Re: [BackupPC-users] Trouble setting up backup to a Windows host
Hi Sorin, > >machinename -fstype=cifs,ro,username=$username,password=$password > >://machinename/C\$ > > > No I didn't. Will try. Thanks for the hint! Perhaps you can try the command line version, without specifying the password: mount.cifs //starforge/c$ /windows/starforge \ -o username=administra...@domain mount.cifs will prompt you for a password - lower in this thread you & Max touched upon the possibility that the credentials are failing. mount.cifs will not succeed if your username & password are incorrect, and if there is a firewall on the Windows system, it will also not succeed. Another thing you can try is to create a new share on the Windows system, ensure your user has read access both on the share permissions and the filesystem permissions (likely if you are using the administrator account), and repeat the above mount.cifs command against the test share. If things continue not to work, then I'd have to ask you for: - version of mount.cifs - Windows OS version and suggest you try updating to the latest version of Samba: http://ftp.sernet.de/pub/samba/3.5/rhel/5/sernet-samba.repo and see if things start working. Regards, Chris Bennett cgb -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Trouble setting up backup to a Windows host
>-Original Message- >From: Max Hetrick [mailto:maxhetr...@verizon.net] >Sent: Monday, March 15, 2010 4:16 PM >To: General list for user discussion, questions and support >Subject: Re: [BackupPC-users] Trouble setting up backup to a Windows host > >Sorin Srbu wrote: > >> Status code returned 0xc06d NT_STATUS_LOGON_FAILURE >> CIFS VFS: Send error in SessSetup = -13 >> CIFS VFS: cifs_mount failed w/return code = -13 >> Status code returned 0xc06d NT_STATUS_LOGON_FAILURE >> CIFS VFS: Send error in SessSetup = -13 >> CIFS VFS: cifs_mount failed w/return code = -13 >> Status code returned 0xc06d NT_STATUS_LOGON_FAILURE >> CIFS VFS: Send error in SessSetup = -13 >> CIFS VFS: cifs_mount failed w/return code = -13 >> Status code returned 0xc06d NT_STATUS_LOGON_FAILURE >> CIFS VFS: Send error in SessSetup = -13 >> CIFS VFS: cifs_mount failed w/return code = -13 >> >> Would this indicate the mounting didn't work after all, even though the mount >> command shows it as mounted? > > From what I understand, that sounds like it's rejecting the >authentication passed to it, not accepting the credentials the unix >machine is passing. > >Are you running a domain? Yes I do. A regular plain vanilla Win2k3-domain. Does this BPC-solution by any chance require that passwords are sent in clear text? I'm grasping for straws... >Silly question, but is there a Windows firewall involved here? Nope, no firewalls involved on the Windows side. Iptables on the linux side is setup to accept all traffic (in and out) on this particular subnet. I've actually tried to run this thing with iptables off as well, with the same result. -- /Sorin smime.p7s Description: S/MIME cryptographic signature -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Trouble setting up backup to a Windows host
>-Original Message- >From: Chris Bennett [mailto:ch...@ceegeebee.com] >Sent: Tuesday, March 16, 2010 8:09 AM >To: sorin.s...@orgfarm.uu.se; General list for user discussion, questions and >support >Subject: Re: [BackupPC-users] Trouble setting up backup to a Windows host > >Perhaps you can try the command line version, without specifying the >password: > >mount.cifs //starforge/c$ /windows/starforge \ > -o username=administra...@domain >[...] Was trying to retrace my steps and do some trouble-shooting, and got to samba. Googling a bit I found this page: http://www.comptechdoc.org/os/linux/manual4/samba.html And this little piece of information; "For windows 2000 and XP: Disable Domain member: Digitally encrypt or sign secure channel data Disable Domain member: Digitally sign secure channel data (when possible)" As I understand it, this implies that samba does seem to need clear text passwords. Unfortunately I can't, or actually am not allowed, to use the more lax security setting in Windows, as per instrucations from the university IT-department. As far as I can see, this kinda' puts an end to using BPC for backing up Windows-machines. Or...? -- /Sorin smime.p7s Description: S/MIME cryptographic signature -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Trouble setting up backup to a Windows host
