[Bacula-users] DesSpooling Attr
Hi, I have seen lots of threads we this subject but no one with a solution. Despooling Attributes takes a very very long time. Seem no to be a question about tunning mysql. Data spooling: 0 active jobs, 0 bytes; 1 total jobs, 1,845,487,814 max bytes/job. Attr spooling: 1 active jobs, 18,289,433 bytes; 0 total jobs, 18,289,433 max bytes. Data spooling about 10 minutes, Attr Spooling more than 30 minutes and growing This happen for LT03 and LT=5 tapes my packets : root@bacula:~# dpkg -l | grep bacula ii bacula 5.2.6+dfsg-5ubuntu1 all network backup service - metapackage ii bacula-client5.2.6+dfsg-5ubuntu1 all network backup service - client metapackage ii bacula-common5.2.6+dfsg-5ubuntu1 amd64network backup service - common support files ii bacula-common-mysql 5.2.6+dfsg-5ubuntu1 amd64network backup service - MySQL common files ii bacula-console 5.2.6+dfsg-5ubuntu1 amd64network backup service - text console ii bacula-director-common 5.2.6+dfsg-5ubuntu1 amd64network backup service - Director common files ii bacula-director-mysql5.2.6+dfsg-5ubuntu1 amd64network backup service - MySQL storage for Director ii bacula-fd5.2.6+dfsg-5ubuntu1 amd64network backup service - file daemon ii bacula-sd5.2.6+dfsg-5ubuntu1 amd64network backup service - storage daemon ii bacula-sd-mysql 5.2.6+dfsg-5ubuntu1 amd64network backup service - MySQL SD tools ii bacula-server5.2.6+dfsg-5ubuntu1 all network backup service - server metapackage ii bacula-traymonitor 5.2.6+dfsg-5ubuntu1 amd64network backup service - tray monitor bacula-sd attributes : Maximum Block Size = 262144 Maximum Network Buffer Size = 262144 Maximum Spool Size = 20gb Maximum Job Spool Size = 10gb Spool Directory = /data/spool Anyone have and idea how to improve this?? -- Iban Cabrillo Bartolome Instituto de Fisica de Cantabria (IFCA) Santander, Spain Tel: +34942200969 Bertrand Russell: *El problema con el mundo es que los estúpidos están seguros de todo y los inteligentes están llenos de dudas* -- Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349351iu=/4140/ostg.clktrk___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] bacula TLS help
Hi Tim,
I have a similar configuration. I think that the proble is in the CN:
CN=storage.jokefire.com/emailAddress=bluethu...@gmail.com
please could you show the value for DirAddress = bacula.example.org
in my case:
DirAddress = bacula.example.org
TLS Enable = yes
TLS Require = yes
TLS Verify Peer = no
TLS CA Certificate File = /etc/bacula/certs/ca/signing-ca-1.crt
TLS Certificate = /etc/bacula/certs/cert/bacula.crt
TLS Key = /etc/bacula/certs/key/bacula.key
Looking at the cert:
openssl x509 -in /etc/bacula/certs/cert/bacula.crt -noout -text
Subject: C=ES, ST=X, O=, OU=Computing Department, CN=
bacula.example.org
The CN must be the sme that DirAddress (I did not use email address for
cert sign)
Regards, I
2013/11/27 Tim Dunphy bluethu...@gmail.com
Hello all,
I'm trying to add TLS encryption to my bacula setup.
