[Bacula-users] Slow down with MySQL as a backend
Hi folks, I have started testing Bacula and do have a peculiar phenomen. I am using Bacula 1.36.x because it comes with Debian Sarge stable (compiling the current version comes after the first testing phase). The data I use for backup testing is an amount of 550 GB which consists of nearly 2 million files ranging from many thousands of the smallest possible to several 100 files with 2-15 GB each. The first testing I have done with SQLite as db backend. Everything was fine and faster than expected (an average of 200 GB in 5 hours over the network), and there was no slowdown with the trillions of smallest files. Now I have switched to MySQL 4.1 as the db backend. The first 400 GB went strait within 10 hours, but the next 34 GB (consisting of trillions of the smallest ...) took another 20 hours. The backup is still running. There is no error message, nothing unnormal, the backup run has just become very, very slow. There is no network congestion (it is a GBit network with just a few machines and easy to overlook), the machines do nothing else besides backing up, so an external influence can be excluded. AFAIF, the questions are now: - does MySQL 4.1 as db backend slow down the backup process if it comes to lots of smallest files - compared to sqlite? - if yes, is this phenomenon restricted to Bacula version 1.36.x (see below, please)? - is there any other influence I overlook at the moment? Inbetween I had a test running with Debian Testing, MySQL 5 and Bacula 1.38.x. As far as I remember I did not have a slowdown at the "trillion small files" part - but since I had a lot of other problems I did not look on performance intensely. I just remember the test running normally and smoothly into a crash I accidentally fired (the bacula db had 1.7 GB when it suddenly died, then - now it has just over 400 MB). So the next question would be: - if the slowdown does not appear with MySQL 5 and Bacula 1.38.x, is it according to MySQL 5 as a better db backend or to Bacula 1.38 having certain improvements therein? I know I can answer all these questions on my own by simply testing on and on - but since one test (setting up the backup server, optimizing configs, running at least one backup, evaluating the results) takes at least 3 days, I would appreciate any comment and hint on this. Thanks for your patience, folks. Dirk - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] Regress scripts / Multi-drive use
Per Kern's request I've been trying to get the regress scripts set up to find a bug in multi-drive usage. In a 4 tape autochanger library only one tape is being used. Up to and including the 9/9/2006 beta multiple drives were being used for archives in different Pools That seems have been lost in recent versions, with no configuration changes. This is a status report on diagnosing the multi-drive problem. Kern, you mention in your README that running on a production system will overwrite the database, unless a different engine is used. I've set up with sqlite to avoid conflict with the mysql production system. What you didn't note is that the regression tests will overwrite tapes loaded in an autochanger! I saw what it was doing and stopped the test in time. You might want to add a warning about running regress on an autochanger with live archive tapes; it will use what is there without asking which ones to use. I now have a test system running with some scratch tapes. After a couple of hours I have the regress scripts built against sqlite and they are trying to run. The default test tape scripts are hard coded in many different places to run against a single drive 'DDS-4' device setup. I am modifying the various scripts and configurations to put in my 4 drive library configuration. That is slow sledding but is starting to come together. When I have something that looks like like the bug I am seeing I will turn in a bug report. -- -- Michael - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
If I understand correctly, your scenario is something like (I'm making up the IP addresses, so don't read anything into them based on what you have sent previously): Machine A - bacula director Primary IP - x.x.x.10 Bacula IP - x.x.x.11 Machine B - bacula fd Primary IP - x.x.x.20 WWW IP - x.x.x.21 SMTP IP - x.x.x.22 Bacula IP - x.x.x.23 Machine C - bacula sd Primary IP - x.x.x.30 Bacula IP - x.x.x.31 And the problem you have is that when the bacula director talks to machine B and C, the source IP is .10, instead of .11, and when B contacts the sd on C, the source IP is .30 instead of .31. It is possible to control this from an application point of view, but then you restrict yourself a bit. If A was multihomed then you need to know which interface the connection is going out on, especially if one interface is NAT-ed (eg because something on the outside probably isn't going to know what to do with a source address on the inside). It might be more desirable to control this using routing as someone else suggested, eg: On machine A: ip route add x.x.x.23/32 dev eth0 src x.x.x.11 ip route add x.x.x.31/32 dev eth0 src x.x.x.11 On machine B: ip route add x.x.x.11/32 dev eth0 src x.x.x.23 ip route add x.x.x.31/32 dev eth0 src x.x.x.23 On machine B: ip route add x.x.x.11/32 dev eth0 src x.x.x.31 ip route add x.x.x.23/32 dev eth0 src x.x.x.31 Of course if you are using the .11, .23, or .31 addresses for something else then you would need to do it at an application level afterall. I haven't tested this exact situation, but I do use the src parameter to ip regularly hth James - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Bacula BETA 1.39.24.20061002 source + Win32 binaries release to Source Forge
On Thursday 05 October 2006 22:40, Michael Brennen wrote:
> On Thursday 05 October 2006 08:14, Kern Sibbald wrote:
>
> > I have just released Bacula BETA 1.39.24.20061002 source and the Win32
> > binaries to Source Forge. This is very likely to be the last beta release
> > or next to last release before the official 1.40 production release in the
> > second half of November.
>
> Sorry to be a nag... :-/ I just installed 1.39.24 on a windows system and
> brought the director up to current cvs.
If you are referring to bug #683, it is still open.
> I tried a restore and it failed with
> the same insufficient permissions that I have been seeing. The relevant
> configuration pieces are below. The error returned is "No authorization.
> Pool "FishNet-Daily".
>
> The problem seems to be that the Pool in the restore-archive job is not
being
> overridden. In the configuration below, FishNet-Daily is the specified
Pool.
> The client that I am trying to restore is in a different Pool,
Another-Daily.
> If I set the Pool in the restore-archive job to Another-Daily the restore
> works.
>
> Perhaps a second restore Job is needed to specify the different Pool, but
that
> is not described in the docs that I have found so far.
>
> --
>
>-- Michael
>
> JobDefs {
> Name = "DefaultJob"
> Type = Backup
> Schedule = "FishNet-Schedule"
> Storage = Q47
> Messages = Standard
> Priority = 10
> SpoolData = yes
> }
>
> Job {
> Name = "An-Archive"
> JobDefs = "DefaultJob"
> Type = Backup
> Client = "anotherhost.com"
> FileSet = "An-Archive"
> Messages = Standard
> Pool = Another-Daily
> Storage = Q47
> Schedule = "Another-Schedule"
> Maximum Concurrent Jobs = 20
> }
>
> Job {
> Name = "restore-archive"
> Type = Restore
> Client= "somehost.com"
> FileSet = "FishNet-Archive"
> Storage = Q47
> Pool = FishNet-Daily<=== THIS IS NOT BEING OVERRIDDEN
> Messages = Standard
> Where = /backup/bacula/bacula-restores
> }
>
> Client {
> Name = "anotherhost.com"
> Address = anotherhost.com
> FDPort = 9102
> Catalog = FishNet-Catalog
> Password = "??"
> File Retention = 30 days
> Job Retention = 6 months
> AutoPrune = yes
> Maximum Concurrent Jobs = 20
> }
>
> Console {
> Name = anotherhost-user
> Password = "??"
> JobACL = "An-Archive","restore-archive"
> ClientACL = anotherhost.com
> StorageACL = Q47
> ScheduleACL = Another-Schedule
> PoolACL = Another-Monthly
> PoolACL = Another-Weekly
> PoolACL = Another-Daily
> FileSetACL = "An-Archive"
> CatalogACL = "Fishnet-Catalog"
> CommandACL = restore
> }
>
> -
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> ___
> Bacula-users mailing list
> Bacula-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bacula-users
>
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Bacula BETA 1.39.24.20061002 source + Win32 binaries release to Source Forge
On Thursday 05 October 2006 08:14, Kern Sibbald wrote:
> I have just released Bacula BETA 1.39.24.20061002 source and the Win32
> binaries to Source Forge. This is very likely to be the last beta release
> or next to last release before the official 1.40 production release in the
> second half of November.
Sorry to be a nag... :-/ I just installed 1.39.24 on a windows system and
brought the director up to current cvs. I tried a restore and it failed with
the same insufficient permissions that I have been seeing. The relevant
configuration pieces are below. The error returned is "No authorization.
Pool "FishNet-Daily".
The problem seems to be that the Pool in the restore-archive job is not being
overridden. In the configuration below, FishNet-Daily is the specified Pool.
The client that I am trying to restore is in a different Pool, Another-Daily.
If I set the Pool in the restore-archive job to Another-Daily the restore
works.
Perhaps a second restore Job is needed to specify the different Pool, but that
is not described in the docs that I have found so far.
--
-- Michael
JobDefs {
Name = "DefaultJob"
Type = Backup
Schedule = "FishNet-Schedule"
Storage = Q47
Messages = Standard
Priority = 10
SpoolData = yes
}
Job {
Name = "An-Archive"
JobDefs = "DefaultJob"
Type = Backup
Client = "anotherhost.com"
FileSet = "An-Archive"
Messages = Standard
Pool = Another-Daily
Storage = Q47
Schedule = "Another-Schedule"
Maximum Concurrent Jobs = 20
}
Job {
Name = "restore-archive"
Type = Restore
Client= "somehost.com"
FileSet = "FishNet-Archive"
Storage = Q47
Pool = FishNet-Daily<=== THIS IS NOT BEING OVERRIDDEN
Messages = Standard
Where = /backup/bacula/bacula-restores
}
Client {
Name = "anotherhost.com"
Address = anotherhost.com
FDPort = 9102
Catalog = FishNet-Catalog
Password = "??"
File Retention = 30 days
Job Retention = 6 months
AutoPrune = yes
Maximum Concurrent Jobs = 20
}
Console {
Name = anotherhost-user
Password = "??"
JobACL = "An-Archive","restore-archive"
ClientACL = anotherhost.com
StorageACL = Q47
ScheduleACL = Another-Schedule
PoolACL = Another-Monthly
PoolACL = Another-Weekly
PoolACL = Another-Daily
FileSetACL = "An-Archive"
CatalogACL = "Fishnet-Catalog"
CommandACL = restore
}
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] tape positioning error TL892/TZ89 drives
On 5 Oct 2006 at 16:27, Alan Davis wrote:
> I'm getting the following error when I try to put a second full backup
> onto tape. Where do I need to start do diagnose the problem?
>
>
>
> 05-Oct 16:06 athos-sd: FullBackup.2006-10-05_14.32.09 Error: Unable to
> position to end of data on device "Drive-1" (/dev/rmt/1cbn):
> ERR=dev.c:1298 read error on "Drive-1" (/dev/rmt/1cbn). ERR=I/O error.
>
> 05-Oct 16:06 athos-sd: Marking Volume "EJB065" in Error in Catalog.
>
>
>
> The tape device settings are based on Dan Langille's article.
Oh sure! Blame me. ;)
Does your tape unit pass the tape tests?
> I'm also still getting :
>
>
>
> 05-Oct 16:07 athos-sd: Invalid slot=0 defined, cannot autoload Volume.
>
>
>
> Messages when bacula tries to autoload the next tape.
When you did the tape tests, did you try the autochanger test too?
If it all passes, it may be a permission issue. bacula-sd needs to
have permission for all the devices.
> Here's the configuration;
>
>
>
> Solaris 10 x86 w/ reasonably current patch cluster
>
> Bacula 1.39.22
>
> Compaq/HP TL892 library, 2 x TZ89 (DLT8000) drives
>
> mtx 1.3.9
>
> mtx-changer modified to parse "list" correctly and mt output for
> wait_for_drive
>
>
>
> bacula-dir.conf:
>
> Storage {
>
>Name = TL800
>
>Address = labtape.ruckus.com
>
>SDPort = 9103
>
>Password = "27txx87d0BHagkpOSO9VkgpW4qGj0g7j3Yiygth2Q" #
> password for Storage daemon
You might want to change your password now. ;)
Sorry, I don't have time must now to review the rest of the config,
but hopefully any obvious errors will be spotted by someone else.
--
Dan Langille : Software Developer looking for work
my resume: http://www.freebsddiary.org/dan_langille.php
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On 5 Oct 2006 at 21:13, Martin Simmons wrote:
> > On Thu, 05 Oct 2006 14:16:14 -0400, Dan Langille said:
> > Priority: normal
> > Content-description: Mail message body
> >
> > On 5 Oct 2006 at 19:10, Martin Simmons wrote:
> >
> > > > On Thu, 05 Oct 2006 12:52:44 -0400, Dan Langille said:
> > > > Priority: normal
> > > > Content-description: Mail message body
> > > >
> > > > On 5 Oct 2006 at 17:27, James Ray wrote:
> > > >
> > > > > Dan Langille wrote:
> > > > > > On 5 Oct 2006 at 16:42, James Ray wrote:
> > > > > >
> > > > > >> Dan Langille wrote:
> > > > > >>> On 5 Oct 2006 at 16:29, James Ray wrote:
> > > > > >>>
> > > > > Dan Langille wrote:
> > > > > > On 5 Oct 2006 at 15:36, James Ray wrote:
> > > > > >
> > > > > >> Dan Langille wrote:
> > > > > >>> On 5 Oct 2006 at 9:11, Bill Moran wrote:
> > > > > >>>
> > > > > I haven't had time to investigate whether the
> > > > > [FD|SD|DIR]Address sets
> > > > > both the listening and the outgoing address, but a firewall
> > > > > audit is
> > > > > on the TODO list, and when I finally get to it, I'll have to
> > > > > address
> > > > > this for a number of services, not only Bacula.
> > > > > >>> My testing today shows that is sets both listening and
> > > > > >>> outgoing. All
> > > > > >>> I tested was a status command. Nothing more.
> > > > > >>>
> > > > > >>>
> > > > > >> Well, that doesn't seem to be the case on my linux (FC5)
> > > > > >> machine. :(
> > > > > >>
> > > > > >> The LISTEN addresses are right but the address the
> > > > > >> communications spawn
> > > > > >> from is the base system address.
> > > > > >>
> > > > > >> tcp0 0 xxx.xxx.x.49:91010.0.0.0:*
> > > > > >> LISTEN 1009291 3056/bacula-dir
> > > > > >> tcp0 0 xxx.xxx.x.49:91030.0.0.0:*
> > > > > >> LISTEN 0 9239 3011/bacula-sd
> > > > > >>
> > > > > >> Then run a status client command with the following ngrep
> > > > > >> running (I
> > > > > >> shouldn't see any data)
> > > > > >>
> > > > > >> [EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and
> > > > > >> dst host
> > > > > >> xxx.xxx.x.3"
> > > > > >> interface: eth0 (xxx.xxx.x.0/255.255.254.0)
> > > > > >> filter: (ip) and ( src host xxx.xxx.x.48 and dst host
> > > > > >> xxx.xxx.x.3 )
> > > > > >> 114 received, 0 dropped
> > > > > >>
> > > > > >> And I see the following in netstat:
> > > > > >>
> > > > > >> tcp0 0 xxx.xxx.x.48:53286
> > > > > >> xxx.xxx.x.3:9102
> > > > > >> TIME_WAIT 0 0 -
> > > > > >>
> > > > > >> :(
> > > > > > Without the corrresponding configuration file, I cannot comment.
> > > > > >
> > > > > Director{} resource from bacula-dir.conf
> > > > > Director {# define myself
> > > > > Name = bacula-dir
> > > > > DIRport = 9101# where we listen for UA
> > > > > connections
> > > > > QueryFile = "/etc/bacula/query.sql"
> > > > > WorkingDirectory = "/var/bacula/working"
> > > > > PidDirectory = "/var/bacula/run"
> > > > > Maximum Concurrent Jobs = 8
> > > > > Password = # Console password
> > > > > Messages = Daemon
> > > > > DirAddress = xxx.xxx.x.49
> > > > > }
> > > > > >>> This tells the FD that only the given DIR may connect. This does
> > > > > >>> not
> > > > > >>> tell the FD where it should listen. To tell the FD how to
> > > > > >>> listen,
> > > > > >>> here is what I did:
> > > > > >>>
> > > > > >>> FileDaemon {
> > > > > >>> Name = ngaio-fd
> > > > > >>> FDport = 9102
> > > > > >>> WorkingDirectory = /home/bacula/db
> > > > > >>> Pid Directory = /var/run
> > > > > >>> Maximum Concurrent Jobs = 20
> > > > > >>>
> > > > > >>> FDAddress = 192.168.0.68;
> > > > > >>> }
> > > > > >>>
> > > > > >>> This is an extract from the bacula-fd.conf file.
