Thomas
without tape i get this output lenny: time mt -f /dev/nst1 status mt: /dev/nst1: rmtopen failed: Kein Medium gefunden real2m0.530s user0m0.000s sys 0m0.000s etch time /etc/bacula/mt -f /dev/nst1 status /etc/bacula/mt: /dev/nst1: Kein Medium gefunden real0m0.016s user0m0.000s

Re: [Bacula-users] How to properly escape Linux shell commands for ClientRunBeforeJob?

2009-02-17 Thread Foo
On Mon, 16 Feb 2009 14:56:34 +0100, Frank Sweetser wrote: > The problem isn't that you're not escaping the shell characters, > the problem is that there's no shell there to treat them as special > characters in the first place. From the RunScript section of > http://bacula.org/en/rel-manual/Co

[Bacula-users] SD crash with 2.4.4 on Linux

2009-02-17 Thread Stefan Sorin Nicolin
Hi, I've upgraded our Bacula installation from 2.2.8 just to find out that the storage daemon crashes under load :( Sadly I can't do much debuging since this is a production system. I'll try to downgrade. However here are the facts: Gentoo 32bit vServer-Linux, bacula 2.4.4 (installed via Gent

Re: [Bacula-users] mt Command and Tape ONLINE status

2009-02-17 Thread Arno Lehmann
Hi, 17.02.2009 09:48, Thomas wrote: > Hi List, > > yesterday i did an upgrade from etch to lenny. > after the update bacula was no longer able to verify > that the tapes are loaded correctly. ... > > but the mt output shows no ONLINE > > > zlato:~# mt -f /dev/nst0 status > drive type = 114 > d

[Bacula-users] mt Command and Tape ONLINE status

2009-02-17 Thread Thomas
Hi List, yesterday i did an upgrade from etch to lenny. after the update bacula was no longer able to verify that the tapes are loaded correctly. from the job log: 2009-02-16 16:25:26 3301 Issuing autochanger "loaded? drive 0" command. 2009-02-16 16:25:26 3302 Autochanger "loaded? drive

Re: [Bacula-users] bacula hang issue. was: bacula sometimes gets stuck when volume wanted is already in a different drive

2009-02-17 Thread Silver Salonen
Hello. I just wanted to inform the list that I worked around the issue by minimizing the number of devices/storages. The problem with this is that there may be only as many parallel jobs as the number of devices. I've created separate devices for the clients having biggest backups, currently t