Hi Sorin, > Was trying to retrace my steps and do some trouble-shooting, and got to > samba. > Googling a bit I found this page: > > http://www.comptechdoc.org/os/linux/manual4/samba.html > > And this little piece of information; > > "For windows 2000 and XP: > > Disable Domain member: Digitally encrypt or sign secure channel data > Disable Domain member: Digitally sign secure channel data (when possible)" > > As I understand it, this implies that samba does seem to need clear text > passwords. Unfortunately I can't, or actually am not allowed, to use the more > lax security setting in Windows, as per instrucations from the university > IT-department. > > As far as I can see, this kinda' puts an end to using BPC for backing up > Windows-machines. Or...? Nope - trust me, it works... The doco you are reading is a) old b) irrelevant to what you are trying to achieve. It is referring to accessing a samba server from Windows. Can you pleasee the mount.cifs command I specified in my previous email? You need to get some form of file level access working before you worry about autofs. You could also try using smbclient: # list shared smbclient -L servername -U u...@domain # connect to a share and give you an interactive shell to browse smbclient //servername/share -U u...@domain Report back how these tests goes (preferablly mount.cifs since that's how you need it to work in the end). Regards, Chris Bennett cgb -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Trouble setting up backup to a Windows host
>-Original Message- >From: Chris Bennett [mailto:ch...@ceegeebee.com] >Sent: Tuesday, March 16, 2010 12:14 PM >To: sorin.s...@orgfarm.uu.se; General list for user discussion, questions and >support >Subject: Re: [BackupPC-users] Trouble setting up backup to a Windows host > >Nope - trust me, it works... The doco you are reading is >[...] >Can you pleasee the mount.cifs command I specified in my previous >email? Ok, I trust you. ;-) Tried the c$-mount as well as a new shared folder. On both I get "mount error: can not change directory into mount target /windows/starforge". >You need to get some form of file level access working before you >worry about autofs. You could also try using smbclient: > > # list shared > smbclient -L servername -U u...@domain Works. Kinda'. It asks for a password. After entering it, I get a " session setup failed: NT_STATUS_LOGON_FAILURE". > # connect to a share and give you an interactive shell to browse > smbclient //servername/share -U u...@domain Same as above. >Report back how these tests goes (preferablly mount.cifs since that's >how you need it to work in the end). As for version of mount.cifs, I tried both --version and -V, both gave me no version number for some reason, just the general short help screen. Mount is "util-linux 2.13-pre7", if that helps? Thanks for your help so far! -- /Sorin smime.p7s Description: S/MIME cryptographic signature -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Trouble setting up backup to a Windows host
Sorin Srbu wrote: > >> From what I understand, that sounds like it's rejecting the >> authentication passed to it, not accepting the credentials the unix >> machine is passing. >> >> Are you running a domain? > > Yes I do. A regular plain vanilla Win2k3-domain. Is your smb.conf set up to match? I'm not sure if mounting via cifs reads it, but for smbclient you need to have at least the domain and password server set in there, and maybe security=server. If this is really Active Directory, it needs to have the domain compatibility mode set or you may need some other settings - and to join the domain. > Does this BPC-solution by any chance require that passwords are sent in > clear text? I'm grasping for straws... I'm not sure plain text is ever used. The choices would be NT LANMAN style hashes or whatever they changed to in win2k3. A samba 3.x version should be able to do both. I don't think the kernel cifs module does kerberos or client signing, though. -- Les Mikesell lesmikes...@gmail.com -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Backups no longer run automatically
Chris Bennett wrote: >> That usually means you have less than 5% of disk space on the pool >> filesystem - or whatever you configured the threshold to be to stop >> running automatically. > > Maybe an email once a day to the admin that this threshold has been > reached, and that backups are no longer being scheduled, could be > implemented? > > Nagios/whatever _should_ be used to let you know that: > - disk space is almost full > - backups are > some age > > But it won't tell you why BackupPC has stopped doing backups - and the > less experienced admin won't immediately know it's because a disk > space threshold has been reached. The 'host summary' web page shows everything at a glance. Look at it once in a while if you care what is happening. And the system will send email after a configurable number of days without backups on a target. Configure what you want there. -- Les Mikesell lesmikes...@gmail.com -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Trouble setting up backup to a Windows host
