Re: [BackupPC-users] Backup PC on SSL

[Les Mikesell]

On Wed, Jun 1, 2016 at 11:05 AM, Michael Stowe
 wrote:
> On 2016-06-01 06:53, FLORENT Philippe wrote:
>> It is a fresh unmodified debian/apache install
>
> I note that fresh, unmodified debian/apache installations do not come
> with SSL configured, nor do they come with SSL certificates, naturally.
> If you want to use SSL, of course, you'll need to set this up yourself.

However, note that different distributions have their own ways of
packaging and configuring things.  Be sure to follow a guide specific
to your OS distro - perhaps like this:
https://www.digitalocean.com/community/tutorials/how-to-create-a-ssl-certificate-on-apache-for-debian-8

-- 
  Les Mikesell
lesmikes...@gmail.com

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] BackupPC - take a day off?

[Holger Parplies]

Hi,

bpb21 wrote on 2016-05-18 10:22:22 -0700 [[BackupPC-users]  BackupPC - take a 
day off?]:
> [someone else wrote:]
> > Maybe it's possible to create a blackout period for that day? Not sure if
> > one should specify saturday or sunday as weekdays. 
> > [...]
> 
> Thanks!  I think this is it.  I completely overlooked this for all the
> other settings.  Sounds promising.

well, yes, that is the solution that comes to mind. I'm not sure the problem
you are solving is the important one, though.

What exactly are you trying to scan for viruses, your backups or the rest
of the system?

Assuming you are scanning the backups:
Does your anti-virus software handle compression (i.e. the non-standard
format used by BackupPC)? If not, then your anti-virus software will run
just fine, consume lots of CPU time and keep your hard disks busy, but it
will be pretty much guaranteed to never find anything (which might be what
you are actually hoping for, but it would also be very much meaningless).
If it does work, remember that you want to scan only the pool, not the pc/
directory structure. Since BackupPC conveniently only stores the data once,
you only need to scan it once.

Assuming you are *not* scanning the backups:
Be sure to exclude the backups from the AV scan - it would take forever
and probably be quite pointless.

As a side note, the nightly job you seem to be referring to -
BackupPC_nightly - is not "pooling and compression", it's more like
"housekeeping and statistics". Compression is done during backups.
Pooling is done during backups for existing files (i.e. where an
identical file is known to BackupPC) and during BackupPC_link for
new files.

Hope that helps.

Regards,
Holger

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Is this software abandoned? Who is packager Bernard Johnson?

[Kenneth Porter]

Here's the Fedora package page for BackupPC. It looks like bjohnson is 
still listed as the packager.

https://admin.fedoraproject.org/pkgdb/package/rpms/BackupPC/

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Is this software abandoned? Who is packager Bernard Johnson?

[Kenneth Porter]

Check the list archives. There's been a huge amount of activity recently 
on forking the project. Also check the -devel list archives.

For Fedora, check Bugzilla to see who's the contact.

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Is this software abandoned? Who is packager Bernard Johnson?

[Carl Wilhelm Soderstrom]

On 06/01 05:52 , Benjamin Lefoul wrote:
> Is there a migration to GitHub in progress? I left a note there: 
> https://github.com/backuppc/backuppc/issues/19

Yes, there is a migration to Github in progress, people are trying to
revitalize the project.

I know nothing about the package for the Fedora project. I and my company
switched away from Red Hat based distros well over a decade ago and I don't
miss them.

-- 
Carl Soderstrom
Systems Administrator
Real-Time Enterprises
www.real-time.com

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] FTPS support

[Jure Špik]

Hi, thank you all for ideas.

I liked the sftp mount idea best, but it turns out sftp is not the same as
ftps :)
This answer from
http://serverfault.com/questions/33747/mount-a-ftps-server-to-a-linux-directory
 made me use  curlftpfs.

I could successfully list remote files after using

curlftpfs ftp://user:p...@ftp.host.com/ /mnt/ftp -o
allow_other,ssl,no_verify_peer -v

Had to use no_verify_peer since the certificate is self-signed...


​While researching this I also found Net::FTPSSL

​ ​but will not look into that as curlftpfs method works.

Thank you again

Jure
​
--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Win 10 issue with NT_STATUS_BAD_NETWORK_NAME

[Bowie Bailey]