I've been following this guide which got me almost all of the way there:
http://blog.earth-works.com/2013/08/03/configuring-bacula-to-use-tls-to-encrypt-connections/
I modified the following sections in my bacula-dir.conf file:
Director {# define myself
Name = storage.jokefire.com
DIRport = 9101# where we listen for UA connections
QueryFile = /etc/bacula/query.sql
WorkingDirectory = /var/spool/bacula
PidDirectory = /var/run
Maximum Concurrent Jobs = 1
Password = secret # Console password
Messages = Daemon
TLS Certificate = /etc/pki/tls/certs/storage.jokefire.com.crt
TLS Key = /etc/pki/tls/private/storage.jokefire.com.key
TLS CA Certificate File = /etc/pki/CA/certs/rootBaculaCA.pem
TLS Enable = yes
TLS Require = yes
TLS Verify Peer = yes
}
Client {
Name = ops.jokefire.com
Address = ops.jokefire.com
FDPort = 9102
Catalog = JokefireCatalog
Password = secret # password for FileDaemon
File Retention = 14 days# 14 days
Job Retention = 14d# 14 days
AutoPrune = yes # Prune expired Jobs/Files
TLS Certificate = /etc/pki/tls/certs/storage.jokefire.com.crt
TLS Key = /etc/pki/tls/private/storage.jokefire.com.key
TLS CA Certificate File = /etc/pki/CA/certs/rootBaculaCA.pem
TLS Enable = yes
TLS Require = yes
}
And in my bacula-fd.conf
Director {
Name = storage.jokefire.com
Password = secret
TLS Certificate = /etc/pki/tls/certs/storage.jokefire.com.crt
TLS Key = /etc/pki/tls/private/storage.jokefire.com.key
TLS CA Certificate File = /etc/pki/CA/certs/rootBaculaCA.pem
TLS Enable = yes
TLS Require = yes
}
FileDaemon { # this is me
Name = storage.jokefire.com
FDport = 9102 # where we listen for the director
WorkingDirectory = /var/bacula
Pid Directory = /var/run
Maximum Concurrent Jobs = 20
TLS Certificate = /etc/pki/tls/certs/storage.jokefire.com.crt
TLS Key = /etc/pki/tls/private/storage.jokefire.com.key
TLS CA Certificate File = /etc/pki/CA/certs/rootBaculaCA.pem
TLS Enable = yes
TLS Require = yes
}
In bacula-sd.conf:
Storage { # definition of myself
Name = storage.jokefire.com
SDPort = 9103 # Director's port
WorkingDirectory = /var/spool/bacula
Pid Directory = /var/run
Maximum Concurrent Jobs = 20
TLS Certificate = /etc/pki/tls/certs/storage.jokefire.com.crt
TLS Key = /etc/pki/tls/private/storage.jokefire.com.key
TLS CA Certificate File = /etc/pki/CA/certs/rootBaculaCA.pem
TLS Enable = yes
TLS Require = yes
TLS Verify Peer = yes
}
And finally in bconsole.conf:
Director {
Name = storage.jokefire.com
DIRport = 9101
address = storage.jokefire.com
Password = secret
TLS Certificate = /etc/pki/tls/certs/storage.jokefire.com.crt
TLS Key = /etc/pki/tls/private/storage.jokefire.com.key
TLS CA Certificate File = /etc/pki/CA/certs/rootBaculaCA.pem
TLS Enable = yes
TLS Require = yes
}
Then I bounced the services so all seems well at this point:
[root@storage:/etc/bacula] #bounce-bacula
Stopping Bacula Storage services: [ OK ]
Starting Bacula Storage services: [ OK ]
Stopping Bacula File services: [ OK ]
Starting Bacula File services: [ OK ]
Stopping Bacula Director services: [ OK ]
Starting Bacula Director services: [ OK ]
(wrote a script to bounce all services because I'm lazy)
But when I go into bconsole I get the following (until I restore from
backup)
[root@storage:/etc/bacula] #bconsole
Connecting to Director storage.jokefire.com:9101
26-Nov 22:13 bconsole JobId 0: Error: tls.c:92 Error with certificate at
depth: 0, issuer = /C=US/ST=NJ/L=Newark/O=Jokefire LLC/OU=Ops/CN=
Re: [Bacula-users] DesSpooling Attr
Iban Cabrillo wrote (2013/11/27): Data spooling: 0 active jobs, 0 bytes; 1 total jobs, 1,845,487,814 max bytes/job. Attr spooling: 1 active jobs, 18,289,433 bytes; 0 total jobs, 18,289,433 max bytes. Data spooling about 10 minutes, Attr Spooling more than 30 minutes and growing This happen for LT03 and LT=5 tapes Could you look at mysql server please? Its CPU usage, disk usage, swapping, memory usage... Here are examples from my backup server with mysql: 1) 18,688,335 files in 37 minutes, which is ~ 500,000 files per minute: 03-Nov 08:37 backup-sd: Sending spooled attrs to the Director. +Despooling 6,159,834,448 bytes ... 03-Nov 09:14 backup-dir: Bacula backup-dir 5.2.12 (12Sep12): 2) 309,936 files in time is under 1 minute: 02-Nov 14:00 backup-sd: Sending spooled attrs to the Director. +Despooling 86,532,417 bytes ... 02-Nov 14:00 backup-dir: Bacula backup-dir 5.2.12 (12Sep12): I think that there are three key settings on my server: 1) MyISAM tables 2) delay_key_write = ALL in my.cnf 3) Database on SSD Best regards. -- Rudolf Cejka cejkar at fit.vutbr.cz http://www.fit.vutbr.cz/~cejkar Brno University of Technology, Faculty of Information Technology Bozetechova 2, 612 66 Brno, Czech Republic -- Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349351iu=/4140/ostg.clktrk ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] DesSpooling Attr