>-Original Message- >From: Les Mikesell [mailto:lesmikes...@gmail.com] >Sent: Tuesday, March 16, 2010 2:04 PM >To: sorin.s...@orgfarm.uu.se; General list for user discussion, questions and >support >Subject: Re: [BackupPC-users] Trouble setting up backup to a Windows host > >Sorin Srbu wrote: >> >>> From what I understand, that sounds like it's rejecting the >>> authentication passed to it, not accepting the credentials the unix >>> machine is passing. >>> >>> Are you running a domain? >> >> Yes I do. A regular plain vanilla Win2k3-domain. > >Is your smb.conf set up to match? I'm not sure if mounting via cifs reads >it, >but for smbclient you need to have at least the domain and password server >set >in there, and maybe security=server. If this is really Active Directory, it >needs to have the domain compatibility mode set or you may need some other >settings - and to join the domain. With the security set to server I get the error "Failed to join domain: Invalid domain role". If security is set to ADS it asks for a password and I get "Using short domain name..." and " could not connect to server DC.mydomain" and " The user name or password was not correct". >> Does this BPC-solution by any chance require that passwords are sent in >> clear text? I'm grasping for straws... > >I'm not sure plain text is ever used. The choices would be NT LANMAN style >hashes or whatever they changed to in win2k3. A samba 3.x version should be >able to do both. I don't think the kernel cifs module does kerberos or client >signing, though. Just checked the Windows Default Domain Policy to make sure. The LAN Manager Authentication level is set to "Send NTLMv2 response only/Refuse LM & NTLM". This is another enforced policy from the University IT-department. I don't know however if this is a problem for BPC and the authentication. Maybe somebody else knows. -- /Sorin smime.p7s Description: S/MIME cryptographic signature -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Trouble setting up backup to a Windows host
On 3/16/2010 9:32 AM, Sorin Srbu wrote: >> If this is really Active Directory, it >> needs to have the domain compatibility mode set or you may need some other >> settings - and to join the domain. > > With the security set to server I get the error "Failed to join domain: > Invalid domain role". If security is set to ADS it asks for a password and I > get "Using short domain name..." and " could not connect to server > DC.mydomain" and " The user name or password was not correct". I believe you need administrator credentials for the initial join of a machine to a domain. After the join, you can log in as a normal user. But, if you are doing backups you'll need to be admin or in the backup group anyway. >>> Does this BPC-solution by any chance require that passwords are sent in >>> clear text? I'm grasping for straws... >> >> I'm not sure plain text is ever used. The choices would be NT LANMAN style >> hashes or whatever they changed to in win2k3. A samba 3.x version should be >> able to do both. I don't think the kernel cifs module does kerberos or client >> signing, though. > > Just checked the Windows Default Domain Policy to make sure. The LAN Manager > Authentication level is set to "Send NTLMv2 response only/Refuse LM& NTLM". > This is another enforced policy from the University IT-department. I don't > know however if this is a problem for BPC and the authentication. Maybe > somebody else knows. This should work with smbclient - not sure about the kernel cifs module. If you aren't able to make smb authentication work, you might try cwrsync - I think in the latest versions running rsync under sshd actually works. -- Les Mikesell lesmikes...@gmail.com -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Trouble setting up backup to a Windows host