On 6/1/2016 11:56 AM, Jeff Boyce wrote:
>
> On 5/31/2016 4:28 PM, Holger Parplies wrote:
>> Hi,
>>
>> Jeff Boyce wrote on 2016-05-31 13:40:20 -0700 [Re: [BackupPC-users] Win 10 
>> issue with NT_STATUS_BAD_NETWORK_NAME]:
>>> On 5/26/2016 1:51 PM, Jeff Boyce wrote:
>>> [..]
>>> Ok I solved all my backup issues, so this post will give a summary of
>>> what worked for me and hopefully help others.
>>> [...]
>>> I was unable to connect to the default C$ share for conducting the
>>> backup.  [...]
>>>
>>> So in *almost* all of my desktop boxes that are backing up to BackupPC
>>> they are using these same settings and the Users share.  I am not sure
>>> what is going on internally in the Windows networking that doesn't allow
>>> smbclient to connect to the default C$ share, but I am sure that
>>> something within Windows is stopping it.
>> stupid question: is it possible to connect to an administrative share with
>> user (i.e. non-admin) credentials?
> For all of my office Windows desktop systems the users are setup as
> administrative users, so I don't have any non-admin users to test what I
> think you are asking.  robynr is an admin user on the Win10 box below.
> But as shown below I list the shares on a new Win10 box, then access the
> Users share, then try accessing the ADMIN$ share with the same
> credentials.  I get the same results when trying the C$ share as with
> the ADMIN$ share shown below.  But I am not sure if this is where you
> were going with your question.
>
> [root@bacteria ~]# su -s /bin/bash backuppc
> bash-4.1$
> bash-4.1$ smbclient -L rdr-lat6540 -U robynr
> Enter robynr's password:
> Domain=[RDR-LAT6540] OS=[Windows 10 Pro 10586] Server=[Windows 10 Pro 6.3]
>
>   Sharename   Type  Comment
>   -     ---
>   ADMIN$  Disk  Remote Admin
>   C$  Disk  Default share
>   IPC$IPC   Remote IPC
>   print$  Disk  Printer Drivers
>   Users   Disk
> Domain=[RDR-LAT6540] OS=[Windows 10 Pro 10586] Server=[Windows 10 Pro 6.3]
>
>   Server   Comment
>   ----
>
>   WorkgroupMaster
>   ----
> bash-4.1$
> bash-4.1$ smbclient //rdr-lat6540/Users -U robynr
> Enter robynr's password:
> Domain=[RDR-LAT6540] OS=[Windows 10 Pro 10586] Server=[Windows 10 Pro 6.3]
> smb: \> dir
> .  DR0  Tue Mar  1 20:34:09 2016
> .. DR0  Tue Mar  1 20:34:09 2016
> Default   DHR0  Tue Feb  9 14:30:16 2016
> Default.migratedD0  Tue Feb  9 14:27:54 2016
> desktop.ini   AHS  174  Fri Oct 30 00:21:27 2015
> Public DR0  Tue Feb  9 14:41:32 2016
> robynr  D0  Tue May 31 07:54:32 2016
>
>   57635 blocks of size 4194304. 28478 blocks available
> smb: \> quit
> bash-4.1$
> bash-4.1$ smbclient //rdr-lat6540/ADMIN$ -U robynr
> Enter robynr's password:
> Domain=[RDR-LAT6540] OS=[Windows 10 Pro 10586] Server=[Windows 10 Pro 6.3]
> tree connect failed: NT_STATUS_ACCESS_DENIED
> bash-4.1$

I don't think ADMIN$ is a normal file share.  You should be using C$ to 
get access to the files for backup.  What happens when you try to 
connect to C$?

-- 
Bowie

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Backup PC on SSL

[Michael Stowe]

On 2016-06-01 06:53, FLORENT Philippe wrote:
> It is a fresh unmodified debian/apache install

I note that fresh, unmodified debian/apache installations do not come 
with SSL configured, nor do they come with SSL certificates, naturally.  
If you want to use SSL, of course, you'll need to set this up yourself.

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Win 10 issue with NT_STATUS_BAD_NETWORK_NAME

[Jeff Boyce]

On 5/31/2016 4:28 PM, Holger Parplies wrote:
> Hi,
>
> Jeff Boyce wrote on 2016-05-31 13:40:20 -0700 [Re: [BackupPC-users] Win 10 
> issue with NT_STATUS_BAD_NETWORK_NAME]:
>> On 5/26/2016 1:51 PM, Jeff Boyce wrote:
>> [..]
>> Ok I solved all my backup issues, so this post will give a summary of
>> what worked for me and hopefully help others.
>> [...]
>> I was unable to connect to the default C$ share for conducting the
>> backup.  [...]
>>
>> So in *almost* all of my desktop boxes that are backing up to BackupPC
>> they are using these same settings and the Users share.  I am not sure
>> what is going on internally in the Windows networking that doesn't allow
>> smbclient to connect to the default C$ share, but I am sure that
>> something within Windows is stopping it.
> stupid question: is it possible to connect to an administrative share with
> user (i.e. non-admin) credentials?
For all of my office Windows desktop systems the users are setup as 
administrative users, so I don't have any non-admin users to test what I 
think you are asking.  robynr is an admin user on the Win10 box below.   
But as shown below I list the shares on a new Win10 box, then access the 
Users share, then try accessing the ADMIN$ share with the same 
credentials.  I get the same results when trying the C$ share as with 
the ADMIN$ share shown below.  But I am not sure if this is where you 
were going with your question.