Hi Cejka, The server runs smooth : top - 14:11:06 up 20:18, 2 users, load average: 0.00, 0.01, 0.24 Tasks: 154 total, 1 running, 153 sleeping, 0 stopped, 0 zombie Cpu0 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Cpu1 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Cpu2 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Cpu3 : 0.0%us, 0.3%sy, 0.0%ni, 99.7%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Cpu4 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Cpu5 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Cpu6 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Cpu7 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st Mem: 8177080k total, 6680440k used, 1496640k free, 151984k buffers Swap: 585724k total, 2516k used, 583208k free, 1713752k cached HDDs are not SSD but SAS over RAID1 hardware my.cnf : open-files-limit=8192 max_connections=500 wait_timeout=86800 innodb_data_home_dir=/data/mysql innodb_file_per_table innodb_lock_wait_timeout=500 innodb_log_file_size=1G innodb_buffer_pool_size=4G query_cache_size=128M tmp_table_size=256M thread_cache_size=16 query_cache_limit=16M max_heap_table_size=256M table_cache=256 I see my bacula version is 5.2.6 (21 February 2012) From Ubuntu 12.10 repo, yours 5.2.12 (12Sep12), I do not know if there are many improvements in th DB between both releases. Regards, I 2013/11/27 Cejka Rudolf cej...@fit.vutbr.cz Iban Cabrillo wrote (2013/11/27): Data spooling: 0 active jobs, 0 bytes; 1 total jobs, 1,845,487,814 max bytes/job. Attr spooling: 1 active jobs, 18,289,433 bytes; 0 total jobs, 18,289,433 max bytes. Data spooling about 10 minutes, Attr Spooling more than 30 minutes and growing This happen for LT03 and LT=5 tapes Could you look at mysql server please? Its CPU usage, disk usage, swapping, memory usage... Here are examples from my backup server with mysql: 1) 18,688,335 files in 37 minutes, which is ~ 500,000 files per minute: 03-Nov 08:37 backup-sd: Sending spooled attrs to the Director. +Despooling 6,159,834,448 bytes ... 03-Nov 09:14 backup-dir: Bacula backup-dir 5.2.12 (12Sep12): 2) 309,936 files in time is under 1 minute: 02-Nov 14:00 backup-sd: Sending spooled attrs to the Director. +Despooling 86,532,417 bytes ... 02-Nov 14:00 backup-dir: Bacula backup-dir 5.2.12 (12Sep12): I think that there are three key settings on my server: 1) MyISAM tables 2) delay_key_write = ALL in my.cnf 3) Database on SSD Best regards. -- Rudolf Cejka cejkar at fit.vutbr.cz http://www.fit.vutbr.cz/~cejkar Brno University of Technology, Faculty of Information Technology Bozetechova 2, 612 66 Brno, Czech Republic -- Iban Cabrillo Bartolome Instituto de Fisica de Cantabria (IFCA) Santander, Spain Tel: +34942200969 Bertrand Russell: *El problema con el mundo es que los estúpidos están seguros de todo y los inteligentes están llenos de dudas* -- Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349351iu=/4140/ostg.clktrk___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] [Bacula-announce] Bacula Status Report