>-Original Message- >From: Les Mikesell [mailto:lesmikes...@gmail.com] >Sent: Tuesday, March 16, 2010 4:02 PM >To: backuppc-users@lists.sourceforge.net >Subject: Re: [BackupPC-users] Trouble setting up backup to a Windows host > >> With the security set to server I get the error "Failed to join domain: >> Invalid domain role". If security is set to ADS it asks for a password and I >> get "Using short domain name..." and " could not connect to server >> DC.mydomain" and " The user name or password was not correct". > >I believe you need administrator credentials for the initial join of a >machine to a domain. After the join, you can log in as a normal user. >But, if you are doing backups you'll need to be admin or in the backup >group anyway. I entered a domain admin-account for the join, the only account(group) allowed to join computers to the domain. >>> I'm not sure plain text is ever used. The choices would be NT LANMAN style >>> hashes or whatever they changed to in win2k3. A samba 3.x version should be >>> able to do both. I don't think the kernel cifs module does kerberos or client >>> signing, though. >> >> Just checked the Windows Default Domain Policy to make sure. The LAN >Manager >> Authentication level is set to "Send NTLMv2 response only/Refuse LM& NTLM". >> This is another enforced policy from the University IT-department. I don't >> know however if this is a problem for BPC and the authentication. Maybe >> somebody else knows. > >This should work with smbclient - not sure about the kernel cifs module. > If you aren't able to make smb authentication work, you might try >cwrsync - I think in the latest versions running rsync under sshd >actually works. I'll check tomorrow morning and get back to the list. Workday's almost over here, and one does get tired of trying this and that to get things going. I really appreciate the help you all are giving me on this matter; thanks! -- /Sorin smime.p7s Description: S/MIME cryptographic signature -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Trouble setting up backup to a Windows host
Les Mikesell wrote: > This should work with smbclient - not sure about the kernel cifs module. > If you aren't able to make smb authentication work, you might try > cwrsync - I think in the latest versions running rsync under sshd > actually works. > I'm mounting shares inside a domain just fine, but I'm also mounting these shares at home on a Windows machine where I have no domain running. I'm just passing the local administrator username and password from BackupPC. The only issue I had was the Windows firewall not allowing this traffic to pass. Regards, Max -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Trouble setting up backup to a Windows host
On 3/16/2010 10:45 AM, Max Hetrick wrote: > >> This should work with smbclient - not sure about the kernel cifs module. >>If you aren't able to make smb authentication work, you might try >> cwrsync - I think in the latest versions running rsync under sshd >> actually works. >> > > I'm mounting shares inside a domain just fine, but I'm also mounting > these shares at home on a Windows machine where I have no domain > running. I'm just passing the local administrator username and password > from BackupPC. The only issue I had was the Windows firewall not > allowing this traffic to pass. Yes, that should work - the piece I'm not sure the kernel module handles yet is where AD requires kerboros authentication or client signing as it can in win2k3 server and later. That has been added to the current samba user level app but I don't think the kernel module can do it unless it has been added very recently. -- Les Mikesell lesmikes...@gmail.com -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
[BackupPC-users] cwRsync patch?
I see there is a patch for cwRsync that makes it use pipes instead of socketpairs. Is anyone using that with backuppc and if so, is it better? -- Les Mikesell lesmikes...@gmail.com -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Problem with key generation in Ubuntu 8.04 (LTS)
On 03/16 02:18 , Luis Paulo wrote: > I don't know how to restrict with ssh what commands backuppc user can run as > root, that's why I use visudo/sudoers Here's an example authorized_keys file with restrictions on what command may be run. This is how I invoke sudo; by putting this in the .ssh directory of a new user called 'rsyncbakup' or the like. Note that this all needs to be on one line, with no line breaks; and of course the actual key has been clobbered with 'A's. no-port-forwarding,no-X11-forwarding,no-agent-forwarding,command="sudo /usr/bin/rsync --server --sender -logDtpr --exclude='/proc' --exclude='/mnt' --exclude='/sys' --exclude='/tmp' --exclude='/var/tmp' --exclude='/var/cache/apt/archives' --exclude='/var/spool/exim' --exclude='/var/log/' --delete --numeric-ids --block-size=2048 . /" ssh-dss u...@example.tld -- Carl Soderstrom Systems Administrator Real-Time Enterprises www.real-time.com -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] cwRsync patch?