> > > > > >>>
> > > > > >>> The FDAddress directive tells the FD to listen (and answer) only
> > > > > >>> on
> > > > > >>> that given address.
> > > > > >>>
> > > > > >>> I think you know what to do now... ;)
> > > > > >>>
> > > > > >> I think you are confused
> > > > > >> The FD is listening on another machine on the correct IP address,
> > > > > >> its
> > > > > >> the Director that is talking out of the the 'wrong' (for want of a
> > > > > >> better name) IP address.
> > > > > >>
> > > > > >> The server where the director is running has two interfaces (one
> > > > > >> phyiscal one virtual), of .48 and .49, I want it to talk out of
> > > > > >> the .49
> > > > > >> IP addresses, however it sends out communications from the .48 IP
> > > > > >> address.
> > > > > >>
> > > > > >> Does tha
[Bacula-users] tape positioning error TL892/TZ89 drives
I’m getting the following error when I try to put a
second full backup onto tape. Where do I need to start do diagnose the problem?
05-Oct 16:06 athos-sd: FullBackup.2006-10-05_14.32.09 Error:
Unable to position to end of data on device "Drive-1"
(/dev/rmt/1cbn): ERR=dev.c:1298 read error on "Drive-1"
(/dev/rmt/1cbn). ERR=I/O error.
05-Oct 16:06 athos-sd: Marking Volume "EJB065" in
Error in Catalog.
The tape device settings are based on Dan Langille’s
article.
I’m also still getting :
05-Oct 16:07 athos-sd: Invalid slot=0 defined, cannot
autoload Volume.
Messages when bacula tries to autoload the next tape.
Here’s the configuration;
Solaris 10 x86 w/ reasonably current patch cluster
Bacula 1.39.22
Compaq/HP TL892 library, 2 x TZ89 (DLT8000) drives
mtx 1.3.9
mtx-changer modified to parse “list” correctly
and mt output for wait_for_drive
bacula-dir.conf:
Storage {
Name = TL800
Address = labtape.ruckus.com
SDPort = 9103
Password =
"27txx87d0BHagkpOSO9VkgpW4qGj0g7j3Yiygth2Q"
# password for Storage daemon
Device = TL800
Media Type = DLT-8000
Autochanger = yes
}
Autochanger {
Name = TL800
Device = Drive-0, Drive-1
Changer Command = "/opt/bacula/bin/mtx-changer
%c %o %S %a %d"
Changer Device = /dev/changer
}
Device {
Name =
Drive-0
#
Drive Index = 0
Media Type = DLT-8000
Archive Device = /dev/rmt/0cbn
AutomaticMount =
yes;
# when device opened, read it
AlwaysOpen = yes;
RemovableMedia = yes;
RandomAccess = no;
AutoChanger = yes
Changer Command = "/opt/bacula/bin/mtx-changer
%c %o %S %a %d"
Changer Device = /dev/changer
# Enable the Alert command only if you have the mtx
package loaded
Alert Command = "sh -c 'tapeinfo -f %c |grep
TapeAlert|cat'"
Offline On Unmount = no
Hardware End of Medium = no
BSF at
EOM
= yes
Backward Space Record = no
Fast Forward Space File = no
TWO
EOF
= yes
LabelMedia =
yes;
# lets Bacula label unlabeled media
}
Device {
Name =
Drive-1
#
Drive Index = 1
Media Type = DLT-8000
Archive Device = /dev/rmt/1cbn
AutomaticMount =
yes;
# when device opened, read it
AlwaysOpen = yes;
RemovableMedia = yes;
RandomAccess = no;
AutoChanger = yes
Changer Command = "/opt/bacula/bin/mtx-changer
%c %o %S %a %d"
Changer Device = /dev/changer
# Enable the Alert command only if you have the mtx
package loaded
Alert Command = "sh -c 'tapeinfo -f %c |grep
TapeAlert|cat'"
Offline On Unmount = no
Hardware End of Medium = no
BSF at
EOM
= yes
Backward Space Record = no
Fast Forward Space File = no
TWO
EOF
= yes
LabelMedia =
yes;
# lets Bacula label unlabeled media
}
Alan Davis
Senior Architect
Ruckus Network, Inc.
703.464.6578 (o)
410.365.7175 (m)
[EMAIL PROTECTED]
alancdavis AIM
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
> On Thu, 05 Oct 2006 14:16:14 -0400, Dan Langille said:
> Priority: normal
> Content-description: Mail message body
>
> On 5 Oct 2006 at 19:10, Martin Simmons wrote:
>
> > > On Thu, 05 Oct 2006 12:52:44 -0400, Dan Langille said:
> > > Priority: normal
> > > Content-description: Mail message body
> > >
> > > On 5 Oct 2006 at 17:27, James Ray wrote:
> > >
> > > > Dan Langille wrote:
> > > > > On 5 Oct 2006 at 16:42, James Ray wrote:
> > > > >
> > > > >> Dan Langille wrote:
> > > > >>> On 5 Oct 2006 at 16:29, James Ray wrote:
> > > > >>>
> > > > Dan Langille wrote:
> > > > > On 5 Oct 2006 at 15:36, James Ray wrote:
> > > > >
> > > > >> Dan Langille wrote:
> > > > >>> On 5 Oct 2006 at 9:11, Bill Moran wrote:
> > > > >>>
> > > > I haven't had time to investigate whether the
> > > > [FD|SD|DIR]Address sets
> > > > both the listening and the outgoing address, but a firewall
> > > > audit is
> > > > on the TODO list, and when I finally get to it, I'll have to
> > > > address
> > > > this for a number of services, not only Bacula.
> > > > >>> My testing today shows that is sets both listening and
> > > > >>> outgoing. All
> > > > >>> I tested was a status command. Nothing more.
> > > > >>>
> > > > >>>
> > > > >> Well, that doesn't seem to be the case on my linux (FC5)
> > > > >> machine. :(
> > > > >>
> > > > >> The LISTEN addresses are right but the address the
> > > > >> communications spawn
> > > > >> from is the base system address.
> > > > >>
> > > > >> tcp0 0 xxx.xxx.x.49:91010.0.0.0:*
> > > > >> LISTEN 1009291 3056/bacula-dir
> > > > >> tcp0 0 xxx.xxx.x.49:91030.0.0.0:*
> > > > >> LISTEN 0 9239 3011/bacula-sd
> > > > >>
> > > > >> Then run a status client command with the following ngrep
> > > > >> running (I
> > > > >> shouldn't see any data)
> > > > >>
> > > > >> [EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and
> > > > >> dst host
> > > > >> xxx.xxx.x.3"
> > > > >> interface: eth0 (xxx.xxx.x.0/255.255.254.0)
> > > > >> filter: (ip) and ( src host xxx.xxx.x.48 and dst host
> > > > >> xxx.xxx.x.3 )
> > > > >> 114 received, 0 dropped
> > > > >>
> > > > >> And I see the following in netstat:
> > > > >>
> > > > >> tcp0 0 xxx.xxx.x.48:53286 xxx.xxx.x.3:9102
> > > > >> TIME_WAIT 0 0 -
> > > > >>
> > > > >> :(
> > > > > Without the corrresponding configuration file, I cannot comment.
> > > > >
> > > > Director{} resource from bacula-dir.conf
> > > > Director {# define myself
> > > > Name = bacula-dir
> > > > DIRport = 9101# where we listen for UA
> > > > connections
> > > > QueryFile = "/etc/bacula/query.sql"
> > > > WorkingDirectory = "/var/bacula/working"
> > > > PidDirectory = "/var/bacula/run"
> > > > Maximum Concurrent Jobs = 8
> > > > Password = # Console password
> > > > Messages = Daemon
> > > > DirAddress = xxx.xxx.x.49
> > > > }
> > > > >>> This tells the FD that only the given DIR may connect. This does
> > > > >>> not
> > > > >>> tell the FD where it should listen. To tell the FD how to listen,
> > > > >>> here is what I did:
> > > > >>>
> > > > >>> FileDaemon {
> > > > >>> Name = ngaio-fd
> > > > >>> FDport = 9102
> > > > >>> WorkingDirectory = /home/bacula/db
> > > > >>> Pid Directory = /var/run
> > > > >>> Maximum Concurrent Jobs = 20
> > > > >>>
> > > > >>> FDAddress = 192.168.0.68;
> > > > >>> }
> > > > >>>
> > > > >>> This is an extract from the bacula-fd.conf file.
> > > > >>>
> > > > >>> The FDAddress directive tells the FD to listen (and answer) only on
> > > > >>> that given address.
> > > > >>>
> > > > >>> I think you know what to do now... ;)
> > > > >>>
> > > > >> I think you are confused
> > > > >> The FD is listening on another machine on the correct IP address, its
> > > > >> the Director that is talking out of the the 'wrong' (for want of a
> > > > >> better name) IP address.
> > > > >>
> > > > >> The server where the director is running has two interfaces (one
> > > > >> phyiscal one virtual), of .48 and .49, I want it to talk out of the
> > > > >> .49
> > > > >> IP addresses, however it sends out communications from the .48 IP
> > > > >> address.
> > > > >>
> > > > >> Does that clear it up? (confusing I know!)
> > > > >
> > > > > I just tested this with the latest BETA code (for bacula-dir;
> > > > > bconsole was 1.38.11, but I do not think that will affect these
> > > > > results).
> > > > >
> > > > > The bacula-dir config:
> > > > >
> > > > > Director {# define myself
> > >
Re: [Bacula-users] bacula clients and OpenVPN?
On Thu, Oct 05, 2006 at 10:14:17AM -0800, Joshua J. Kugler wrote: > My first thought is "Access to the company's LAN, which the laptop (or other > machine) would not have otherwise." In other words, there can't even be a > connection for backup without starting up the VPN first. Ah, like for roaming laptops? First off, make sure that you understand which components initiate communications to which other components. For example, the fd needs to accept incoming connections from the director, but makes outgoing connections to the sd. The tricky bit that I can see right off is that since the initial connections go from the director to the fd, you'd have to be running an openvpn server on the laptop. While this would work, there'd be a few gotchas: - the director would have to have rights to bring up the tunnel, which would probably mean running it as root or some sudo hackery - you would have to look into how well the director would handle being an openvpn client connected to multiple servers - unless your sd is on the same host as the director, you would have to make additional provisions for connections from the fd to the sd Given that bacula uses exactly the same TLS libraries to authenticate and encrypt its data that openvpn does, you're probably better off just allowing bacula through the firewall. -- Frank Sweetser fs at wpi.edu | For every problem, there is a solution that WPI Network Engineer | is simple, elegant, and wrong. - HL Mencken GPG fingerprint = 6174 1257 129E 0D21 D8D4 E8A3 8E39 29E3 E2E8 8CEC - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] [Bacula-devel] Bacula BETA 1.39.24.20061002 source + Win32 binaries release to Source Forge
On 5 Oct 2006 at 14:34, Dan Langille wrote: > On 5 Oct 2006 at 15:14, Kern Sibbald wrote: > > > I have just released Bacula BETA 1.39.24.20061002 source and the Win32 > > binaries to Source Forge. This is very likely to be the last beta release > > or > > next to last release before the official 1.40 production release in the > > second half of November. > > The patch for the FreeBSD port, sysutils/bacula-server-devel, has > been submitted. If you want the patch early, see: > > http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/104008 The above patch has been committed and is now in the FreeBSD ports tree. Enjoy. -- Dan Langille : Software Developer looking for work my resume: http://www.freebsddiary.org/dan_langille.php - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Bacula BETA 1.39.24.20061002 source + Win32 binaries release to Source Forge
On 5 Oct 2006 at 15:14, Kern Sibbald wrote: > I have just released Bacula BETA 1.39.24.20061002 source and the Win32 > binaries to Source Forge. This is very likely to be the last beta release or > next to last release before the official 1.40 production release in the > second half of November. The patch for the FreeBSD port, sysutils/bacula-server-devel, has been submitted. If you want the patch early, see: http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/104008 -- Dan Langille : Software Developer looking for work my resume: http://www.freebsddiary.org/dan_langille.php - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] tape Encryption questions.
Hello all, Two questions -: 1. Is the tape encryption all or nothing, or is it possible to pick and choose what files/directories are or are not? If so, how? 2. If a disaster occurred and all you had was the master key (lost the individual client .pem file), how would you go about restoring data from an encrypted tape? (if this is documented somewhere, forgive the question and point me in the right direction.) Thanks, Deric Abel -- - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On 5 Oct 2006 at 19:10, Martin Simmons wrote:
> > On Thu, 05 Oct 2006 12:52:44 -0400, Dan Langille said:
> > Priority: normal
> > Content-description: Mail message body
> >
> > On 5 Oct 2006 at 17:27, James Ray wrote:
> >
> > > Dan Langille wrote:
> > > > On 5 Oct 2006 at 16:42, James Ray wrote:
> > > >
> > > >> Dan Langille wrote:
> > > >>> On 5 Oct 2006 at 16:29, James Ray wrote:
> > > >>>
> > > Dan Langille wrote:
> > > > On 5 Oct 2006 at 15:36, James Ray wrote:
> > > >
> > > >> Dan Langille wrote:
> > > >>> On 5 Oct 2006 at 9:11, Bill Moran wrote:
> > > >>>
> > > I haven't had time to investigate whether the [FD|SD|DIR]Address
> > > sets
> > > both the listening and the outgoing address, but a firewall
> > > audit is
> > > on the TODO list, and when I finally get to it, I'll have to
> > > address
> > > this for a number of services, not only Bacula.
> > > >>> My testing today shows that is sets both listening and outgoing.
> > > >>> All
> > > >>> I tested was a status command. Nothing more.
> > > >>>
> > > >>>
> > > >> Well, that doesn't seem to be the case on my linux (FC5) machine.
> > > >> :(
> > > >>
> > > >> The LISTEN addresses are right but the address the communications
> > > >> spawn
> > > >> from is the base system address.
> > > >>
> > > >> tcp0 0 xxx.xxx.x.49:91010.0.0.0:*
> > > >> LISTEN 1009291 3056/bacula-dir
> > > >> tcp0 0 xxx.xxx.x.49:91030.0.0.0:*
> > > >> LISTEN 0 9239 3011/bacula-sd
> > > >>
> > > >> Then run a status client command with the following ngrep running
> > > >> (I
> > > >> shouldn't see any data)
> > > >>
> > > >> [EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and dst
> > > >> host
> > > >> xxx.xxx.x.3"
> > > >> interface: eth0 (xxx.xxx.x.0/255.255.254.0)
> > > >> filter: (ip) and ( src host xxx.xxx.x.48 and dst host xxx.xxx.x.3 )
> > > >> 114 received, 0 dropped
> > > >>
> > > >> And I see the following in netstat:
> > > >>
> > > >> tcp0 0 xxx.xxx.x.48:53286 xxx.xxx.x.3:9102
> > > >> TIME_WAIT 0 0 -
> > > >>
> > > >> :(
> > > > Without the corrresponding configuration file, I cannot comment.
> > > >
> > > Director{} resource from bacula-dir.conf
> > > Director {# define myself
> > > Name = bacula-dir
> > > DIRport = 9101# where we listen for UA connections
> > > QueryFile = "/etc/bacula/query.sql"
> > > WorkingDirectory = "/var/bacula/working"
> > > PidDirectory = "/var/bacula/run"
> > > Maximum Concurrent Jobs = 8
> > > Password = # Console password
> > > Messages = Daemon
> > > DirAddress = xxx.xxx.x.49
> > > }
> > > >>> This tells the FD that only the given DIR may connect. This does not
> > > >>> tell the FD where it should listen. To tell the FD how to listen,
> > > >>> here is what I did:
> > > >>>
> > > >>> FileDaemon {
> > > >>> Name = ngaio-fd
> > > >>> FDport = 9102
> > > >>> WorkingDirectory = /home/bacula/db
> > > >>> Pid Directory = /var/run
> > > >>> Maximum Concurrent Jobs = 20
> > > >>>
> > > >>> FDAddress = 192.168.0.68;
> > > >>> }
> > > >>>
> > > >>> This is an extract from the bacula-fd.conf file.
> > > >>>
> > > >>> The FDAddress directive tells the FD to listen (and answer) only on
> > > >>> that given address.
> > > >>>
> > > >>> I think you know what to do now... ;)
> > > >>>
> > > >> I think you are confused
> > > >> The FD is listening on another machine on the correct IP address, its
> > > >> the Director that is talking out of the the 'wrong' (for want of a
> > > >> better name) IP address.
