include not included?

2007-01-18 Thread Jean-Francois Malouin
Hi,

Got this client (Amanda-2.5.1p2 same as server) for which a few DLEs
with includes don't work, ie the include debug files are empty and the
DLE backups nothing. Turns out that some dirs leading to the DLEs are
700 to some user and so amanda can't stat below the
read-write-exec-user-only directory. First time I encounter this. I
though runtar being suid to root would not be affected by this...

DLE:
   
gertrude concussion2_jenkai_05 
/export_raid02/data-concussion-concussion2/jenkai/McGill/analysis/fMRI/individuals
 {
tar-bsdtcpauth-100
include "./hockey"
}

In the diskpath ".../McGill/..." is 700 to some user:

# ls -ld /export_raid02/data-concussion-concussion2/jenkai/McGill
drwxr-  4 jenkai ptitolab 35 Jan 16 13:30 
/export_raid02/data-concussion-concussion2/jenkai/McGill/

and the include is empty (after running amcheck):

ls -la /tmp/amanda-conf9/selfcheck.concussion2_jenkai_05.20070118135050.include
-rw---  1 amanda disk 0 Jan 18 13:50 
/tmp/amanda-conf9/selfcheck.concussion2_jenkai_05.20070118135050.include

If I make that dir 755 (say) all is good and the include debug file
shows "./hockey" as it should. 

Is this the expected behaviour?

thanks!
jf
-- 
<° ><


Re: Cant run two Linux Servers behind my firewall at the same time - only one and vice versa.

2007-01-18 Thread David Golden
On Thursday 18 January 2007 16:36, Kristian Rink wrote:

> * Perhaps you might consider using an option other than amanda for doing
> cross-network backups. No offense folks, I love amanda and its feature
> set, but sync'ing machines across networks usually I fall back to using
> rsync/ssh as it needs way less firewall tweaking / port opening.

Well, don't forget, amanda's been able to do backups over ssh for a 
while now...











Re: Cant run two Linux Servers behind my firewall at the same time - only one and vice versa.

2007-01-18 Thread Frank Smith
Chuck Amadi Systems Administrator wrote:
> Hi List
> 
> Sorry to nag on is there any suggestions to my post.
> 
> Cheers
> 
> On Thu, 2007-01-18 at 08:27 +, chuck.amadi wrote:
>> Hi List I was hoping for some direction to my issue with two servers 
>> behind a firewall running ipchains
>> I can backup one or the other but when I uncomment both DLE I get host down.
>>
>> Thanks in advance.
>>
>>
>> chuck.amadi wrote:
>>
>>> Hi I have two Linux SuSE 9 SLES servers outside of my lan behind a 
>>> firewall using (I know don't laugh) IPChains.
>>> The first server I setup worked without problems by compiling with the 
>>> tcp and udp port range and changing a parameter in security.c file
>>> and increasing the timeout using a ipchain rule, which worked a treat 
>>> but I have another new server outside and behine a firewall.
>>>
>>> Thus when I tried following the same reciepe and compile using the 
>>> same tcp and udp port range and thus a separate tcp and udp port range 
>>> to no joy I am unable to get both to work at the same time if I 
>>> comment out one of the amanda clients within the disklist the other 
>>> doesn't work and vice versa So I know it is not the setup or configure.
>>>
>>> #The timeout is in seconds. If you set the timeout of TCP, TCPFIN
>>> #and UDP to 5 seconds, 5 seconds and 5 seconds, I think they are
>>> #too short.  Please try to set them to 5min, 1min
>>> #and 5min respectively such as 300 60 300.
>>>
>>> # ipchains -M -S 300 tcp 60 tcpfin 300 udp works ok.
>>> ipchains -M -S 7200 60 300
>>>
>>>
>>> I get the Warning: selfcheck request timed out. Host down!. Note that 
>>> when I comment out one of them amcheck works accordingly
>>> I am aware the it's using udp over the firewall But I haven't been 
>>> able to suss this out I assume that my connection is poor.
>>> I have checked both /tmp/amanda/amanda-date.debug and they both moan 
>>> about timeouts failed But are OK when only one of them
>>> is in use.

Any chance your firewall is dong NAT, and mapping both clients to the
same IP?

Frank

>>>
>>> Cheers
>>>
>>


-- 
Frank Smith  [EMAIL PROTECTED]
Sr. Systems Administrator   Voice: 512-374-4673
Hoover's Online   Fax: 512-374-4501


Re: Cant run two Linux Servers behind my firewall at the same time - only one and vice versa.

2007-01-18 Thread Kristian Rink

Chuck;

Chuck Amadi Systems Administrator schrieb:

>> Hi List I was hoping for some direction to my issue with two servers 
>> behind a firewall running ipchains
>> I can backup one or the other but when I uncomment both DLE I get host down.

As I don't run amanda across network boundaries, probably I can be of
little help here. Few pointers, however:

* Did you spent some quality time using tcpdump and friends to see your
modified build of amanda actually is exclusively using the port range
you want it to use? I recommend doing some monitoring and figuring out
what happens in your setup.