- "Les Mikesell" wrote: > I see there is a patch for cwRsync that makes it use pipes instead of > socketpairs. Is anyone using that with backuppc and if so, is it better? > > -- I was thinking of going cwrsync, then I decided to just install the latest cygwin with ssh server and rsync, and it just worked. I got a bit of a speed increase over smbclient. Gerald -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Trouble setting up backup to a Windows host
> Is your smb.conf set up to match? I'm not sure if mounting via cifs reads > it, > but for smbclient you need to have at least the domain and password server > set > in there, and maybe security=server. If this is really Active Directory, it > needs to have the domain compatibility mode set or you may need some other > settings - and to join the domain. There is no need to change smb.conf, and no need to join the domain. And kerberos is not used without the option security=krb5. Ad-hoc cifs mounts to Windows domain connected systems (either DC's or file servers that are part of the domain) have worked many times for me. We just need to work out why Sorin is getting access denied. I'm going to reply to thread above. -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Trouble setting up backup to a Windows host
Hello again :) > Tried the c$-mount as well as a new shared folder. On both I get "mount > error: > can not change directory into mount target /windows/starforge". Did the mount.cifs command succeed after you entered the password though, or did you get the error while running mount.cifs? > Works. Kinda'. It asks for a password. After entering it, I get a " session > setup failed: NT_STATUS_LOGON_FAILURE". [..] > As for version of mount.cifs, I tried both --version and -V, both gave me no > version number for some reason, just the general short help screen. > Oops, I get that too in testing. For smbclient, you have to specify the domain seperately (or try it without the domain): smbclient -L starforge -U administrator -W domain For mount.cifs, You can add --verbose to get a little bit more info [r...@linux mnt]# mount.cifs //mydc1.domain.local/c$ /mnt/test -o username=administra...@domain --verbose parsing options: username=administra...@domain Password: mount.cifs kernel mount options unc=//mydc1.domain.local\c$,ip=10.1.1.10,pass=mypass,ver=1,username=administra...@domain [r...@linux mnt]# ls test/Temp Samsung_UPD > Mount is "util-linux 2.13-pre7", if that helps? [r...@linux mnt]# rpm -qf `which mount.cifs` samba-client-3.0.28-0.el4.9 > Thanks for your help so far! No problems, hopefully we'll get there :) Regards, Chris Bennett cgb -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Problem with key generation in Ubuntu 8.04 (LTS)
Thanks, Carl I'll have to look a little better to it. I kind of undestand the no-port-forwarding,no-X11-forwarding,no-agent-forwarding part, the rsync command, the key (not sure about what is dss), and at the end the backuppc server name, I think I'm looking again to the sshd man, and I'll try it Note: This may seem a bit off topic, but we are still talking about ssh and key generation on BackupPC, now mostly about security options, right? Regards Luis On Tue, Mar 16, 2010 at 4:51 PM, Carl Wilhelm Soderstrom < chr...@real-time.com> wrote: > On 03/16 02:18 , Luis Paulo wrote: > > I don't know how to restrict with ssh what commands backuppc user can run > as > > root, that's why I use visudo/sudoers > > Here's an example authorized_keys file with restrictions on what command > may be > run. This is how I invoke sudo; by putting this in the .ssh directory of a > new user called 'rsyncbakup' or the like. Note that this all needs to be on > one line, with no line breaks; and of course the actual key has been > clobbered with 'A's. > > no-port-forwarding,no-X11-forwarding,no-agent-forwarding,command="sudo > /usr/bin/rsync --server --sender -logDtpr --exclude='/proc' --exclude='/mnt' > --exclude='/sys' --exclude='/tmp' --exclude='/var/tmp' > --exclude='/var/cache/apt/archives' --exclude='/var/spool/exim' > --exclude='/var/log/' --delete --numeric-ids --block-size=2048 . /" ssh-dss > > u...@example.tld > > > -- > Carl Soderstrom > Systems Administrator > Real-Time Enterprises > www.real-time.com > > > -- > Download Intel® Parallel Studio Eval > Try the new software tools for yourself. Speed compiling, find bugs > proactively, and fine-tune applications for parallel performance. > See why Intel Parallel Studio got high marks during beta. > http://p.sf.net/sfu/intel-sw-dev > ___ > BackupPC-users mailing list > BackupPC-users@lists.sourceforge.net > List:https://lists.sourceforge.net/lists/listinfo/backuppc-users > Wiki:http://backuppc.wiki.sourceforge.net > Project: http://backuppc.sourceforge.net/ > -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Problem with key generation in Ubuntu 8.04 (LTS)
On 03/16 09:31 , Luis Paulo wrote: > Note: This may seem a bit off topic, but we are still talking about ssh and > key generation on BackupPC, now mostly about security options, right? It's related to ssh keys certainly. Are you wondering if it's time to change the message subject? -- Carl Soderstrom Systems Administrator Real-Time Enterprises www.real-time.com -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Backups no longer run automatically
> The 'host summary' web page shows everything at a glance. Look at
> it once in a while if you care what is happening.