> > > >>
> > > >> The server where the director is running has two interfaces (one
> > > >> phyiscal one virtual), of .48 and .49, I want it to talk out of the .49
> > > >> IP addresses, however it sends out communications from the .48 IP
> > > >> address.
> > > >>
> > > >> Does that clear it up? (confusing I know!)
> > > >
> > > > I just tested this with the latest BETA code (for bacula-dir;
> > > > bconsole was 1.38.11, but I do not think that will affect these
> > > > results).
> > > >
> > > > The bacula-dir config:
> > > >
> > > > Director {# define myself
> > > > Name = ngaio-dir
> > > > DIRport = 9101# where we listen for UA connections
> > > > QueryFile = "/usr/local/share/bacula/query.sql"
> > > > WorkingDirectory = "/home/bacula/db"
> > > > PidDirectory = "/var/run"
> > > > Maximum Concurrent Jobs = 3
> > > > Password = "" # Console password
> > > > Messages = Daemon
> > > >
> > > > DirAddress = 192.168.0.68
> >
Re: [Bacula-users] bacula clients and OpenVPN?
On Thursday 05 October 2006 09:45, Frank Sweetser wrote: > On Thu, Oct 05, 2006 at 11:48:32AM -0500, [EMAIL PROTECTED] wrote: > > Greetings All, > > > > I was just considering more options for the backup system that we would > > like to get in place and it occurred to me that it would be a great thing > > if I could have the bacula client machines connect to the bacula server > > via OpenVPN when it was time to do the backup and then disconnect after > > the backup job was completed for that particular client. > > Well, my first question would be - what are you trying to accomplish that > can't already be done via native TLS? My first thought is "Access to the company's LAN, which the laptop (or other machine) would not have otherwise." In other words, there can't even be a connection for backup without starting up the VPN first. j -- Joshua Kugler Lead System Admin -- Senior Programmer http://www.eeinternet.com PGP Key: http://pgp.mit.edu/ ID 0xDB26D7CE PO Box 80086 -- Fairbanks, AK 99708 -- Ph: 907-456-5581 Fax: 907-456-3111 - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
> On Thu, 05 Oct 2006 12:52:44 -0400, Dan Langille said:
> Priority: normal
> Content-description: Mail message body
>
> On 5 Oct 2006 at 17:27, James Ray wrote:
>
> > Dan Langille wrote:
> > > On 5 Oct 2006 at 16:42, James Ray wrote:
> > >
> > >> Dan Langille wrote:
> > >>> On 5 Oct 2006 at 16:29, James Ray wrote:
> > >>>
> > Dan Langille wrote:
> > > On 5 Oct 2006 at 15:36, James Ray wrote:
> > >
> > >> Dan Langille wrote:
> > >>> On 5 Oct 2006 at 9:11, Bill Moran wrote:
> > >>>
> > I haven't had time to investigate whether the [FD|SD|DIR]Address
> > sets
> > both the listening and the outgoing address, but a firewall audit
> > is
> > on the TODO list, and when I finally get to it, I'll have to
> > address
> > this for a number of services, not only Bacula.
> > >>> My testing today shows that is sets both listening and outgoing.
> > >>> All
> > >>> I tested was a status command. Nothing more.
> > >>>
> > >>>
> > >> Well, that doesn't seem to be the case on my linux (FC5) machine. :(
> > >>
> > >> The LISTEN addresses are right but the address the communications
> > >> spawn
> > >> from is the base system address.
> > >>
> > >> tcp0 0 xxx.xxx.x.49:91010.0.0.0:*
> > >> LISTEN 1009291 3056/bacula-dir
> > >> tcp0 0 xxx.xxx.x.49:91030.0.0.0:*
> > >> LISTEN 0 9239 3011/bacula-sd
> > >>
> > >> Then run a status client command with the following ngrep running (I
> > >> shouldn't see any data)
> > >>
> > >> [EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and dst
> > >> host
> > >> xxx.xxx.x.3"
> > >> interface: eth0 (xxx.xxx.x.0/255.255.254.0)
> > >> filter: (ip) and ( src host xxx.xxx.x.48 and dst host xxx.xxx.x.3 )
> > >> 114 received, 0 dropped
> > >>
> > >> And I see the following in netstat:
> > >>
> > >> tcp0 0 xxx.xxx.x.48:53286 xxx.xxx.x.3:9102
> > >> TIME_WAIT 0 0 -
> > >>
> > >> :(
> > > Without the corrresponding configuration file, I cannot comment.
> > >
> > Director{} resource from bacula-dir.conf
> > Director {# define myself
> > Name = bacula-dir
> > DIRport = 9101# where we listen for UA connections
> > QueryFile = "/etc/bacula/query.sql"
> > WorkingDirectory = "/var/bacula/working"
> > PidDirectory = "/var/bacula/run"
> > Maximum Concurrent Jobs = 8
> > Password = # Console password
> > Messages = Daemon
> > DirAddress = xxx.xxx.x.49
> > }
> > >>> This tells the FD that only the given DIR may connect. This does not
> > >>> tell the FD where it should listen. To tell the FD how to listen,
> > >>> here is what I did:
> > >>>
> > >>> FileDaemon {
> > >>> Name = ngaio-fd
> > >>> FDport = 9102
> > >>> WorkingDirectory = /home/bacula/db
> > >>> Pid Directory = /var/run
> > >>> Maximum Concurrent Jobs = 20
> > >>>
> > >>> FDAddress = 192.168.0.68;
> > >>> }
> > >>>
> > >>> This is an extract from the bacula-fd.conf file.
> > >>>
> > >>> The FDAddress directive tells the FD to listen (and answer) only on
> > >>> that given address.
> > >>>
> > >>> I think you know what to do now... ;)
> > >>>
> > >> I think you are confused
> > >> The FD is listening on another machine on the correct IP address, its
> > >> the Director that is talking out of the the 'wrong' (for want of a
> > >> better name) IP address.
> > >>
> > >> The server where the director is running has two interfaces (one
> > >> phyiscal one virtual), of .48 and .49, I want it to talk out of the .49
> > >> IP addresses, however it sends out communications from the .48 IP
> > >> address.
> > >>
> > >> Does that clear it up? (confusing I know!)
> > >
> > > I just tested this with the latest BETA code (for bacula-dir;
> > > bconsole was 1.38.11, but I do not think that will affect these
> > > results).
> > >
> > > The bacula-dir config:
> > >
> > > Director {# define myself
> > > Name = ngaio-dir
> > > DIRport = 9101# where we listen for UA connections
> > > QueryFile = "/usr/local/share/bacula/query.sql"
> > > WorkingDirectory = "/home/bacula/db"
> > > PidDirectory = "/var/run"
> > > Maximum Concurrent Jobs = 3
> > > Password = "" # Console password
> > > Messages = Daemon
> > >
> > > DirAddress = 192.168.0.68
> > > }
> > >
> > > The bconsole.conf:
> > >
> > > Director {
> > > Name = ngaio-dir
> > > DIRport = 9101
> > > Address = 192.168.0.68
> > > # address = ngaio
> > > Password = "***"
> > > }
> > >
> > > Connecting thusly:
> > >
> > > $ bconsole -c ~/bconsole.conf
> > > Connecting to Director 192.168.0.68:910
Re: [Bacula-users] bacula clients and OpenVPN?
On Thu, Oct 05, 2006 at 11:48:32AM -0500, [EMAIL PROTECTED] wrote: > Greetings All, > > I was just considering more options for the backup system that we would > like to get in place and it occurred to me that it would be a great thing > if I could have the bacula client machines connect to the bacula server > via OpenVPN when it was time to do the backup and then disconnect after > the backup job was completed for that particular client. Well, my first question would be - what are you trying to accomplish that can't already be done via native TLS? -- Frank Sweetser fs at wpi.edu | For every problem, there is a solution that WPI Network Engineer | is simple, elegant, and wrong. - HL Mencken GPG fingerprint = 6174 1257 129E 0D21 D8D4 E8A3 8E39 29E3 E2E8 8CEC - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On 5 Oct 2006 at 17:27, James Ray wrote:
> Dan Langille wrote:
> > On 5 Oct 2006 at 16:42, James Ray wrote:
> >
> >> Dan Langille wrote:
> >>> On 5 Oct 2006 at 16:29, James Ray wrote:
> >>>
> Dan Langille wrote:
> > On 5 Oct 2006 at 15:36, James Ray wrote:
> >
> >> Dan Langille wrote:
> >>> On 5 Oct 2006 at 9:11, Bill Moran wrote:
> >>>
> I haven't had time to investigate whether the [FD|SD|DIR]Address sets
> both the listening and the outgoing address, but a firewall audit is
> on the TODO list, and when I finally get to it, I'll have to address
> this for a number of services, not only Bacula.
> >>> My testing today shows that is sets both listening and outgoing. All
> >>> I tested was a status command. Nothing more.
> >>>
> >>>
> >> Well, that doesn't seem to be the case on my linux (FC5) machine. :(
> >>
> >> The LISTEN addresses are right but the address the communications spawn
> >> from is the base system address.
> >>
> >> tcp0 0 xxx.xxx.x.49:91010.0.0.0:*
> >> LISTEN 1009291 3056/bacula-dir
> >> tcp0 0 xxx.xxx.x.49:91030.0.0.0:*
> >> LISTEN 0 9239 3011/bacula-sd
> >>
> >> Then run a status client command with the following ngrep running (I
> >> shouldn't see any data)
> >>
> >> [EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and dst host
> >> xxx.xxx.x.3"
> >> interface: eth0 (xxx.xxx.x.0/255.255.254.0)
> >> filter: (ip) and ( src host xxx.xxx.x.48 and dst host xxx.xxx.x.3 )
> >> 114 received, 0 dropped
> >>
> >> And I see the following in netstat:
> >>
> >> tcp0 0 xxx.xxx.x.48:53286 xxx.xxx.x.3:9102
> >> TIME_WAIT 0 0 -
> >>
> >> :(
> > Without the corrresponding configuration file, I cannot comment.
> >
> Director{} resource from bacula-dir.conf
> Director {# define myself
> Name = bacula-dir
> DIRport = 9101# where we listen for UA connections
> QueryFile = "/etc/bacula/query.sql"
> WorkingDirectory = "/var/bacula/working"
> PidDirectory = "/var/bacula/run"
> Maximum Concurrent Jobs = 8
> Password = # Console password
> Messages = Daemon
> DirAddress = xxx.xxx.x.49
> }
> >>> This tells the FD that only the given DIR may connect. This does not
> >>> tell the FD where it should listen. To tell the FD how to listen,
> >>> here is what I did:
> >>>
> >>> FileDaemon {
> >>> Name = ngaio-fd
> >>> FDport = 9102
> >>> WorkingDirectory = /home/bacula/db
> >>> Pid Directory = /var/run
> >>> Maximum Concurrent Jobs = 20
> >>>
> >>> FDAddress = 192.168.0.68;
> >>> }
> >>>
> >>> This is an extract from the bacula-fd.conf file.
> >>>
> >>> The FDAddress directive tells the FD to listen (and answer) only on
> >>> that given address.
> >>>
> >>> I think you know what to do now... ;)
> >>>
> >> I think you are confused
> >> The FD is listening on another machine on the correct IP address, its
> >> the Director that is talking out of the the 'wrong' (for want of a
> >> better name) IP address.
> >>
> >> The server where the director is running has two interfaces (one
> >> phyiscal one virtual), of .48 and .49, I want it to talk out of the .49
> >> IP addresses, however it sends out communications from the .48 IP address.
> >>
> >> Does that clear it up? (confusing I know!)
> >
> > I just tested this with the latest BETA code (for bacula-dir;
> > bconsole was 1.38.11, but I do not think that will affect these
> > results).
> >
> > The bacula-dir config:
> >
> > Director {# define myself
> > Name = ngaio-dir
> > DIRport = 9101# where we listen for UA connections
> > QueryFile = "/usr/local/share/bacula/query.sql"
> > WorkingDirectory = "/home/bacula/db"
> > PidDirectory = "/var/run"
> > Maximum Concurrent Jobs = 3
> > Password = "" # Console password
> > Messages = Daemon
> >
> > DirAddress = 192.168.0.68
> > }
> >
> > The bconsole.conf:
> >
> > Director {
> > Name = ngaio-dir
> > DIRport = 9101
> > Address = 192.168.0.68
> > # address = ngaio
> > Password = "***"
> > }
> >
> > Connecting thusly:
> >
> > $ bconsole -c ~/bconsole.conf
> > Connecting to Director 192.168.0.68:9101
> > 1000 OK: ngaio-dir Version: 1.39.24 (02 October 2006)
> > Enter a period to cancel a command.
> > *
> >
> > All comms went via 192.168.0.68
> >
> > Monitored like this:
> >
> > sudo tcpdump -ni fxp0 port 9101 | grep -v 10.55.0.68
> >
> > Any questions? I'll answer.
> >
> > I used the beta because it was already installed on this machine.
> >
> >
>
> Make an outgoing command to a client and see what IP address that comes
> from... something like
[Bacula-users] [Fwd: Re: Need 1 Pool, 2 raid arrays.]
Oops, I forgot to reply to the list...
--- Begin Message ---
Arno Lehmann wrote:
> Hi,
>
> On 10/4/2006 6:50 PM, Brandon King wrote:
>
>> Hello,
>>
>> I have just added a second raid array to my bacula server and want to
>> have 2/3 of my incremental pool be on Array0 and the other 1/3 on Array1.
>>
>> To set this up, I added a second Device to bacula-sd.conf (both devices
>> shown below):
>>
>> Device {
>> Name = FileStorage
>> Media Type = File
>> Archive Device = /home/bacula
>> LabelMedia = yes; # lets Bacula label unlabeled media
>> Random Access = Yes;
>> AutomaticMount = yes; # when device opened, read it
>> RemovableMedia = no;
>> AlwaysOpen = no;
>> }
>>
>> Device {
>> Name = FileStorage2
>> Media Type = File
>> Archive Device = /hd_array0/bacula
>> LabelMedia = yes; # lets Bacula label unlabeled media
>> Random Access = Yes;
>> AutomaticMount = yes; # when device opened, read it
>> RemovableMedia = no;
>> AlwaysOpen = no;
>> }
>>
>
> You need different file types for this to work. You found the reason
> yourself ;-)
>
> Arno
>
Hi Arno,
Thanks for the response. Let me see if I understand what you mean. You
are saying that in order for me to have multiple devices used in the
same pool, the "Device's" have to be different "Media Types"? Which
would mean that bacula can't support having one pool with with more than
one "File type" device?
I guess if that's the case I will have to have different pools for each
raid array? Any suggestions on what I should do? Is there an easy
solution that I am just not seeing?
-Brandon King
--- End Message ---
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] bacula clients and OpenVPN?
Greetings All, I was just considering more options for the backup system that we would like to get in place and it occurred to me that it would be a great thing if I could have the bacula client machines connect to the bacula server via OpenVPN when it was time to do the backup and then disconnect after the backup job was completed for that particular client. does anyone have any ideas or information on this that might be of use? thanks, Lonnie - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
Dan Langille wrote:
> On 5 Oct 2006 at 16:42, James Ray wrote:
>
>> Dan Langille wrote:
>>> On 5 Oct 2006 at 16:29, James Ray wrote:
>>>
Dan Langille wrote:
> On 5 Oct 2006 at 15:36, James Ray wrote:
>
>> Dan Langille wrote:
>>> On 5 Oct 2006 at 9:11, Bill Moran wrote:
>>>
I haven't had time to investigate whether the [FD|SD|DIR]Address sets
both the listening and the outgoing address, but a firewall audit is
on the TODO list, and when I finally get to it, I'll have to address
this for a number of services, not only Bacula.
>>> My testing today shows that is sets both listening and outgoing. All
>>> I tested was a status command. Nothing more.
>>>
>>>
>> Well, that doesn't seem to be the case on my linux (FC5) machine. :(
>>
>> The LISTEN addresses are right but the address the communications spawn
>> from is the base system address.