* Perhaps you might consider using an option other than amanda for doing
cross-network backups. No offense folks, I love amanda and its feature
set, but sync'ing machines across networks usually I fall back to using
rsync/ssh as it needs way less firewall tweaking / port opening.
Overally, as I dislike the idea of having _one_ amanda installation
making its way through a firewall, the idea of having even _two_ of them
gives me the creeps. :)

Cheers,
Kristian


-- 
Dipl.-Ing.(BA) Kristian Rink * Software- und Systemingenieur
planConnect GmbH  * Strehlener Str. 12 - 14 * 01069 Dresden
fon: 0351 4657770 * mail: [EMAIL PROTECTED] * http://www.pm-planc.de



Dilog Libra 8 - experience anyone?

2007-01-18 Thread Stefan G. Weichinger

Greets, amanda-users,
happy new year ...

Recently I lost two tapedrives in a row, one DLT and one DDS-3, so I had
to quickly get another one.

I ebayed around a bit, and decided for a Dilog Libra 8 library, mainly
because of the low price and the fact that I have lots of DDS3-tapes
already.

I browsed the ml-archives and only found one note from Marc Schaefer,
who worked for Dilog back then and tested it with Amanda positively. He
mentioned that it worked with chio, which is rather old now afaik. Does
anyone has used such a library with mtx as well? Any infos on this?

Dunno if Marc is still subscribed here ...

Currently I am waiting for this box to be delivered, so I still had no
possibility to try it out by myself.

Thanks, greets,
Stefan



Re: Cant run two Linux Servers behind my firewall at the same time - only one and vice versa.

2007-01-18 Thread Chuck Amadi Systems Administrator
Hi List

Sorry to nag on is there any suggestions to my post.

Cheers

On Thu, 2007-01-18 at 08:27 +, chuck.amadi wrote:
> Hi List I was hoping for some direction to my issue with two servers 
> behind a firewall running ipchains
> I can backup one or the other but when I uncomment both DLE I get host down.
> 
> Thanks in advance.
> 
> 
> chuck.amadi wrote:
> 
> > Hi I have two Linux SuSE 9 SLES servers outside of my lan behind a 
> > firewall using (I know don't laugh) IPChains.
> > The first server I setup worked without problems by compiling with the 
> > tcp and udp port range and changing a parameter in security.c file
> > and increasing the timeout using a ipchain rule, which worked a treat 
> > but I have another new server outside and behine a firewall.
> >
> > Thus when I tried following the same reciepe and compile using the 
> > same tcp and udp port range and thus a separate tcp and udp port range 
> > to no joy I am unable to get both to work at the same time if I 
> > comment out one of the amanda clients within the disklist the other 
> > doesn't work and vice versa So I know it is not the setup or configure.
> >
> > #The timeout is in seconds. If you set the timeout of TCP, TCPFIN
> > #and UDP to 5 seconds, 5 seconds and 5 seconds, I think they are
> > #too short.  Please try to set them to 5min, 1min
> > #and 5min respectively such as 300 60 300.
> >
> > # ipchains -M -S 300 tcp 60 tcpfin 300 udp works ok.
> > ipchains -M -S 7200 60 300
> >
> >
> > I get the Warning: selfcheck request timed out. Host down!. Note that 
> > when I comment out one of them amcheck works accordingly
> > I am aware the it's using udp over the firewall But I haven't been 
> > able to suss this out I assume that my connection is poor.
> > I have checked both /tmp/amanda/amanda-date.debug and they both moan 
> > about timeouts failed But are OK when only one of them
> > is in use.
> >
> > Cheers
> >
> 
> 
-- 
Unix/ Linux Systems Administrator
Chuck Amadi
The Surgical Material Testing Laboratory (SMTL), 
Princess of Wales Hospital 
Coity Road 
Bridgend, 
United Kingdom, CF31 1RQ.
Email chuck.smtl.co.uk
Tel: +44 1656 752820 
Fax: +44 1656 752830




Re: Cant run two Linux Servers behind my firewall at the same time - only one and vice versa.

2007-01-18 Thread chuck.amadi


Hi List I was hoping for some direction to my issue with two servers 
behind a firewall running ipchains

I can backup one or the other but when I uncomment both DLE I get host down.

Thanks in advance.


chuck.amadi wrote:

Hi I have two Linux SuSE 9 SLES servers outside of my lan behind a 
firewall using (I know don't laugh) IPChains.
The first server I setup worked without problems by compiling with the 
tcp and udp port range and changing a parameter in security.c file
and increasing the timeout using a ipchain rule, which worked a treat 
but I have another new server outside and behine a firewall.


Thus when I tried following the same reciepe and compile using the 
same tcp and udp port range and thus a separate tcp and udp port range 
to no joy I am unable to get both to work at the same time if I 
comment out one of the amanda clients within the disklist the other 
doesn't work and vice versa So I know it is not the setup or configure.


#The timeout is in seconds. If you set the timeout of TCP, TCPFIN
#and UDP to 5 seconds, 5 seconds and 5 seconds, I think they are
#too short.  Please try to set them to 5min, 1min
#and 5min respectively such as 300 60 300.

# ipchains -M -S 300 tcp 60 tcpfin 300 udp works ok.
ipchains -M -S 7200 60 300


I get the Warning: selfcheck request timed out. Host down!. Note that 
when I comment out one of them amcheck works accordingly
I am aware the it's using udp over the firewall But I haven't been 
able to suss this out I assume that my connection is poor.
I have checked both /tmp/amanda/amanda-date.debug and they both moan 
about timeouts failed But are OK when only one of them

is in use.

Cheers