I was just curious how the unfamiliar admin would be able to determine
backups have stopped. From what I can tell, the host summary does not
report if backups have stopped due to DfMaxUsagePct being exceeded.
> And the system will send email after a configurable number of days
> without backups on a target. Configure what you want there.
But I was able to find a section in bin/BackupPC_sendEmail which will
report this particular case:
if ( $Info{DUDailySkipHostCntPrev} > 0 ) {
my $n = $Info{DUDailySkipHostCntPrev};
my $m = $Conf{DfMaxUsagePct};
$adminMesg .=
Re: [BackupPC-users] Backups no longer run automatically
On 3/16/2010 6:04 PM, Chris Bennett wrote:
>> The 'host summary' web page shows everything at a glance. Look at
>> it once in a while if you care what is happening.
>
> I was just curious how the unfamiliar admin would be able to determine
> backups have stopped. From what I can tell, the host summary does not
> report if backups have stopped due to DfMaxUsagePct being exceeded.
It doesn't explicitly show why backups didn't run, but if you look down
the 'Last Backup (days)' column, the numbers should all be less than one
if you have daily backups scheduled. If it is more than a day without a
failure mentioned in the 'Last Attempt', it means that it didn't start
as scheduled, and that's about the only thing besides the server or
backuppc service being off that would prevent it. So then you look at
the top of the page where it shows the pool filesystem use.
>> And the system will send email after a configurable number of days
>> without backups on a target. Configure what you want there.
>
> But I was able to find a section in bin/BackupPC_sendEmail which will
> report this particular case:
>
>if ( $Info{DUDailySkipHostCntPrev}> 0 ) {
>my $n = $Info{DUDailySkipHostCntPrev};
>my $m = $Conf{DfMaxUsagePct};
>$adminMesg .=$TopDir was too full. The threshold in the
>configuration file is $m%, while yesterday the file system was
>up to $Info{DUDailyMaxPrev}% full. Please find more space on the file
> system,
>or reduce the number of full or incremental backups that we keep.
>
>EOF
>}
>
> So perhaps the host summary or Server Status page could communicate
> that DfMaxUsagePct has been exceeded as well as the raw numbers which
> it currently reports...
Didn't know that was even there. Maybe there's a bug that keeps it from
being triggered.
>Pool file system was recently at 90% (3/17 09:12), today's max is
>90% (3/17 01:00) and yesterday's max was 90%.
>
> I'm just trying to think how it could be clearer, so users don't need
> to email the support list :)
Well there are plenty of other things that can go wrong - as you already
understand since you are making backups. So it's a good idea to peek at
that host summary page regularly anyway.
--
Les Mikesell
lesmikes...@gmail.com
--
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Backups no longer run automatically
> It doesn't explicitly show why backups didn't run, but if you look down > the 'Last Backup (days)' column, the numbers should all be less than one > if you have daily backups scheduled. If it is more than a day without a > failure mentioned in the 'Last Attempt', it means that it didn't start > as scheduled, and that's about the only thing besides the server or > backuppc service being off that would prevent it. So then you look at > the top of the page where it shows the pool filesystem use. I'm just thinking out loud how BackupPC could be more user-friendly to the less experienced admin so they don't get frustrated and email the list, not understanding why backup scheduling is failing. It's a very explicit condition, that the Server Status and/or Host Summary page could easily report on and would make the admins life a little easier. If there's one thing I hate about proprietary backup products it's those little things that you have no power to change and make the product a little less intuitive - at least with BPC, we can fix those less-intuitive parts. Anyway, I might put together a patch to report on this - I'm not sure how active the 3.X release cycle is given there's lots of work going into 4, but perhaps someone will use it... :) > Didn't know that was even there. Maybe there's a bug that keeps it from > being triggered. :) Thanks for the conversation - BPC is a great engine and some of these more subtle usability could be ironed out to make it have a broader appeal (and enjoyable to use..) Regards, Chris Bennett cgb -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Problem with key generation in Ubuntu 8.04 (LTS)