[root@bacteria ~]# su -s /bin/bash backuppc
bash-4.1$
bash-4.1$ smbclient -L rdr-lat6540 -U robynr
Enter robynr's password:
Domain=[RDR-LAT6540] OS=[Windows 10 Pro 10586] Server=[Windows 10 Pro 6.3]

 Sharename   Type  Comment
 -     ---
 ADMIN$  Disk  Remote Admin
 C$  Disk  Default share
 IPC$IPC   Remote IPC
 print$  Disk  Printer Drivers
 Users   Disk
Domain=[RDR-LAT6540] OS=[Windows 10 Pro 10586] Server=[Windows 10 Pro 6.3]

 Server   Comment
 ----

 WorkgroupMaster
 ----
bash-4.1$
bash-4.1$ smbclient //rdr-lat6540/Users -U robynr
Enter robynr's password:
Domain=[RDR-LAT6540] OS=[Windows 10 Pro 10586] Server=[Windows 10 Pro 6.3]
smb: \> dir
   .  DR0  Tue Mar  1 20:34:09 2016
   .. DR0  Tue Mar  1 20:34:09 2016
   Default   DHR0  Tue Feb  9 14:30:16 2016
   Default.migratedD0  Tue Feb  9 14:27:54 2016
   desktop.ini   AHS  174  Fri Oct 30 00:21:27 2015
   Public DR0  Tue Feb  9 14:41:32 2016
   robynr  D0  Tue May 31 07:54:32 2016

 57635 blocks of size 4194304. 28478 blocks available
smb: \> quit
bash-4.1$
bash-4.1$ smbclient //rdr-lat6540/ADMIN$ -U robynr
Enter robynr's password:
Domain=[RDR-LAT6540] OS=[Windows 10 Pro 10586] Server=[Windows 10 Pro 6.3]
tree connect failed: NT_STATUS_ACCESS_DENIED
bash-4.1$

>> [...] The exception is my own desktop system; BackupPC is using the
>> default C$ share without any problem.
> Which user are you using to connect in this case? Is that user a member of
> a privileged group?
In the case of my own desktop, jeffb is also setup as the administrative 
user on the Win7 box.  Using the same procedures as above I can connect 
to the Users share.  But in this case I can also connect to the C$ 
share.  I also tested the F$ and G$ shares listed and could connect and 
list their directories also.  I could also connect to the IPC$ share, 
but then got an NT_STATUS_ACCESS_DENIED response when trying to get a 
directory listing.

bash-4.1$ smbclient -L jab-prec3610 -U jeffb
Enter jeffb's password:
Domain=[JAB-PREC3610] OS=[Windows 7 Professional 7601 Service Pack 1] 
Server=[Windows 7 Professional 6.1]

 Sharename   Type  Comment
 -     ---
 ADMIN$  Disk  Remote Admin
 C$  Disk  Default share
 F$  Disk  Default share
 G$  Disk  Default share
 IPC$IPC   Remote IPC
 Users   Disk
Domain=[JAB-PREC3610] OS=[Windows 7 Professional 7601 Service Pack 1] 
Server=[Windows 7 Professional 6.1]

 Server   Comment
 ----

 WorkgroupMaster
 ----
bash-4.1$
bash-4.1$ smbclient //jab-prec3610/Users -U jeffb
Enter jeffb's password:
Domain=[JAB-PREC3610] OS=[Windows 7 Professional 7601 Service Pack 1] 
Server=[Windows 7 Professional 6.1]
smb: \> dir
   .  DR0  Thu Apr 30 22:57:03 2015
   .. DR0  Thu Apr 30 22:57:03 2015
   All Users   

Re: [BackupPC-users] Backup PC on SSL

[FLORENT Philippe]

It is a fresh unmodified debian/apache install

-Original Message-
From: Dmitry Katsubo [mailto:dm...@mail.ru] 
Sent: mardi 31 mai 2016 22:54
To: General list for user discussion, questions and support
Subject: Re: [BackupPC-users] Backup PC on SSL

On 2016-05-31 11:06, FLORENT Philippe wrote:
> 
> It's the defaut config file after install, the problem is that it's a 
> config, not a virtual host And I have no ide how to set that up
> 
> Ssl seems to work
> 
> CONNECTED(0003)
> 140357952337552:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown 
> protocol:s23_clnt.c:795:

This error message means that your server is not talking SSL over the port you 
used to connect. For comparison try the following:

openssl s_client -connect google.com:80
-- this will result the same error you provided in your email.

openssl s_client -connect google.com:443
-- this will result completely different picture; your server should return 
something similar.

Try adding -debug option (openssl s_client -debug -connect ...) -- if you see 
something like this:

read from 0x839e558 [0x83a47f0] (7 bytes => 7 (0x7))
 - 48 54 54 50 2f 31 2e  HTTP/1.

then you server is talking plain HTTP.

Try to start from the beginning: check that ssl module is loaded (apache2ctl 
-M) and enabled, grep for 443 (should find "Listen 443"), check logs, etc.

Anyway this is not BackupPC problem.

> ---
> no peer certificate available
> ---
> No client certificate CA names sent
> ---
> SSL handshake has read 7 bytes and written 289 bytes
> ---
> New, (NONE), Cipher is (NONE)
> Secure Renegotiation IS NOT supported
> Compression: NONE
> Expansion: NONE

--
With best regards,
Dmitry

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic 
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning 
reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

--
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity 
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/