>>
>> tcp0 0 xxx.xxx.x.49:91010.0.0.0:*
>> LISTEN 1009291 3056/bacula-dir
>> tcp0 0 xxx.xxx.x.49:91030.0.0.0:*
>> LISTEN 0 9239 3011/bacula-sd
>>
>> Then run a status client command with the following ngrep running (I
>> shouldn't see any data)
>>
>> [EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and dst host
>> xxx.xxx.x.3"
>> interface: eth0 (xxx.xxx.x.0/255.255.254.0)
>> filter: (ip) and ( src host xxx.xxx.x.48 and dst host xxx.xxx.x.3 )
>> 114 received, 0 dropped
>>
>> And I see the following in netstat:
>>
>> tcp0 0 xxx.xxx.x.48:53286 xxx.xxx.x.3:9102
>> TIME_WAIT 0 0 -
>>
>> :(
> Without the corrresponding configuration file, I cannot comment.
>
Director{} resource from bacula-dir.conf
Director {# define myself
Name = bacula-dir
DIRport = 9101# where we listen for UA connections
QueryFile = "/etc/bacula/query.sql"
WorkingDirectory = "/var/bacula/working"
PidDirectory = "/var/bacula/run"
Maximum Concurrent Jobs = 8
Password = # Console password
Messages = Daemon
DirAddress = xxx.xxx.x.49
}
>>> This tells the FD that only the given DIR may connect. This does not
>>> tell the FD where it should listen. To tell the FD how to listen,
>>> here is what I did:
>>>
>>> FileDaemon {
>>> Name = ngaio-fd
>>> FDport = 9102
>>> WorkingDirectory = /home/bacula/db
>>> Pid Directory = /var/run
>>> Maximum Concurrent Jobs = 20
>>>
>>> FDAddress = 192.168.0.68;
>>> }
>>>
>>> This is an extract from the bacula-fd.conf file.
>>>
>>> The FDAddress directive tells the FD to listen (and answer) only on
>>> that given address.
>>>
>>> I think you know what to do now... ;)
>>>
>> I think you are confused
>> The FD is listening on another machine on the correct IP address, its
>> the Director that is talking out of the the 'wrong' (for want of a
>> better name) IP address.
>>
>> The server where the director is running has two interfaces (one
>> phyiscal one virtual), of .48 and .49, I want it to talk out of the .49
>> IP addresses, however it sends out communications from the .48 IP address.
>>
>> Does that clear it up? (confusing I know!)
>
> I just tested this with the latest BETA code (for bacula-dir;
> bconsole was 1.38.11, but I do not think that will affect these
> results).
>
> The bacula-dir config:
>
> Director {# define myself
> Name = ngaio-dir
> DIRport = 9101# where we listen for UA connections
> QueryFile = "/usr/local/share/bacula/query.sql"
> WorkingDirectory = "/home/bacula/db"
> PidDirectory = "/var/run"
> Maximum Concurrent Jobs = 3
> Password = "" # Console password
> Messages = Daemon
>
> DirAddress = 192.168.0.68
> }
>
> The bconsole.conf:
>
> Director {
> Name = ngaio-dir
> DIRport = 9101
> Address = 192.168.0.68
> # address = ngaio
> Password = "***"
> }
>
> Connecting thusly:
>
> $ bconsole -c ~/bconsole.conf
> Connecting to Director 192.168.0.68:9101
> 1000 OK: ngaio-dir Version: 1.39.24 (02 October 2006)
> Enter a period to cancel a command.
> *
>
> All comms went via 192.168.0.68
>
> Monitored like this:
>
> sudo tcpdump -ni fxp0 port 9101 | grep -v 10.55.0.68
>
> Any questions? I'll answer.
>
> I used the beta because it was already installed on this machine.
>
>
Make an outgoing command to a client and see what IP address that comes
from... something like a status client=blah should work.
The Outgoing IP address will be your system default address.
--
James Ray. <[EMAIL PROTECTED]>
Computing Services
Queen Mary, University of London
-
Take Surveys. Earn Cash. Influence the Fu
Re: [Bacula-users] Binding to source IP address
On 5 Oct 2006 at 16:42, James Ray wrote:
> Dan Langille wrote:
> > On 5 Oct 2006 at 16:29, James Ray wrote:
> >
> >> Dan Langille wrote:
> >>> On 5 Oct 2006 at 15:36, James Ray wrote:
> >>>
> Dan Langille wrote:
> > On 5 Oct 2006 at 9:11, Bill Moran wrote:
> >
> >> I haven't had time to investigate whether the [FD|SD|DIR]Address sets
> >> both the listening and the outgoing address, but a firewall audit is
> >> on the TODO list, and when I finally get to it, I'll have to address
> >> this for a number of services, not only Bacula.
> > My testing today shows that is sets both listening and outgoing. All
> > I tested was a status command. Nothing more.
> >
> >
> Well, that doesn't seem to be the case on my linux (FC5) machine. :(
>
> The LISTEN addresses are right but the address the communications spawn
> from is the base system address.
>
> tcp0 0 xxx.xxx.x.49:91010.0.0.0:*
> LISTEN 1009291 3056/bacula-dir
> tcp0 0 xxx.xxx.x.49:91030.0.0.0:*
> LISTEN 0 9239 3011/bacula-sd
>
> Then run a status client command with the following ngrep running (I
> shouldn't see any data)
>
> [EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and dst host
> xxx.xxx.x.3"
> interface: eth0 (xxx.xxx.x.0/255.255.254.0)
> filter: (ip) and ( src host xxx.xxx.x.48 and dst host xxx.xxx.x.3 )
> 114 received, 0 dropped
>
> And I see the following in netstat:
>
> tcp0 0 xxx.xxx.x.48:53286 xxx.xxx.x.3:9102
> TIME_WAIT 0 0 -
>
> :(
> >>> Without the corrresponding configuration file, I cannot comment.
> >>>
> >> Director{} resource from bacula-dir.conf
> >> Director {# define myself
> >> Name = bacula-dir
> >> DIRport = 9101# where we listen for UA connections
> >> QueryFile = "/etc/bacula/query.sql"
> >> WorkingDirectory = "/var/bacula/working"
> >> PidDirectory = "/var/bacula/run"
> >> Maximum Concurrent Jobs = 8
> >> Password = # Console password
> >> Messages = Daemon
> >> DirAddress = xxx.xxx.x.49
> >> }
> >
> > This tells the FD that only the given DIR may connect. This does not
> > tell the FD where it should listen. To tell the FD how to listen,
> > here is what I did:
> >
> > FileDaemon {
> > Name = ngaio-fd
> > FDport = 9102
> > WorkingDirectory = /home/bacula/db
> > Pid Directory = /var/run
> > Maximum Concurrent Jobs = 20
> >
> > FDAddress = 192.168.0.68;
> > }
> >
> > This is an extract from the bacula-fd.conf file.
> >
> > The FDAddress directive tells the FD to listen (and answer) only on
> > that given address.
> >
> > I think you know what to do now... ;)
> >
>
> I think you are confused
> The FD is listening on another machine on the correct IP address, its
> the Director that is talking out of the the 'wrong' (for want of a
> better name) IP address.
>
> The server where the director is running has two interfaces (one
> phyiscal one virtual), of .48 and .49, I want it to talk out of the .49
> IP addresses, however it sends out communications from the .48 IP address.
>
> Does that clear it up? (confusing I know!)
I just tested this with the latest BETA code (for bacula-dir;
bconsole was 1.38.11, but I do not think that will affect these
results).
The bacula-dir config:
Director {# define myself
Name = ngaio-dir
DIRport = 9101# where we listen for UA connections
QueryFile = "/usr/local/share/bacula/query.sql"
WorkingDirectory = "/home/bacula/db"
PidDirectory = "/var/run"
Maximum Concurrent Jobs = 3
Password = "" # Console password
Messages = Daemon
DirAddress = 192.168.0.68
}
The bconsole.conf:
Director {
Name = ngaio-dir
DIRport = 9101
Address = 192.168.0.68
# address = ngaio
Password = "***"
}
Connecting thusly:
$ bconsole -c ~/bconsole.conf
Connecting to Director 192.168.0.68:9101
1000 OK: ngaio-dir Version: 1.39.24 (02 October 2006)
Enter a period to cancel a command.
*
All comms went via 192.168.0.68
Monitored like this:
sudo tcpdump -ni fxp0 port 9101 | grep -v 10.55.0.68
Any questions? I'll answer.
I used the beta because it was already installed on this machine.
--
Dan Langille : Software Developer looking for work
my resume: http://www.freebsddiary.org/dan_langille.php
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Re: [Bacula-users] Binding to source IP address
On 5 Oct 2006 at 16:42, James Ray wrote:
> Dan Langille wrote:
> > On 5 Oct 2006 at 16:29, James Ray wrote:
> >
> >> Dan Langille wrote:
> >>> On 5 Oct 2006 at 15:36, James Ray wrote:
> >>>
> Dan Langille wrote:
> > On 5 Oct 2006 at 9:11, Bill Moran wrote:
> >
> >> I haven't had time to investigate whether the [FD|SD|DIR]Address sets
> >> both the listening and the outgoing address, but a firewall audit is
> >> on the TODO list, and when I finally get to it, I'll have to address
> >> this for a number of services, not only Bacula.
> > My testing today shows that is sets both listening and outgoing. All
> > I tested was a status command. Nothing more.
> >
> >
> Well, that doesn't seem to be the case on my linux (FC5) machine. :(
>
> The LISTEN addresses are right but the address the communications spawn
> from is the base system address.
>
> tcp0 0 xxx.xxx.x.49:91010.0.0.0:*
> LISTEN 1009291 3056/bacula-dir
> tcp0 0 xxx.xxx.x.49:91030.0.0.0:*
> LISTEN 0 9239 3011/bacula-sd
>
> Then run a status client command with the following ngrep running (I
> shouldn't see any data)
>
> [EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and dst host
> xxx.xxx.x.3"
> interface: eth0 (xxx.xxx.x.0/255.255.254.0)
> filter: (ip) and ( src host xxx.xxx.x.48 and dst host xxx.xxx.x.3 )
> 114 received, 0 dropped
>
> And I see the following in netstat:
>
> tcp0 0 xxx.xxx.x.48:53286 xxx.xxx.x.3:9102
> TIME_WAIT 0 0 -
>
> :(
> >>> Without the corrresponding configuration file, I cannot comment.
> >>>
> >> Director{} resource from bacula-dir.conf
> >> Director {# define myself
> >> Name = bacula-dir
> >> DIRport = 9101# where we listen for UA connections
> >> QueryFile = "/etc/bacula/query.sql"
> >> WorkingDirectory = "/var/bacula/working"
> >> PidDirectory = "/var/bacula/run"
> >> Maximum Concurrent Jobs = 8
> >> Password = # Console password
> >> Messages = Daemon
> >> DirAddress = xxx.xxx.x.49
> >> }
> >
> > This tells the FD that only the given DIR may connect. This does not
> > tell the FD where it should listen. To tell the FD how to listen,
> > here is what I did:
> >
> > FileDaemon {
> > Name = ngaio-fd
> > FDport = 9102
> > WorkingDirectory = /home/bacula/db
> > Pid Directory = /var/run
> > Maximum Concurrent Jobs = 20
> >
> > FDAddress = 192.168.0.68;
> > }
> >
> > This is an extract from the bacula-fd.conf file.
> >
> > The FDAddress directive tells the FD to listen (and answer) only on
> > that given address.
> >
> > I think you know what to do now... ;)
> >
>
> I think you are confused
> The FD is listening on another machine on the correct IP address, its
> the Director that is talking out of the the 'wrong' (for want of a
> better name) IP address.
>
> The server where the director is running has two interfaces (one
> phyiscal one virtual), of .48 and .49, I want it to talk out of the .49
> IP addresses, however it sends out communications from the .48 IP address.
>
> Does that clear it up? (confusing I know!)
Yes, it does. Confusion gone. Sorry, I have not tried configuring
the bacula-dir thusly. I'll try now.
--
Dan Langille : Software Developer looking for work
my resume: http://www.freebsddiary.org/dan_langille.php
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On 5 Oct 2006 at 11:36, Ryan Novosielski wrote: > Were you sure to restart after making these changes? bacula-fd? Yes. -- Dan Langille : Software Developer looking for work my resume: http://www.freebsddiary.org/dan_langille.php - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
Dan Langille wrote:
> On 5 Oct 2006 at 16:29, James Ray wrote:
>
>> Dan Langille wrote:
>>> On 5 Oct 2006 at 15:36, James Ray wrote:
>>>
Dan Langille wrote:
> On 5 Oct 2006 at 9:11, Bill Moran wrote:
>
>> I haven't had time to investigate whether the [FD|SD|DIR]Address sets
>> both the listening and the outgoing address, but a firewall audit is
>> on the TODO list, and when I finally get to it, I'll have to address
>> this for a number of services, not only Bacula.
> My testing today shows that is sets both listening and outgoing. All
> I tested was a status command. Nothing more.
>
>
Well, that doesn't seem to be the case on my linux (FC5) machine. :(
The LISTEN addresses are right but the address the communications spawn
from is the base system address.
tcp0 0 xxx.xxx.x.49:91010.0.0.0:*
LISTEN 1009291 3056/bacula-dir
tcp0 0 xxx.xxx.x.49:91030.0.0.0:*
LISTEN 0 9239 3011/bacula-sd
Then run a status client command with the following ngrep running (I
shouldn't see any data)
[EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and dst host
xxx.xxx.x.3"
interface: eth0 (xxx.xxx.x.0/255.255.254.0)
filter: (ip) and ( src host xxx.xxx.x.48 and dst host xxx.xxx.x.3 )
114 received, 0 dropped
And I see the following in netstat:
tcp0 0 xxx.xxx.x.48:53286 xxx.xxx.x.3:9102
TIME_WAIT 0 0 -
:(
>>> Without the corrresponding configuration file, I cannot comment.
>>>
>> Director{} resource from bacula-dir.conf
>> Director {# define myself
>> Name = bacula-dir
>> DIRport = 9101# where we listen for UA connections
>> QueryFile = "/etc/bacula/query.sql"
>> WorkingDirectory = "/var/bacula/working"
>> PidDirectory = "/var/bacula/run"
>> Maximum Concurrent Jobs = 8
>> Password = # Console password
>> Messages = Daemon
>> DirAddress = xxx.xxx.x.49
>> }
>
> This tells the FD that only the given DIR may connect. This does not
> tell the FD where it should listen. To tell the FD how to listen,
> here is what I did:
>
> FileDaemon {
> Name = ngaio-fd
> FDport = 9102
> WorkingDirectory = /home/bacula/db
> Pid Directory = /var/run
> Maximum Concurrent Jobs = 20
>
> FDAddress = 192.168.0.68;
> }
>
> This is an extract from the bacula-fd.conf file.
>
> The FDAddress directive tells the FD to listen (and answer) only on
> that given address.
>
> I think you know what to do now... ;)
>
I think you are confused
The FD is listening on another machine on the correct IP address, its
the Director that is talking out of the the 'wrong' (for want of a
better name) IP address.
The server where the director is running has two interfaces (one
phyiscal one virtual), of .48 and .49, I want it to talk out of the .49
IP addresses, however it sends out communications from the .48 IP address.
Does that clear it up? (confusing I know!)
--
James Ray. <[EMAIL PROTECTED]>
Computing Services
Queen Mary, University of London
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Were you sure to restart after making these changes?
James Ray wrote:
> Dan Langille wrote:
>> On 5 Oct 2006 at 15:36, James Ray wrote:
>>
>>> Dan Langille wrote:
On 5 Oct 2006 at 9:11, Bill Moran wrote:
> I haven't had time to investigate whether the [FD|SD|DIR]Address sets
> both the listening and the outgoing address, but a firewall audit is
> on the TODO list, and when I finally get to it, I'll have to address
> this for a number of services, not only Bacula.
My testing today shows that is sets both listening and outgoing. All
I tested was a status command. Nothing more.
>>> Well, that doesn't seem to be the case on my linux (FC5) machine. :(
>>>
>>> The LISTEN addresses are right but the address the communications spawn
>>> from is the base system address.
>>>
>>> tcp0 0 xxx.xxx.x.49:91010.0.0.0:*
>>> LISTEN 1009291 3056/bacula-dir
>>> tcp0 0 xxx.xxx.x.49:91030.0.0.0:*
>>> LISTEN 0 9239 3011/bacula-sd
>>>
>>> Then run a status client command with the following ngrep running (I
>>> shouldn't see any data)
>>>
>>> [EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and dst host
>>> xxx.xxx.x.3"
>>> interface: eth0 (xxx.xxx.x.0/255.255.254.0)
>>> filter: (ip) and ( src host xxx.xxx.x.48 and dst host xxx.xxx.x.3 )
>>> 114 received, 0 dropped
>>>
>>> And I see the following in netstat:
>>>
>>> tcp0 0 xxx.xxx.x.48:53286 xxx.xxx.x.3:9102
>>> TIME_WAIT 0 0 -
>>>
>>> :(
>> Without the corrresponding configuration file, I cannot comment.