First, thank you again for showing how to restrict commands with ssh. It's a very tight solution. you just do ssh and the command runs. Ok. Regarding the previous talk, you still need to allow the backup user to sudo with visudo, right? If you want automated backups, that is. And phraseless keys if you don't use an agent, isn't it? About the topic, I guess we could keep this for increasing security for ssh with phraseless keys until it goes, but yes, I was just wondering. I'll start another topic for using an agent on a server without X. That's because, as I remember, when I had backuppc server on a machine with X, it was quite easy to make the gnome-agent send the key. The only thing was the need to insert a key on boot, what could be a problem on a power event. I never was able to do that with ssh-agent. :( Regards Luis On Tue, Mar 16, 2010 at 10:12 PM, Carl Wilhelm Soderstrom < chr...@real-time.com> wrote: > On 03/16 09:31 , Luis Paulo wrote: > > Note: This may seem a bit off topic, but we are still talking about ssh > and > > key generation on BackupPC, now mostly about security options, right? > > It's related to ssh keys certainly. Are you wondering if it's time to > change the > message subject? > > -- > Carl Soderstrom > Systems Administrator > Real-Time Enterprises > www.real-time.com > > > -- > Download Intel® Parallel Studio Eval > Try the new software tools for yourself. Speed compiling, find bugs > proactively, and fine-tune applications for parallel performance. > See why Intel Parallel Studio got high marks during beta. > http://p.sf.net/sfu/intel-sw-dev > ___ > BackupPC-users mailing list > BackupPC-users@lists.sourceforge.net > List:https://lists.sourceforge.net/lists/listinfo/backuppc-users > Wiki:http://backuppc.wiki.sourceforge.net > Project: http://backuppc.sourceforge.net/ > -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
[BackupPC-users] How to use ssh-agent on a server without X?
I now use ssh with phraseless keys to do my backups on a server without X. As I remember, when I had backuppc server on a machine with X, it was quite easy to make the gnome-agent send the key. The only thing was the need to insert a key on boot, what could be a problem on a power event. I have tryed, but I never was able to do that with ssh-agent. I'll tell you exactly what I am doing in following posts, but can anyone give some help for starters? Thanks Luis -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Problem with key generation in Ubuntu 8.04 (LTS)
On 03/17 01:07 , Luis Paulo wrote: > Regarding the previous talk, you still need to allow the backup user to sudo > with visudo, right? If you want automated backups, that is. correct. something like this in your /etc/sudoers: rsyncbakup ALL= NOPASSWD: /usr/bin/rsync > And phraseless keys if you don't use an agent, isn't it? Correct. -- Carl Soderstrom Systems Administrator Real-Time Enterprises www.real-time.com -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
Re: [BackupPC-users] Problem with key generation in Ubuntu 8.04 (LTS)
Ok. Thanks On Wed, Mar 17, 2010 at 1:37 AM, Carl Wilhelm Soderstrom < chr...@real-time.com> wrote: > On 03/17 01:07 , Luis Paulo wrote: > > Regarding the previous talk, you still need to allow the backup user to > sudo > > with visudo, right? If you want automated backups, that is. > > correct. something like this in your /etc/sudoers: > > rsyncbakup ALL= NOPASSWD: /usr/bin/rsync > > > And phraseless keys if you don't use an agent, isn't it? > > Correct. > > -- > Carl Soderstrom > Systems Administrator > Real-Time Enterprises > www.real-time.com > > > -- > Download Intel® Parallel Studio Eval > Try the new software tools for yourself. Speed compiling, find bugs > proactively, and fine-tune applications for parallel performance. > See why Intel Parallel Studio got high marks during beta. > http://p.sf.net/sfu/intel-sw-dev > ___ > BackupPC-users mailing list > BackupPC-users@lists.sourceforge.net > List:https://lists.sourceforge.net/lists/listinfo/backuppc-users > Wiki:http://backuppc.wiki.sourceforge.net > Project: http://backuppc.sourceforge.net/ > -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev___ BackupPC-users mailing list BackupPC-users@lists.sourceforge.net List:https://lists.sourceforge.net/lists/listinfo/backuppc-users Wiki:http://backuppc.wiki.sourceforge.net Project: http://backuppc.sourceforge.net/