>>
>
> Director{} resource from bacula-dir.conf
> Director {# define myself
> Name = bacula-dir
> DIRport = 9101# where we listen for UA connections
> QueryFile = "/etc/bacula/query.sql"
> WorkingDirectory = "/var/bacula/working"
> PidDirectory = "/var/bacula/run"
> Maximum Concurrent Jobs = 8
> Password = # Console password
> Messages = Daemon
> DirAddress = xxx.xxx.x.49
> }
>
> AFAIK that should be the only bit you need. if you need more, let me know.
>
- --
_ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Systems Programmer III
|$&| |__| | | |__/ | \| _| |[EMAIL PROTECTED] - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFFJSaDmb+gadEcsb4RAt33AJ9refLQpUkveuXPaZMv5G+w9CgcewCggfwM
K9Z/e6q11cd/b9dE0wtGt30=
=nPuP
-END PGP SIGNATURE-
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On 5 Oct 2006 at 16:29, James Ray wrote:
> Dan Langille wrote:
> > On 5 Oct 2006 at 15:36, James Ray wrote:
> >
> >> Dan Langille wrote:
> >>> On 5 Oct 2006 at 9:11, Bill Moran wrote:
> >>>
> I haven't had time to investigate whether the [FD|SD|DIR]Address sets
> both the listening and the outgoing address, but a firewall audit is
> on the TODO list, and when I finally get to it, I'll have to address
> this for a number of services, not only Bacula.
> >>> My testing today shows that is sets both listening and outgoing. All
> >>> I tested was a status command. Nothing more.
> >>>
> >>>
> >> Well, that doesn't seem to be the case on my linux (FC5) machine. :(
> >>
> >> The LISTEN addresses are right but the address the communications spawn
> >> from is the base system address.
> >>
> >> tcp0 0 xxx.xxx.x.49:91010.0.0.0:*
> >> LISTEN 1009291 3056/bacula-dir
> >> tcp0 0 xxx.xxx.x.49:91030.0.0.0:*
> >> LISTEN 0 9239 3011/bacula-sd
> >>
> >> Then run a status client command with the following ngrep running (I
> >> shouldn't see any data)
> >>
> >> [EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and dst host
> >> xxx.xxx.x.3"
> >> interface: eth0 (xxx.xxx.x.0/255.255.254.0)
> >> filter: (ip) and ( src host xxx.xxx.x.48 and dst host xxx.xxx.x.3 )
> >> 114 received, 0 dropped
> >>
> >> And I see the following in netstat:
> >>
> >> tcp0 0 xxx.xxx.x.48:53286 xxx.xxx.x.3:9102
> >> TIME_WAIT 0 0 -
> >>
> >> :(
> >
> > Without the corrresponding configuration file, I cannot comment.
> >
>
> Director{} resource from bacula-dir.conf
> Director {# define myself
> Name = bacula-dir
> DIRport = 9101# where we listen for UA connections
> QueryFile = "/etc/bacula/query.sql"
> WorkingDirectory = "/var/bacula/working"
> PidDirectory = "/var/bacula/run"
> Maximum Concurrent Jobs = 8
> Password = # Console password
> Messages = Daemon
> DirAddress = xxx.xxx.x.49
> }
This tells the FD that only the given DIR may connect. This does not
tell the FD where it should listen. To tell the FD how to listen,
here is what I did:
FileDaemon {
Name = ngaio-fd
FDport = 9102
WorkingDirectory = /home/bacula/db
Pid Directory = /var/run
Maximum Concurrent Jobs = 20
FDAddress = 192.168.0.68;
}
This is an extract from the bacula-fd.conf file.
The FDAddress directive tells the FD to listen (and answer) only on
that given address.
I think you know what to do now... ;)
--
Dan Langille : Software Developer looking for work
my resume: http://www.freebsddiary.org/dan_langille.php
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
Dan Langille wrote:
> On 5 Oct 2006 at 15:36, James Ray wrote:
>
>> Dan Langille wrote:
>>> On 5 Oct 2006 at 9:11, Bill Moran wrote:
>>>
I haven't had time to investigate whether the [FD|SD|DIR]Address sets
both the listening and the outgoing address, but a firewall audit is
on the TODO list, and when I finally get to it, I'll have to address
this for a number of services, not only Bacula.
>>> My testing today shows that is sets both listening and outgoing. All
>>> I tested was a status command. Nothing more.
>>>
>>>
>> Well, that doesn't seem to be the case on my linux (FC5) machine. :(
>>
>> The LISTEN addresses are right but the address the communications spawn
>> from is the base system address.
>>
>> tcp0 0 xxx.xxx.x.49:91010.0.0.0:*
>> LISTEN 1009291 3056/bacula-dir
>> tcp0 0 xxx.xxx.x.49:91030.0.0.0:*
>> LISTEN 0 9239 3011/bacula-sd
>>
>> Then run a status client command with the following ngrep running (I
>> shouldn't see any data)
>>
>> [EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and dst host
>> xxx.xxx.x.3"
>> interface: eth0 (xxx.xxx.x.0/255.255.254.0)
>> filter: (ip) and ( src host xxx.xxx.x.48 and dst host xxx.xxx.x.3 )
>> 114 received, 0 dropped
>>
>> And I see the following in netstat:
>>
>> tcp0 0 xxx.xxx.x.48:53286 xxx.xxx.x.3:9102
>> TIME_WAIT 0 0 -
>>
>> :(
>
> Without the corrresponding configuration file, I cannot comment.
>
Director{} resource from bacula-dir.conf
Director {# define myself
Name = bacula-dir
DIRport = 9101# where we listen for UA connections
QueryFile = "/etc/bacula/query.sql"
WorkingDirectory = "/var/bacula/working"
PidDirectory = "/var/bacula/run"
Maximum Concurrent Jobs = 8
Password = # Console password
Messages = Daemon
DirAddress = xxx.xxx.x.49
}
AFAIK that should be the only bit you need. if you need more, let me know.
--
James Ray. <[EMAIL PROTECTED]>
Computing Services
Queen Mary, University of London
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] simple configurations
Greetings All, Being a little new to Bacula, please forgive my questions if they are too simplistic for the skill level of the mailing list as I am trying to learn in more detail. I have just installed Bacula onto a fresh install of a Fedora 5 server (which we will mirror to another machine for storage in case this server fails) that we will use to backup some clients manchines. This server will only be used for backup data and Bacula and nothing else. Most of the client machines are Windows and I would like to know if someone could please help me with some simple configurations so that we can test and fine-tune Bacula? For instance we would like to setup configurations for "groups" of client systems to be scheduled for backups and then have bacula perform the backup on each group of client systems and also encrypt the backed up data which will be written to the local test-backup server that bacula is running on in each group directory perhaps. The idea is simple in my mind although I may not have explained it correctly to the group. For example we will have 10 client machines for testing and 1 backup server with 500GB space. 1. Group "A" will have clients labeled 1 - 5 2. Group "B" will have clients labeled 6 - 10 3. We will "later" have another server that will just mirror the main backup server so that we will have a redundant system in place as well. Maybe Bacula has the ability to have multiple servers running Bacula and to then syncronize the data between them which would be nice as well. We want to run each group of backup at different scheduled dates and times and eventually we will be backing up other platforms as well. My thoughts was to make a sub-directory for each group and within that have a sub-directory for each client so that bacula will place that clients backup encrypted data into that particular sub-direcotry to keep things organized. All of this may not be how Bacula actually does things, but it was my first attempt as a logical layout. Any and all help would be greatly appreciated. Thanks in advance and have a great day, Lonnie - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
> On Thu, 05 Oct 2006 10:47:00 -0400, Josh Fisher said:
>
> Kern Sibbald wrote:
> > On Thursday 05 October 2006 15:03, James Ray wrote:
> >
> >> Kern Sibbald wrote:
> >>
> >>> On Thursday 05 October 2006 11:02, James Ray wrote:
> >>>
> All,
> I am wanting the communications from bacula to come out of the same IP
> address I have DirAddress set as in the Director {} resource. This is
> not the default system address.
>
> I have just tried to do this with IPTables and source NATing but due to
> a bug in the Fedora Kernel (or what seems to be) I get a panic ;(
>
> Any ideas other than me writing a quick patch to do it?
>
> >>> Could you explain in detail why you would want to do this?
> >>>
> >>> Could you explain what components you are talking about when you say you
> >>>
> > are
> >
> >>> wanting "communications from bacula"? (Director, Console, File daemon,
> >>> Storage daemon), and to where? (each of the daemons carry on several
> >>> different kinds of network conversations -- Dir=3, Console=1, FD=2,
> >>> SD=2).
> >>> See the daemon interconnection picture in the beginning of the manual for
> >>>
> > the
> >
> >>> details of who talks to whom.
> >>>
> >>> Also, could you explain how it is possible to use a different address
> >>> than
> >>>
> > the
> >
> >>> one which is "assigned" to your computer?
> >>>
> >>>
> >> We have a concept of a system address (the machine itself) and a service
> >> address (one for each service, say .2 == an apache service, .3 == an
> >> bacula service, .4 == a dns service, where as .1 is a _system_ address)
> >> all the interfaces will be on the same machine.
> >>
> >> So any communications coming _from_ the bacula service need to come out
> >> of .3 and any connections to the bacula service need to head onto .3 also.
> >>
> >> What I have seen (only on my breif testing) is that the listen address
> >> is the .3 address (as I set in DirAddress) but the outcoming connections
> >> from the bacula-dir to the bacula-fd across the network originate for
> >> the system default address of .1...
> >>
> >
> > I have no idea how to control which address is used for outgoing
> > communications other than by configuring your network gateway to go through
> > the preferred device, which may not do exactly what you want.
> >
> > In any event, unless I am misunderstanding something, Bacula has no
> > mechanism
> > for controlling outgoing addresses.
> >
> >
> A listening socket doesn't perform 2-way communications, and so can be
> "bound" to multiple interfaces. It is the socket returned from accept()
> that is bound to a particular interface, (the interface which received
> the connection request). So DIRAddress affects which interfaces DIR
> listens for connections on, but has nothing to do with any client
> connections that DIR makes to other daemons. It is possible to bind a
> client socket to a particular interface and/or port previous to the
> connect() call, so in that way bacula COULD control the outgoing
> address, but I don't see why it should want to do it's own routing.
Firewall reasons maybe? E.g. if you want packets to come from a particular IP
address.
__Martin
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On 5 Oct 2006 at 15:36, James Ray wrote: > Dan Langille wrote: > > On 5 Oct 2006 at 9:11, Bill Moran wrote: > > > >> I haven't had time to investigate whether the [FD|SD|DIR]Address sets > >> both the listening and the outgoing address, but a firewall audit is > >> on the TODO list, and when I finally get to it, I'll have to address > >> this for a number of services, not only Bacula. > > > > My testing today shows that is sets both listening and outgoing. All > > I tested was a status command. Nothing more. > > > > > > Well, that doesn't seem to be the case on my linux (FC5) machine. :( > > The LISTEN addresses are right but the address the communications spawn > from is the base system address. > > tcp0 0 xxx.xxx.x.49:91010.0.0.0:* > LISTEN 1009291 3056/bacula-dir > tcp0 0 xxx.xxx.x.49:91030.0.0.0:* > LISTEN 0 9239 3011/bacula-sd > > Then run a status client command with the following ngrep running (I > shouldn't see any data) > > [EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and dst host > xxx.xxx.x.3" > interface: eth0 (xxx.xxx.x.0/255.255.254.0) > filter: (ip) and ( src host xxx.xxx.x.48 and dst host xxx.xxx.x.3 ) > 114 received, 0 dropped > > And I see the following in netstat: > > tcp0 0 xxx.xxx.x.48:53286 xxx.xxx.x.3:9102 > TIME_WAIT 0 0 - > > :( Without the corrresponding configuration file, I cannot comment. -- Dan Langille : Software Developer looking for work my resume: http://www.freebsddiary.org/dan_langille.php - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
Kern Sibbald wrote:
> On Thursday 05 October 2006 15:03, James Ray wrote:
>
>> Kern Sibbald wrote:
>>
>>> On Thursday 05 October 2006 11:02, James Ray wrote:
>>>
All,
I am wanting the communications from bacula to come out of the same IP
address I have DirAddress set as in the Director {} resource. This is
not the default system address.
I have just tried to do this with IPTables and source NATing but due to
a bug in the Fedora Kernel (or what seems to be) I get a panic ;(
Any ideas other than me writing a quick patch to do it?
>>> Could you explain in detail why you would want to do this?
>>>
>>> Could you explain what components you are talking about when you say you
>>>
> are
>
>>> wanting "communications from bacula"? (Director, Console, File daemon,
>>> Storage daemon), and to where? (each of the daemons carry on several
>>> different kinds of network conversations -- Dir=3, Console=1, FD=2, SD=2).
>>> See the daemon interconnection picture in the beginning of the manual for
>>>
> the
>
>>> details of who talks to whom.
>>>
>>> Also, could you explain how it is possible to use a different address than
>>>
> the
>
>>> one which is "assigned" to your computer?
>>>
>>>
>> We have a concept of a system address (the machine itself) and a service
>> address (one for each service, say .2 == an apache service, .3 == an
>> bacula service, .4 == a dns service, where as .1 is a _system_ address)
>> all the interfaces will be on the same machine.
>>
>> So any communications coming _from_ the bacula service need to come out
>> of .3 and any connections to the bacula service need to head onto .3 also.
>>
>> What I have seen (only on my breif testing) is that the listen address
>> is the .3 address (as I set in DirAddress) but the outcoming connections
>> from the bacula-dir to the bacula-fd across the network originate for
>> the system default address of .1...
>>
>
> I have no idea how to control which address is used for outgoing
> communications other than by configuring your network gateway to go through
> the preferred device, which may not do exactly what you want.
>
> In any event, unless I am misunderstanding something, Bacula has no mechanism
> for controlling outgoing addresses.
>
>
A listening socket doesn't perform 2-way communications, and so can be
"bound" to multiple interfaces. It is the socket returned from accept()
that is bound to a particular interface, (the interface which received
the connection request). So DIRAddress affects which interfaces DIR
listens for connections on, but has nothing to do with any client
connections that DIR makes to other daemons. It is possible to bind a
client socket to a particular interface and/or port previous to the
connect() call, so in that way bacula COULD control the outgoing
address, but I don't see why it should want to do it's own routing.
James' problem seems to be routing related. James, check the 'src'
parameter available in the 'ip route add' command. (man ip)
>> I shall re-test and post my outcomes.
>>
>> --
>> James Ray. <[EMAIL PROTECTED]>
>> Computing Services
>> Queen Mary, University of London
>>
>> -
>> Take Surveys. Earn Cash. Influence the Future of IT
>> Join SourceForge.net's Techsay panel and you'll get the chance to share your
>> opinions on IT & business topics through brief surveys -- and earn cash
>> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
>> ___
>> Bacula-users mailing list
>> Bacula-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/bacula-users
>>
>>
>
> -
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> ___
> Bacula-users mailing list
> Bacula-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bacula-users
>
>
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
Roberto Alsina wrote: > On Thu 05 Oct 2006 10:17, Kern Sibbald wrote: >> I have no idea how to control which address is used for outgoing >> communications other than by configuring your network gateway to go through >> the preferred device, which may not do exactly what you want. >> >> In any event, unless I am misunderstanding something, Bacula has no >> mechanism for controlling outgoing addresses. > > There is a reason for that: Unless you have two interfaces from which you can > reach the destination IP address, what the original poster asked makes no > sense. Or does it? > > If you do have two interfaces in such condition, you can use a iptables nat > rule (the OUTPUT chain) to set things the way you want. > > For example, if you want the bacula-dir process with PID 1234 to use IP > 10.0.0.2, you can do this (untested): > > iptables -t nat -A OUTPUT -m owner --pid-owner 1234 -j SNAT --to-source > 10.0.0.2 > > But it's really a strange thing to do :-) > >From my first message: > I have just tried to do this with IPTables and source NATing but due to > a bug in the Fedora Kernel (or what seems to be) I get a panic ;( -- James Ray. <[EMAIL PROTECTED]> Computing Services Queen Mary, University of London - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
Dan Langille wrote: > On 5 Oct 2006 at 9:11, Bill Moran wrote: > >> I haven't had time to investigate whether the [FD|SD|DIR]Address sets >> both the listening and the outgoing address, but a firewall audit is >> on the TODO list, and when I finally get to it, I'll have to address >> this for a number of services, not only Bacula. > > My testing today shows that is sets both listening and outgoing. All > I tested was a status command. Nothing more. > > Well, that doesn't seem to be the case on my linux (FC5) machine. :( The LISTEN addresses are right but the address the communications spawn from is the base system address. tcp0 0 xxx.xxx.x.49:91010.0.0.0:* LISTEN 1009291 3056/bacula-dir tcp0 0 xxx.xxx.x.49:91030.0.0.0:* LISTEN 0 9239 3011/bacula-sd Then run a status client command with the following ngrep running (I shouldn't see any data) [EMAIL PROTECTED] bacula]# ngrep "" "src host xxx.xxx.x.48 and dst host xxx.xxx.x.3" interface: eth0 (xxx.xxx.x.0/255.255.254.0) filter: (ip) and ( src host xxx.xxx.x.48 and dst host xxx.xxx.x.3 ) 114 received, 0 dropped And I see the following in netstat: tcp0 0 xxx.xxx.x.48:53286 xxx.xxx.x.3:9102 TIME_WAIT 0 0 - :( -- James Ray. <[EMAIL PROTECTED]> Computing Services Queen Mary, University of London - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On 5 Oct 2006 at 9:11, Bill Moran wrote: > I haven't had time to investigate whether the [FD|SD|DIR]Address sets > both the listening and the outgoing address, but a firewall audit is > on the TODO list, and when I finally get to it, I'll have to address > this for a number of services, not only Bacula. My testing today shows that is sets both listening and outgoing. All I tested was a status command. Nothing more. -- Dan Langille : Software Developer looking for work my resume: http://www.freebsddiary.org/dan_langille.php - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] Confusion about the Backward Space File directive
http://www.bacula.org/rel-manual/Storage_Daemon_Configuratio.html says: Backward Space File = Yes|No If Yes, the archive device supports the MTBSF and MTBSF ioctls... Presumably one of those MTBSF's should be something else. It's also not clear from the manual what the relationship is with Backward Space Record. Moreover, from the source, it looks like nothing ever checks CAP_BSF before doing the bsf operation anyway! __Martin - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On Thu 05 Oct 2006 10:17, Kern Sibbald wrote:
> I have no idea how to control which address is used for outgoing
> communications other than by configuring your network gateway to go through
> the preferred device, which may not do exactly what you want.
>
> In any event, unless I am misunderstanding something, Bacula has no
> mechanism for controlling outgoing addresses.
There is a reason for that: Unless you have two interfaces from which you can
reach the destination IP address, what the original poster asked makes no
sense. Or does it?
If you do have two interfaces in such condition, you can use a iptables nat
rule (the OUTPUT chain) to set things the way you want.
For example, if you want the bacula-dir process with PID 1234 to use IP
10.0.0.2, you can do this (untested):
iptables -t nat -A OUTPUT -m owner --pid-owner 1234 -j SNAT --to-source
10.0.0.2
But it's really a strange thing to do :-)
--
("\''/").__..-''"`-. . Roberto Alsina
`9_ 9 ) `-. ( ).`-._.`) [EMAIL PROTECTED]
(_Y_.)' ._ ) `._`. " -.-' KDE Developer (MFCH)
_..`-'_..-_/ /-'_.'
(l)-'' ((i).' ((!.' Buenos Aires - Argentina
Feynman's problem solving algorithm: write down the problem->
think very hard -> write down the answer.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On Thursday 05 October 2006 15:03, James Ray wrote:
> Kern Sibbald wrote:
> > On Thursday 05 October 2006 11:02, James Ray wrote:
> >> All,
> >>I am wanting the communications from bacula to come out of the same IP
> >> address I have DirAddress set as in the Director {} resource. This is
> >> not the default system address.
> >>
> >> I have just tried to do this with IPTables and source NATing but due to
> >> a bug in the Fedora Kernel (or what seems to be) I get a panic ;(
> >>
> >> Any ideas other than me writing a quick patch to do it?
> >
> > Could you explain in detail why you would want to do this?
> >
> > Could you explain what components you are talking about when you say you
are
> > wanting "communications from bacula"? (Director, Console, File daemon,
> > Storage daemon), and to where? (each of the daemons carry on several
> > different kinds of network conversations -- Dir=3, Console=1, FD=2, SD=2).
> > See the daemon interconnection picture in the beginning of the manual for
the
> > details of who talks to whom.
> >
> > Also, could you explain how it is possible to use a different address than
the
> > one which is "assigned" to your computer?
> >
>
> We have a concept of a system address (the machine itself) and a service
> address (one for each service, say .2 == an apache service, .3 == an
> bacula service, .4 == a dns service, where as .1 is a _system_ address)
> all the interfaces will be on the same machine.
>
> So any communications coming _from_ the bacula service need to come out
> of .3 and any connections to the bacula service need to head onto .3 also.
>
> What I have seen (only on my breif testing) is that the listen address
> is the .3 address (as I set in DirAddress) but the outcoming connections
> from the bacula-dir to the bacula-fd across the network originate for
> the system default address of .1...
I have no idea how to control which address is used for outgoing
communications other than by configuring your network gateway to go through
the preferred device, which may not do exactly what you want.
In any event, unless I am misunderstanding something, Bacula has no mechanism
for controlling outgoing addresses.
>
> I shall re-test and post my outcomes.
>
> --
> James Ray. <[EMAIL PROTECTED]>
> Computing Services
> Queen Mary, University of London
>
> -
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> ___
> Bacula-users mailing list
> Bacula-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bacula-users
>
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] Bacula BETA 1.39.24.20061002 source + Win32 binaries release to Source Forge
Hello, I have just released Bacula BETA 1.39.24.20061002 source and the Win32 binaries to Source Forge. This is very likely to be the last beta release or next to last release before the official 1.40 production release in the second half of November. There are quite a number of areas of this code that need careful testing, and over the next week, I'll try to come up with a list of items. If you are already using version 1.39.x, the upgrade should be relatively simple and there are no changes in the 1.39.x client protocols, but you should upgrade the Director and Storage daemon simultaneously. Please read the full ChangeLog for details of what has changed since beta 1.39.22. If you are upgrading from 1.38.x, please read the release notes carefully as there are a number of "gotcha" and incompatibilities as well as a database upgrade, all of which generally go quite smoothly providing you read the Release Notes. Although there are a lot of fixes and enhancements since 1.39.22, the main items to know about for 1.39.24 are: - Windows tray status windows are scrollable and resizable. - Win32 external script excution is much more flexible -- handles spaces in names better, ... - Lots of DVD fixes -- I think they now work! - Fix opening of database in a restricted console to respect any Catalog ACL. IMPORTANT a stock SuSE 10.1 kernel may crash = - A stock SuSE 10.1 kernel may crash when Bacula runs and accesses the tape drive. Workaround, load a Fedora kernel, which works fine, or load the SuSE 10.2 rc5 kernel which also works fine. Note, the SuSE crash noted above is not a Bacula, nor a Bacula specific problem rather it is a kernel bug, and the SuSE kernel guys are actively working on it. If anyone needs a SuSE 10.2 rc5 kernel let me know, and I will upload the rpm to my web site. I extracted it from the 10.2 rc5 ISO disk as to the best of my knowlege it is not yet available directly for download. Best regards, Kern - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
In response to James Ray <[EMAIL PROTECTED]>: > We have a concept of a system address (the machine itself) and a service > address (one for each service, say .2 == an apache service, .3 == an > bacula service, .4 == a dns service, where as .1 is a _system_ address) > all the interfaces will be on the same machine. > > So any communications coming _from_ the bacula service need to come out > of .3 and any connections to the bacula service need to head onto .3 also. > > What I have seen (only on my breif testing) is that the listen address > is the .3 address (as I set in DirAddress) but the outcoming connections > from the bacula-dir to the bacula-fd across the network originate for > the system default address of .1... > > I shall re-test and post my outcomes. I just want to quickly chime in that this is of interest to us as well, since we take the same approach. (i.e. each machine has a "management" address and another address for each "service" it provides) The primary reason for this is to help simplify firewall rules. We're in a high-security situation here, so our firewalls default to deny (even from one server to another). Each communication must be explicitly allowed. A secondary reason for this is planning for expansion. Some servers run many services (DNS, NFS, LDAP, etc). In the event that we should split the aforementioned machine into two systems (i.e. put DNS & LDAP on one, and NFS on the second) we don't have to change any firewall rules or configurations on other machines, because the service IPs can follow the services. I haven't had time to investigate whether the [FD|SD|DIR]Address sets both the listening and the outgoing address, but a firewall audit is on the TODO list, and when I finally get to it, I'll have to address this for a number of services, not only Bacula. -- Bill Moran Collaborative Fusion Inc. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
Kern Sibbald wrote:
> On Thursday 05 October 2006 11:02, James Ray wrote:
>> All,
>> I am wanting the communications from bacula to come out of the same IP
>> address I have DirAddress set as in the Director {} resource. This is
>> not the default system address.
>>
>> I have just tried to do this with IPTables and source NATing but due to
>> a bug in the Fedora Kernel (or what seems to be) I get a panic ;(
>>
>> Any ideas other than me writing a quick patch to do it?
>
> Could you explain in detail why you would want to do this?
>
> Could you explain what components you are talking about when you say you are
> wanting "communications from bacula"? (Director, Console, File daemon,
> Storage daemon), and to where? (each of the daemons carry on several
> different kinds of network conversations -- Dir=3, Console=1, FD=2, SD=2).
> See the daemon interconnection picture in the beginning of the manual for the
> details of who talks to whom.
>
> Also, could you explain how it is possible to use a different address than
> the
> one which is "assigned" to your computer?
>
We have a concept of a system address (the machine itself) and a service
address (one for each service, say .2 == an apache service, .3 == an
bacula service, .4 == a dns service, where as .1 is a _system_ address)
all the interfaces will be on the same machine.
So any communications coming _from_ the bacula service need to come out
of .3 and any connections to the bacula service need to head onto .3 also.
What I have seen (only on my breif testing) is that the listen address
is the .3 address (as I set in DirAddress) but the outcoming connections
from the bacula-dir to the bacula-fd across the network originate for
the system default address of .1...
I shall re-test and post my outcomes.
--
James Ray. <[EMAIL PROTECTED]>
Computing Services
Queen Mary, University of London
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On 5 Oct 2006 at 14:12, Kern Sibbald wrote:
> On Thursday 05 October 2006 14:01, Dan Langille wrote:
> > On 5 Oct 2006 at 12:34, James Ray wrote:
> >
> > > Jonas Björklund wrote:
> > > > Hello,
> > > >
> > > > On Thu, 5 Oct 2006, James Ray wrote:
> > > >
> > > >> All,
> > > >> I am wanting the communications from bacula to come out of the
> > > >> same IP
> > > >> address I have DirAddress set as in the Director {} resource. This is
> > > >> not the default system address.
> > > >>
> > > >> I have just tried to do this with IPTables and source NATing but due to
> > > >> a bug in the Fedora Kernel (or what seems to be) I get a panic ;(
> > > >>
> > > >> Any ideas other than me writing a quick patch to do it?
> > > >
> > > > On the director resource you can use DirAddresses.
> > > > On the client resource you can use FDAddresses.
> > > > On the storage resource you can use SDAddresses.
> > >
> > > This specifies listening addresses rather than bind addresses for out
> > > going communications doesn't it? Or have I misunderstood the meaning of
> > > these options?
> >
> > I said "the documentation does say listen". I was wrong. From
> > http://www.bacula.org/rel-manual/Client_Fi_daemon_Configura.html:
> >
> > FDAddress = This record is optional, and if it is
> > specified, it will cause the File daemon server (for Director
> > connections) to **bind** to the specified IP-Address, which is either
> > a domain name or an IP address specified as a dotted quadruple. If
> > this record is not specified, the File daemon will **bind** to any
> > available address (the default).
> >
> > The documentation for FDAddresses (note plural) mentions listen.
> > FDPort also mentions listen.
>
> Well, I am a little confused. First, forgetting the technical programming
> (i.e. the C calls) points for a moment, aren't listen and bind the same
> thing? or is there some error in the manual?
I never thought that listen and bind differ. But thinking about it
now, one could interpret listen as this is where I listen, but not
necessarily where I initiate outgoing comms. Bind has the potential
for a different meaning.
I think the manual is correct.
> Second, James (perhaps his request was not properly formulated) wanted
> communications to "come out" of certain IP addresses -- this implies we are
> talking about a client, not the server. Note, all three daemons (DIR, FD,
> and SD) are both a client and a server depending on whom they are talking to
> so one needs to carefully specify what we are dealing with.
Yes, and I think FDAddress is what he wants.
>
> >
> > I think you want to use FDAddress. Here is what I used:
> >
> > FileDaemon {
> > Name = ngaio-fd
> > FDport = 9102
> > WorkingDirectory = /home/bacula/db
> > Pid Directory = /var/run
> > Maximum Concurrent Jobs = 20
> >
> > FDAddress = 192.168.0.68;
> > }
> >
> >
> > FYI:
> > # ifconfig fxp0
> > fxp0: flags=8843 mtu 1500
> > options=8
> > inet6 fe80::204:acff:fea3:703d%fxp0 prefixlen 64 scopeid 0x1
> > inet 192.168.0.67 netmask 0xff00 broadcast 192.168.0.255
> > inet 192.168.0.68 netmask 0x broadcast 192.168.0.68
> > ether 00:04:ac:a3:70:3d
> > media: Ethernet autoselect (100baseTX )
> > status: active
> >
> > I then ran this while running a status command:
> >
> > # tcpdump -i fxp0 host 192.168.0.67 and not host 192.168.0.99
> >
> > where 192.168.0.99 is the host I'm ssh'ing from...
> >
> > No comms were captured.
> >
> > --
> > Dan Langille : Software Developer looking for work
> > my resume: http://www.freebsddiary.org/dan_langille.php
> >
> >
> >
> > -
> > Take Surveys. Earn Cash. Influence the Future of IT
> > Join SourceForge.net's Techsay panel and you'll get the chance to share your
> > opinions on IT & business topics through brief surveys -- and earn cash
> > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> > ___
> > Bacula-users mailing list
> > Bacula-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/bacula-users
> >
>
--
Dan Langille : Software Developer looking for work
my resume: http://www.freebsddiary.org/dan_langille.php
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On Thursday 05 October 2006 14:01, Dan Langille wrote:
> On 5 Oct 2006 at 12:34, James Ray wrote:
>
> > Jonas Björklund wrote:
> > > Hello,
> > >
> > > On Thu, 5 Oct 2006, James Ray wrote:
> > >
> > >> All,
> > >> I am wanting the communications from bacula to come out of the
> > >> same IP
> > >> address I have DirAddress set as in the Director {} resource. This is
> > >> not the default system address.
> > >>
> > >> I have just tried to do this with IPTables and source NATing but due to
> > >> a bug in the Fedora Kernel (or what seems to be) I get a panic ;(
> > >>
> > >> Any ideas other than me writing a quick patch to do it?
> > >
> > > On the director resource you can use DirAddresses.
> > > On the client resource you can use FDAddresses.
> > > On the storage resource you can use SDAddresses.
> >
> > This specifies listening addresses rather than bind addresses for out
> > going communications doesn't it? Or have I misunderstood the meaning of
> > these options?
>
> I said "the documentation does say listen". I was wrong. From
> http://www.bacula.org/rel-manual/Client_Fi_daemon_Configura.html:
>
> FDAddress = This record is optional, and if it is
> specified, it will cause the File daemon server (for Director
> connections) to **bind** to the specified IP-Address, which is either
> a domain name or an IP address specified as a dotted quadruple. If
> this record is not specified, the File daemon will **bind** to any
> available address (the default).
>
> The documentation for FDAddresses (note plural) mentions listen.
> FDPort also mentions listen.
Well, I am a little confused. First, forgetting the technical programming
(i.e. the C calls) points for a moment, aren't listen and bind the same
thing? or is there some error in the manual?
Second, James (perhaps his request was not properly formulated) wanted
communications to "come out" of certain IP addresses -- this implies we are
talking about a client, not the server. Note, all three daemons (DIR, FD,
and SD) are both a client and a server depending on whom they are talking to
so one needs to carefully specify what we are dealing with.
>
> I think you want to use FDAddress. Here is what I used:
>
> FileDaemon {
> Name = ngaio-fd
> FDport = 9102
> WorkingDirectory = /home/bacula/db
> Pid Directory = /var/run
> Maximum Concurrent Jobs = 20
>
> FDAddress = 192.168.0.68;
> }
>
>
> FYI:
> # ifconfig fxp0
> fxp0: flags=8843 mtu 1500
> options=8
> inet6 fe80::204:acff:fea3:703d%fxp0 prefixlen 64 scopeid 0x1
> inet 192.168.0.67 netmask 0xff00 broadcast 192.168.0.255
> inet 192.168.0.68 netmask 0x broadcast 192.168.0.68
> ether 00:04:ac:a3:70:3d
> media: Ethernet autoselect (100baseTX )
> status: active
>
> I then ran this while running a status command:
>
> # tcpdump -i fxp0 host 192.168.0.67 and not host 192.168.0.99
>
> where 192.168.0.99 is the host I'm ssh'ing from...
>
> No comms were captured.
>
> --
> Dan Langille : Software Developer looking for work
> my resume: http://www.freebsddiary.org/dan_langille.php
>
>
>
> -
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> ___
> Bacula-users mailing list
> Bacula-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bacula-users
>
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On 5 Oct 2006 at 14:02, Kern Sibbald wrote:
> On Thursday 05 October 2006 11:02, James Ray wrote:
> > All,
> > I am wanting the communications from bacula to come out of the same IP
> > address I have DirAddress set as in the Director {} resource. This is
> > not the default system address.
> >
> > I have just tried to do this with IPTables and source NATing but due to
> > a bug in the Fedora Kernel (or what seems to be) I get a panic ;(
> >
> > Any ideas other than me writing a quick patch to do it?
>
> Could you explain in detail why you would want to do this?
>
> Could you explain what components you are talking about when you say you are
> wanting "communications from bacula"? (Director, Console, File daemon,
> Storage daemon), and to where? (each of the daemons carry on several
> different kinds of network conversations -- Dir=3, Console=1, FD=2, SD=2).
> See the daemon interconnection picture in the beginning of the manual for the
> details of who talks to whom.
>
> Also, could you explain how it is possible to use a different address than
> the
> one which is "assigned" to your computer?
Kern: I think James is referring to situations I've seen before. A
daemon can be set up to listen on varioius addresses, but when it
comes to initiating outgoing communications, it uses "the default
system address", for lack of a better term.
For example, in this setup, the main address is 192.168.0.67. There
is an alias at 192.168.0.68. Note the netmasks differ.
$ ifconfig fxp0
fxp0: flags=8843 mtu 1500
options=8
inet6 fe80::204:acff:fea3:703d%fxp0 prefixlen 64 scopeid 0x1
inet 192.168.0.67 netmask 0xff00 broadcast 192.168.0.255
inet 192.168.0.68 netmask 0x broadcast 192.168.0.68
ether 00:04:ac:a3:70:3d
media: Ethernet autoselect (100baseTX )
status: active
I've seen it where daemons are configured to listen to all addresses,
but initate outgoing connections only on the main address. However,
if a daemon is configured to use just one address, everything should
go out through that one address..
But... I think I've send James what he needs in a previous message.
--
Dan Langille : Software Developer looking for work
my resume: http://www.freebsddiary.org/dan_langille.php
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On Thursday 05 October 2006 11:02, James Ray wrote:
> All,
> I am wanting the communications from bacula to come out of the same IP
> address I have DirAddress set as in the Director {} resource. This is
> not the default system address.
>
> I have just tried to do this with IPTables and source NATing but due to
> a bug in the Fedora Kernel (or what seems to be) I get a panic ;(
>
> Any ideas other than me writing a quick patch to do it?
Could you explain in detail why you would want to do this?
Could you explain what components you are talking about when you say you are
wanting "communications from bacula"? (Director, Console, File daemon,
Storage daemon), and to where? (each of the daemons carry on several
different kinds of network conversations -- Dir=3, Console=1, FD=2, SD=2).
See the daemon interconnection picture in the beginning of the manual for the
details of who talks to whom.
Also, could you explain how it is possible to use a different address than the
one which is "assigned" to your computer?
>
> --
> James Ray. <[EMAIL PROTECTED]>
> Computing Services
> Queen Mary, University of London
>
> -
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> ___
> Bacula-users mailing list
> Bacula-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bacula-users
>
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On 5 Oct 2006 at 12:34, James Ray wrote:
> Jonas Björklund wrote:
> > Hello,
> >
> > On Thu, 5 Oct 2006, James Ray wrote:
> >
> >> All,
> >> I am wanting the communications from bacula to come out of the
> >> same IP
> >> address I have DirAddress set as in the Director {} resource. This is
> >> not the default system address.
> >>
> >> I have just tried to do this with IPTables and source NATing but due to
> >> a bug in the Fedora Kernel (or what seems to be) I get a panic ;(
> >>
> >> Any ideas other than me writing a quick patch to do it?
> >
> > On the director resource you can use DirAddresses.
> > On the client resource you can use FDAddresses.
> > On the storage resource you can use SDAddresses.
>
> This specifies listening addresses rather than bind addresses for out
> going communications doesn't it? Or have I misunderstood the meaning of
> these options?
I said "the documentation does say listen". I was wrong. From
http://www.bacula.org/rel-manual/Client_Fi_daemon_Configura.html:
FDAddress = This record is optional, and if it is
specified, it will cause the File daemon server (for Director
connections) to **bind** to the specified IP-Address, which is either
a domain name or an IP address specified as a dotted quadruple. If
this record is not specified, the File daemon will **bind** to any
available address (the default).
The documentation for FDAddresses (note plural) mentions listen.
FDPort also mentions listen.
I think you want to use FDAddress. Here is what I used:
FileDaemon {
Name = ngaio-fd
FDport = 9102
WorkingDirectory = /home/bacula/db
Pid Directory = /var/run
Maximum Concurrent Jobs = 20
FDAddress = 192.168.0.68;
}
FYI:
# ifconfig fxp0
fxp0: flags=8843 mtu 1500
options=8
inet6 fe80::204:acff:fea3:703d%fxp0 prefixlen 64 scopeid 0x1
inet 192.168.0.67 netmask 0xff00 broadcast 192.168.0.255
inet 192.168.0.68 netmask 0x broadcast 192.168.0.68
ether 00:04:ac:a3:70:3d
media: Ethernet autoselect (100baseTX )
status: active
I then ran this while running a status command:
# tcpdump -i fxp0 host 192.168.0.67 and not host 192.168.0.99
where 192.168.0.99 is the host I'm ssh'ing from...
No comms were captured.
--
Dan Langille : Software Developer looking for work
my resume: http://www.freebsddiary.org/dan_langille.php
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
On 5 Oct 2006 at 12:34, James Ray wrote:
> Jonas Björklund wrote:
> > Hello,
> >
> > On Thu, 5 Oct 2006, James Ray wrote:
> >
> >> All,
> >> I am wanting the communications from bacula to come out of the
> >> same IP
> >> address I have DirAddress set as in the Director {} resource. This is
> >> not the default system address.
> >>
> >> I have just tried to do this with IPTables and source NATing but due to
> >> a bug in the Fedora Kernel (or what seems to be) I get a panic ;(
> >>
> >> Any ideas other than me writing a quick patch to do it?
> >
> > On the director resource you can use DirAddresses.
> > On the client resource you can use FDAddresses.
> > On the storage resource you can use SDAddresses.
>
> This specifies listening addresses rather than bind addresses for out
> going communications doesn't it? Or have I misunderstood the meaning of
> these options?
The documentation does say listen. But I just tried it. It does
what you want.
--
Dan Langille : Software Developer looking for work
my resume: http://www.freebsddiary.org/dan_langille.php
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
Jonas Björklund wrote:
> Hello,
>
> On Thu, 5 Oct 2006, James Ray wrote:
>
>> All,
>> I am wanting the communications from bacula to come out of the
>> same IP
>> address I have DirAddress set as in the Director {} resource. This is
>> not the default system address.
>>
>> I have just tried to do this with IPTables and source NATing but due to
>> a bug in the Fedora Kernel (or what seems to be) I get a panic ;(
>>
>> Any ideas other than me writing a quick patch to do it?
>
> On the director resource you can use DirAddresses.
> On the client resource you can use FDAddresses.
> On the storage resource you can use SDAddresses.
This specifies listening addresses rather than bind addresses for out
going communications doesn't it? Or have I misunderstood the meaning of
these options?
--
James Ray. <[EMAIL PROTECTED]>
Computing Services
Queen Mary, University of London
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Binding to source IP address
Hello,
On Thu, 5 Oct 2006, James Ray wrote:
> All,
> I am wanting the communications from bacula to come out of the same IP
> address I have DirAddress set as in the Director {} resource. This is
> not the default system address.
>
> I have just tried to do this with IPTables and source NATing but due to
> a bug in the Fedora Kernel (or what seems to be) I get a panic ;(
>
> Any ideas other than me writing a quick patch to do it?
On the director resource you can use DirAddresses.
On the client resource you can use FDAddresses.
On the storage resource you can use SDAddresses.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] The number of files mismatch
On Thu, 5 Oct 2006, Julien Cigar wrote: > Thanks for reply. > > I read that in the manual, but unfortunately I haven't interrupt a > backup, and Bacula didn't crashed ... > What's strange is that the backup starts at 03:00am, and the last full > backup completed sucessfully I have been seeing this behaviour with simultaneous backups on 1.38.11 AB - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] The number of files mismatch
Arno Lehmann wrote:
> Hi,
>
>
hello :)
> On 10/5/2006 9:49 AM, Julien Cigar wrote:
>
>> Hello,
>>
>> ===
>> Bacula: 1.38.11
>> Os: Linux (Debian), kernel 2.6.17
>> Tape drive: Sony SDX-500C
>> Scsi card: Adaptec 2940 Ultra SCSI
>> ===
>>
>> I'm using Bacula for months and it worked fine until today:
>>
>> 05-Oct 03:00 phoenix-sd: Volume "Full-Tape-0018" previously written,
>> moving to end of data.
>> 05-Oct 03:01 phoenix-sd: phoenix-job.2006-10-05_03.00.00 Error: I cannot
>> write on Volume "Full-Tape-0018" because:
>> The number of files mismatch! Volume=67 Catalog=34
>> 05-Oct 03:01 phoenix-sd: Marking Volume "Full-Tape-0018" in Error in
>> Catalog.
>>
>> Any idea what could be the cause of this ?
>>
>
> Probably a failure when that tape was last written which prevented the
> catalog update to work. Might have been a SD, DIR, or database issue,
> for example.
>
>
The last full jobs completed successfully, with no write error or so.
The only problem could be a database issue (I'm using PostgreSQL) ...
but I'm pretty sure that it's not the case
>> Also, I have 18 volumes in my catalog (Full-Tape-0001 to
>> Full-Tape-0018), and today Bacula had to start from Full-Tape-0001 again
>> (recycling).
>> My tapes were written sequentially (from Full-Tape-0001 to
>> Full-Tape-0018), but I noticed that Bacula pruned only volumes
>> Full-Tape-0001, Full-Tape-0004, Full-Tape-0008, Full-Tape-0010. I don't
>> understand why because volume Full-Tape-0003 has been written before
>> Full-Tape-0004 and Full-Tape-0003 has not been pruned ... (I have a
>> Volume Retention of 30 days).
>>
>
> Hard to tell without knowledge of your retention times and pools and so on.
>
>
This is my pool definition :
Pool {
Name = full-tape-pool
PoolType = Backup
LabelFormat = "Full-Tape-"
Recycle = yes
RecycleOldestVolume = yes
MaximumVolumes = 18
MaximumVolumeJobs = 0
VolumeUseDuration = 0
VolumeRetention = 30 days
CatalogFiles = yes
AutoPrune = yes
AcceptAnyVolume = no
}
and for the jobs I haven't modified the job retention or file retention.
All I want in fact is that the tape gets recycled after 30 days.
> If you query the tape contents, i.e. list the jobs stord on the tapes
> not pruned, are they actually unused?
>
>
In this case Full-Tape-0004 has been purged, but not 0003 and 0002
(which is incorrect because the last written comes before) :
| 11 | Full-Tape-0002 | Full | 87,664,052,882 | 92 |
2,592,000 | 1 |0 | 0 | AIT2 | 2006-07-24 05:24:59 |
| 33 | Full-Tape-0003 | Full | 70,990,768,430 | 75 |
2,592,000 | 1 |0 | 0 | AIT2 | 2006-07-31 03:50:22 |
| 39 | Full-Tape-0004 | Purged| 90,224,088,423 | 92 |
2,592,000 | 1 |0 | 0 | AIT2 | 2006-08-01 06:03:19 |
When I query those tapes (Full-Tape-000[2|3]), no jobs are on them :
(...)
14: List Jobs stored for a given Volume name
15: List Volumes Bacula thinks are in changer
16: List Volumes likely to need replacement from age or errors
Choose a query (1-16): 14
Enter Volume name: Full-Tape-0003
No results to list.
*
> Anyway, I found that Bacula usually handles recycling correctly, even if
> I don't care which tapes to recycle when.
>
> Arno
>
>
>
Thanks,
Julien
>> Thanks for answers,
>> Julien
>>
>>
>
>
--
Julien Cigar
Belgian Biodiversity Platform
http://www.biodiversity.be
Université Libre de Bruxelles
Campus de la Plaine CP 257
Bâtiment NO, Bureau 4 N4 115C (Niveau 4)
Boulevard du Triomphe, entrée ULB 2
B-1050 Bruxelles
office: [EMAIL PROTECTED]
home: [EMAIL PROTECTED]
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] Binding to source IP address
All,
I am wanting the communications from bacula to come out of the same IP
address I have DirAddress set as in the Director {} resource. This is
not the default system address.
I have just tried to do this with IPTables and source NATing but due to
a bug in the Fedora Kernel (or what seems to be) I get a panic ;(
Any ideas other than me writing a quick patch to do it?
--
James Ray. <[EMAIL PROTECTED]>
Computing Services
Queen Mary, University of London
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] The number of files mismatch
Thanks for reply. I read that in the manual, but unfortunately I haven't interrupt a backup, and Bacula didn't crashed ... What's strange is that the backup starts at 03:00am, and the last full backup completed sucessfully Ger Apeldoorn wrote: > Hi, > > This happens if you interrupt a backup, so the catalog is not updated > properly. > > Here's how to fix it: > http://www.bacula.org/dev-manual/Tips_Suggestions.html#SECTION000367000 > > Greetings, > Ger > > Op donderdag 5 oktober 2006 09:49, schreef Julien Cigar: > >> Hello, >> >> === >> Bacula: 1.38.11 >> Os: Linux (Debian), kernel 2.6.17 >> Tape drive: Sony SDX-500C >> Scsi card: Adaptec 2940 Ultra SCSI >> === >> >> I'm using Bacula for months and it worked fine until today: >> >> 05-Oct 03:00 phoenix-sd: Volume "Full-Tape-0018" previously written, >> moving to end of data. >> 05-Oct 03:01 phoenix-sd: phoenix-job.2006-10-05_03.00.00 Error: I cannot >> write on Volume "Full-Tape-0018" because: >> The number of files mismatch! Volume=67 Catalog=34 >> 05-Oct 03:01 phoenix-sd: Marking Volume "Full-Tape-0018" in Error in >> Catalog. >> >> Any idea what could be the cause of this ? >> >> Also, I have 18 volumes in my catalog (Full-Tape-0001 to >> Full-Tape-0018), and today Bacula had to start from Full-Tape-0001 again >> (recycling). >> My tapes were written sequentially (from Full-Tape-0001 to >> Full-Tape-0018), but I noticed that Bacula pruned only volumes >> Full-Tape-0001, Full-Tape-0004, Full-Tape-0008, Full-Tape-0010. I don't >> understand why because volume Full-Tape-0003 has been written before >> Full-Tape-0004 and Full-Tape-0003 has not been pruned ... (I have a >> Volume Retention of 30 days). >> >> Thanks for answers, >> Julien >> > > -- Julien Cigar Belgian Biodiversity Platform http://www.biodiversity.be Université Libre de Bruxelles Campus de la Plaine CP 257 Bâtiment NO, Bureau 4 N4 115C (Niveau 4) Boulevard du Triomphe, entrée ULB 2 B-1050 Bruxelles office: [EMAIL PROTECTED] home: [EMAIL PROTECTED] - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] The number of files mismatch
Hi, On 10/5/2006 9:49 AM, Julien Cigar wrote: > Hello, > > === > Bacula: 1.38.11 > Os: Linux (Debian), kernel 2.6.17 > Tape drive: Sony SDX-500C > Scsi card: Adaptec 2940 Ultra SCSI > === > > I'm using Bacula for months and it worked fine until today: > > 05-Oct 03:00 phoenix-sd: Volume "Full-Tape-0018" previously written, > moving to end of data. > 05-Oct 03:01 phoenix-sd: phoenix-job.2006-10-05_03.00.00 Error: I cannot > write on Volume "Full-Tape-0018" because: > The number of files mismatch! Volume=67 Catalog=34 > 05-Oct 03:01 phoenix-sd: Marking Volume "Full-Tape-0018" in Error in > Catalog. > > Any idea what could be the cause of this ? Probably a failure when that tape was last written which prevented the catalog update to work. Might have been a SD, DIR, or database issue, for example. > Also, I have 18 volumes in my catalog (Full-Tape-0001 to > Full-Tape-0018), and today Bacula had to start from Full-Tape-0001 again > (recycling). > My tapes were written sequentially (from Full-Tape-0001 to > Full-Tape-0018), but I noticed that Bacula pruned only volumes > Full-Tape-0001, Full-Tape-0004, Full-Tape-0008, Full-Tape-0010. I don't > understand why because volume Full-Tape-0003 has been written before > Full-Tape-0004 and Full-Tape-0003 has not been pruned ... (I have a > Volume Retention of 30 days). Hard to tell without knowledge of your retention times and pools and so on. If you query the tape contents, i.e. list the jobs stord on the tapes not pruned, are they actually unused? Anyway, I found that Bacula usually handles recycling correctly, even if I don't care which tapes to recycle when. Arno > Thanks for answers, > Julien > -- IT-Service Lehmann[EMAIL PROTECTED] Arno Lehmann http://www.its-lehmann.de - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] I need to configure two drives in oneself robot with the same archive device
Hi,
On 10/5/2006 8:53 AM, Michael Brennen wrote:
> On Thu, 5 Oct 2006, Pedro Sepúlveda wrote:
>
>> I have a robotic library Storagetek L40 with twho drives Ultrium LTO
>> 2. In my server I have a network card scsii. I have Red Hat Advanced
>> Server 3.0
>>
>> With this scsii I have connected the robot as the two drives in such a
>> way that the first drive is /dev/nst0 0 and the second is /dev/nst0 1.
>> I use this commands for example:
Erm... the drives should be /dev/nst0 and /dev/nst1.
>> /bacula/etc/mtx-changer / dev/sg2 loaded 0 / dev/nst1 0
>>
>> and for the other one
>>
>> /bacula/etc/mtx-changer / dev/sg2 loaded 0 / dev/nst1 1
>>
>> I don't know as configuring this in the bacula-sd.conf so that it
>> works. Can they help me?
>
>
> This looks like it should work. Just be sure to reference only the
> 'STK-L40' device in the Storage configuration in the director, not the
> drives directly. You may have to modify the installed mtx-changer
> script per the attached patch; the patch may at least give you an idea
> of what might need to be changed.
>
>-- Michael
>
>> #
>> # An autochanger device with two drives
>> #
>> Autochanger {
>> Name = STK-L40
>> Device = STK-L40-1, STK-L40-2
>> Changer Command = "/bacula/etc/mtx-changer %c %o %S %a %d"
>> Changer Device = /dev/sg2
>> }
>>
>> Device {
>> Name = STK-L40-1
>> Drive Index = 0
>> Media Type = Ultrium2
>> Archive Device = /dev/nst1
Make this /dev/nst0
Arno
>> AutomaticMount = yes;
>> AlwaysOpen = yes;
>> RemovableMedia = yes;
>> RandomAccess = no;
>> AutoChanger = yes
>> }
>>
>> Device {
>> Name = STK-L40-2
>> Drive Index = 1
>> Media Type = Ultrium2
>> Archive Device = /dev/nst1
>> AutomaticMount = yes;
>> AlwaysOpen = yes;
>> RemovableMedia = yes;
>> RandomAccess = no;
>> AutoChanger = yes
>> }
>
>
>
>
> --- mtx-changer 2006-09-05 12:02:54.0 -0500
> +++ mtx-changer.good 2006-08-11 14:37:56.0 -0500
> @@ -2,7 +2,7 @@
> #
> # Bacula interface to mtx autoloader
> #
> -# $Id: mtx-changer.in,v 1.27 2006/08/06 01:46:59 junkmale Exp $
> +# $Id: mtx-changer.in,v 1.26 2006/04/21 11:25:15 kerns Exp $
> #
> # If you set in your Device resource
> #
> @@ -132,8 +132,8 @@
>debug "Doing mtx -f $ctl unload $slot $drive"
> #
> # enable the following line if you need to eject the cartridge
> -# mt -f $device offline
> -# sleep 10
> + mt -f $device offline
> + sleep 10
>${MTX} -f $ctl unload $slot $drive
>;;
>
> @@ -144,8 +144,8 @@
> #
> # Increase the sleep time if you have a slow device
> # or remove the sleep and add the following:
> -# wait_for_drive $device
> - sleep 15
> + wait_for_drive $device
> +# sleep 60
>exit $rtn
>;;
>
> @@ -153,7 +153,7 @@
>debug "Doing mtx -f $ctl -- to list volumes"
>make_temp_file
> # Enable the following if you are using barcodes and need an inventory
> -# ${MTX} -f $ctl inventory
> + ${MTX} -f $ctl inventory
>${MTX} -f $ctl status >${TMPFILE}
>rtn=$?
>cat ${TMPFILE} | grep " *Storage Element [0-9]*:.*Full" | awk "{print
> \$3 \$4}" | sed "s/Full *\(:VolumeTag=\)*//"
>
>
>
>
> -
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
>
>
>
>
> ___
> Bacula-users mailing list
> Bacula-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bacula-users
--
IT-Service Lehmann[EMAIL PROTECTED]
Arno Lehmann http://www.its-lehmann.de
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Need 1 Pool, 2 raid arrays.
Hi,
On 10/4/2006 6:50 PM, Brandon King wrote:
> Hello,
>
> I have just added a second raid array to my bacula server and want to
> have 2/3 of my incremental pool be on Array0 and the other 1/3 on Array1.
>
> To set this up, I added a second Device to bacula-sd.conf (both devices
> shown below):
>
> Device {
> Name = FileStorage
> Media Type = File
> Archive Device = /home/bacula
> LabelMedia = yes; # lets Bacula label unlabeled media
> Random Access = Yes;
> AutomaticMount = yes; # when device opened, read it
> RemovableMedia = no;
> AlwaysOpen = no;
> }
>
> Device {
> Name = FileStorage2
> Media Type = File
> Archive Device = /hd_array0/bacula
> LabelMedia = yes; # lets Bacula label unlabeled media
> Random Access = Yes;
> AutomaticMount = yes; # when device opened, read it
> RemovableMedia = no;
> AlwaysOpen = no;
> }
You need different file types for this to work. You found the reason
yourself ;-)
Arno
>
> The director has the following configuration for the client we call affypet:
>
> JobDefs {
> Name = "AffypetJob"
> Type = Backup
> Pool = FullBackupPool
> Level = Incremental
> Client = affypet-fd
> FileSet = "Win32FileSet"
> Schedule = "WeeklyCycle"
> Storage = File
> Messages = Standard
> Priority = 10
> }
>
> Job {
> Name = "affypet"
> Client = affypet-fd
> JobDefs = "AffypetJob"
> Write Bootstrap = "/var/lib/bacula/affypet.bsr"
> }
>
> Client {
> Name = affypet-fd
> Address = affypet.
> FDPort = 9102
> Catalog = MyCatalog
> Password = ""
> File Retention = 2 months
> Job Retention = 3 months
> AutoPrune = yes # Prune expired Jobs/Files
> }
>
> # Definition of file storage device
> Storage {
> Name = File
> Address =
> SDPort = 9103
> Password = ""
> Device = FileStorage
> Media Type = File
> }
>
> Storage {
> Name = File2
> Address =
> SDPort = 9103
> Password = ""
> Device = FileStorage2
> Media Type = File
> }
>
> # Full pool definition
> Pool {
> Name = FullBackupPool
> Pool Type = Backup
> Recycle = yes # Bacula can automatically recycle
> Volumes
> AutoPrune = yes # Prune expired volumes
> Volume Retention = 56 days # almost two months
> Volume Use Duration = 28 days # almost a month
> Accept Any Volume = yes # write on any volume in the pool
> }
>
>
> # Inc pool definition
> Pool {
> Name = IncPool
> Pool Type = Backup
> Recycle = yes # Bacula can automatically recycle
> Volumes
> AutoPrune = yes # Prune expired volumes
> Volume Retention = 28 days # almost two months
> Volume Use Duration = 7 days # almost a month
> Accept Any Volume = yes # write on any volume in the pool
> }
>
> # Diff pool definition
> Pool {
> Name = DiffPool
> Pool Type = Backup
> Recycle = yes # Bacula can automatically recycle
> Volumes
> AutoPrune = yes # Prune expired volumes
> Volume Retention = 28 days # almost two months
> Volume Use Duration = 13 days # almost a month
> Accept Any Volume = yes # write on any volume in the pool
> }
>
>
> Using the label command in bconsole, it let me create 12 volumes for the
> IncPool; 4 volumes on FileStorage (Device) and 8 volumes on
> FileStoreage2 (Device).
>
> This morning I got the message:
>
> 03-Oct 23:05 packrat-sd: Please mount Volume "IncVol11" on Storage Device
> "FileStorage" (/home/bacula) for Job affypet.2006-10-03_23.05.00
>
>
> I know that IncVol11 is on Device "FileStorage2" (/hd_array0/bacula),
> which explains why the mount failed. My question is, how to set it up so
> I can have one incremental pool with 12 volumes; 4 volumes on raid
> array1 and 8 volumes on raid array 8. Please let me know if I left out
> any information that would be helpful. Thank you in advance for any
> advice you can give.
>
> -Brandon King
>
> -
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> ___
> Bacula-users mailing list
> Bacula-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bacula-users
--
IT-Service Lehmann[EMAIL PROTECTED]
Arno Lehmann http://www.its-lehmann.de
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics thr
Re: [Bacula-users] The number of files mismatch
Hi, This happens if you interrupt a backup, so the catalog is not updated properly. Here's how to fix it: http://www.bacula.org/dev-manual/Tips_Suggestions.html#SECTION000367000 Greetings, Ger Op donderdag 5 oktober 2006 09:49, schreef Julien Cigar: > Hello, > > === > Bacula: 1.38.11 > Os: Linux (Debian), kernel 2.6.17 > Tape drive: Sony SDX-500C > Scsi card: Adaptec 2940 Ultra SCSI > === > > I'm using Bacula for months and it worked fine until today: > > 05-Oct 03:00 phoenix-sd: Volume "Full-Tape-0018" previously written, > moving to end of data. > 05-Oct 03:01 phoenix-sd: phoenix-job.2006-10-05_03.00.00 Error: I cannot > write on Volume "Full-Tape-0018" because: > The number of files mismatch! Volume=67 Catalog=34 > 05-Oct 03:01 phoenix-sd: Marking Volume "Full-Tape-0018" in Error in > Catalog. > > Any idea what could be the cause of this ? > > Also, I have 18 volumes in my catalog (Full-Tape-0001 to > Full-Tape-0018), and today Bacula had to start from Full-Tape-0001 again > (recycling). > My tapes were written sequentially (from Full-Tape-0001 to > Full-Tape-0018), but I noticed that Bacula pruned only volumes > Full-Tape-0001, Full-Tape-0004, Full-Tape-0008, Full-Tape-0010. I don't > understand why because volume Full-Tape-0003 has been written before > Full-Tape-0004 and Full-Tape-0003 has not been pruned ... (I have a > Volume Retention of 30 days). > > Thanks for answers, > Julien -- ARGOSS: your partner for atmospheric, marine & coastal information P O Box 61 8325ZH Vollenhove The Netherlands tel +31-527-242299 fax +31-527-242016 Web http://www.argoss.nl Confidentiality Notice & Disclaimer The contents of this e-mail and any attachments are intended only for the use of the e-mail addressee(s) shown. If you are not that person, or one of those persons, you are not allowed to take any action based upon it or to copy it, forward, distribute or disclose the contents of it and you should please delete it from your system. ARGOSS Holding BV and its subsidiaries do not accept any liability for any errors or omissions in the context of this e-mail or its attachments which arise as a result of Internet transmission, nor accept liability for statements which are those of the author and not clearly made on behalf of ARGOSS. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] The number of files mismatch
Hello, === Bacula: 1.38.11 Os: Linux (Debian), kernel 2.6.17 Tape drive: Sony SDX-500C Scsi card: Adaptec 2940 Ultra SCSI === I'm using Bacula for months and it worked fine until today: 05-Oct 03:00 phoenix-sd: Volume "Full-Tape-0018" previously written, moving to end of data. 05-Oct 03:01 phoenix-sd: phoenix-job.2006-10-05_03.00.00 Error: I cannot write on Volume "Full-Tape-0018" because: The number of files mismatch! Volume=67 Catalog=34 05-Oct 03:01 phoenix-sd: Marking Volume "Full-Tape-0018" in Error in Catalog. Any idea what could be the cause of this ? Also, I have 18 volumes in my catalog (Full-Tape-0001 to Full-Tape-0018), and today Bacula had to start from Full-Tape-0001 again (recycling). My tapes were written sequentially (from Full-Tape-0001 to Full-Tape-0018), but I noticed that Bacula pruned only volumes Full-Tape-0001, Full-Tape-0004, Full-Tape-0008, Full-Tape-0010. I don't understand why because volume Full-Tape-0003 has been written before Full-Tape-0004 and Full-Tape-0003 has not been pruned ... (I have a Volume Retention of 30 days). Thanks for answers, Julien -- Julien Cigar Belgian Biodiversity Platform http://www.biodiversity.be Université Libre de Bruxelles Campus de la Plaine CP 257 Bâtiment NO, Bureau 4 N4 115C (Niveau 4) Boulevard du Triomphe, entrée ULB 2 B-1050 Bruxelles office: [EMAIL PROTECTED] home: [EMAIL PROTECTED] - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] problems with Autoloader - Error SD
On 10/4/06, Grasso Maurizio <[EMAIL PROTECTED]> wrote:
> Hi MAx
>
> have you got an example of bacula-dir.conf and bacula-sd.conf for manage
> the HP Ultrium?
>
> thanks a lot
Hi,
below here are some fragments taken from my bacula-sd.conf and bacula-dir.conf,
hopefully enough to help you get the HP Autoloader going.
In the bacula-sd.conf I define the autoloader as:
Autochanger {
Name = 1x8_Autoloader
Device = Ultrium-448
Changer Command = "/etc/bacula/scripts/mtx-changer %c %o %S %a %d"
Changer Device = /dev/sg1
}
Note: if you have other SCSI devices, your changer can be detected at
a different
place than /dev/sg1. Check it by running 'tapeinfo -f /dev/sg1'.
Then the Device written in the Autochanger configuration is defined
few lines below as:
Device {
Name = Ultrium-448
Media Type = LTO-2
Archive Device = /dev/nst0
AutomaticMount = yes; # when device opened, read it
AlwaysOpen = yes;
RemovableMedia = yes;
RandomAccess = no;
## Changer Command = "/etc/bacula/scripts/mtx-changer %c %o %S %a %d"
## Changer Device = /dev/sg0
AutoChanger = yes
## Enable the Alert command only if you have the mtx package loaded
## Alert Command = "sh -c 'tapeinfo -f %c |grep TapeAlert|cat'"
}
Then in the bacula-dir.conf the tape unit is referenced uniquely as:
Storage {
Name = Autoloader
Address = scribe02
SDPort = 9103
Password = ""
Device = 1x8_Autoloader
Media Type = LTO-2
Autochanger = yes
}
An example of job defined on my director that uses the autoloader tape
is the following:
Job {
Name = "DaisyUsers"
Type = Backup
Client = daisy-fd
FileSet = "Users"
Schedule = "DaisyUsersCycle"
Storage = Autoloader
Messages = Standard
Pool = LTO2alt
}
Depending on your Linux distro + bacula installation you may need to
retouch some device or file permission and/or ownership to have
everything working.
Regards
--
Maxx
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