On 11/26/2013 10:01 AM, Tim Claeyssens wrote: Hi Mr. Sibbald, Thanks for your very interesting status report. Thanks I do consider myself as a Bacula user (becoming addict). Nice. Please allow me to try to provide me my personal reaction based on my Bacula beginner experience. I do consider the product as being for academic minded. Bareos ,I guess tries to point towards on less academic minded marked. Yes, Bacula isn't the easiest program to learn, and at least in the past, we have targeted having the same functionality as the big commercial firms, while at the same time we did not have the human resources to build the nice web interfaces that all the commercial products have. I tried to rectify that a bit by implementing bat, but there are bigger more important projects, so bat was never finished, and it lacks some fundamental features. This has been largely corrected with the Enterprise BWeb product, and partially also by other programs such as Bacula Web. I have looked but am not sure that Bareos really has something that makes it easier to install or use. If anyone finds that is the case, please fill me in! Do know I thought of finding or making some kind of Bacula builder app (like firewall builder ) What would it build? If you are talking about initial configurations, then that we have done for the Enterprise BWeb, and we hope to shortly have an new Bacula Web interface for the community in the next few months, and I suspect that program might also be able to furnish some configuration wizards such as BWeb This could appeal less academic folks. (Time is money and future generations could uses their minds differently J) Do know I spend a lot of time building my infrastructure before even starting installing... That is a smart way to go. I do realize today that I probably should have created an NFS drive instead of big volume ,in order to be able to do more jobs at the same time on the same drive I personally don't like NFS drives as they can hang any program accessing them, and it is not easy to know when the data has actually and correctly written on the other end. On the other hand many people forget that Bacula has a Virtual Autochanger that work very well with disk allowing you some very significant flexibility. My point is : Making money with support on open source seems harsh to me though combining with something like offering (Swiss cloud) infrastructure and support seems appealing to me. Yes, I understand that many users feel that way, but Bacula (Community) would not have most of the high end features it has today without Bacula Systems, and Bacula Systems cannot survive without selling support. This relationship will bring even more high end features in the future. Best regards, Kern My very best regards, Tim Claeyssens -- Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349351iu=/4140/ostg.clktrk___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] Bacula stopped backing up on windows client
Hi all,
I'm a complete newbie in Bacula. I managed to create the following setup:
One Bacula Director (Strugatsky) - bacula-dir Version: 5.0.0 (26 January 2010)
x86_64-redhat-linux-gnu redhat (Centos 6.4)
Two Bacula Clients (Adams,Knuth-for restore only if needed) - 5.2.10 (28Jun12)
Microsoft Standard Edition (build 9200), 64-bit,Cross-compile,Win64
bacula-win64-5.2.10.exe (Windows 2012)
The idea is that I backup from Adams to Knuth.
Here is my setup:
Director
Director {# define myself
Name = bacula-dir
DIRport = 9101# where we listen for UA connections
QueryFile = /usr/libexec/bacula/query.sql
WorkingDirectory = /var/spool/bacula
PidDirectory = /var/run
Maximum Concurrent Jobs = 1
Password = PASSWORD # Console password
Messages = Daemon
}
JobDefs {
Name = DefaultJob
Type = Backup
Level = Incremental
Client = bacula-fd
FileSet = Catalog
Schedule = WeeklyCycle
Storage = File
Messages = Standard
Pool = File
Priority = 10
Write Bootstrap = /var/spool/bacula/%c.bsr
}
Job {
Name = BackupCatalog
JobDefs = DefaultJob
Level = Full
FileSet=Catalog
Schedule = WeeklyCycleAfterBackup
# This creates an ASCII copy of the catalog
# Arguments to make_catalog_backup.pl are:
# make_catalog_backup.pl catalog-name
RunBeforeJob = /usr/libexec/bacula/make_catalog_backup.pl MyCatalog
# This deletes the copy of the catalog
RunAfterJob = /usr/libexec/bacula/delete_catalog_backup
Write Bootstrap = /var/spool/bacula/%n.bsr
Priority = 11 # run after main backup
}
Schedule {
Name = WeeklyCycle
Run = Full 1st sun at 23:05
Run = Differential 2nd-5th sun at 23:05
Run = Incremental mon-sat at 23:05
}
Schedule {
Name = WeeklyCycleAdams
Run = Level=Full Pool=Adams-Full-Pool 1st sun at 23:05
Run = Level=Differential Pool=Adams-Diff-Pool 2nd-5th sun at 23:05
Run = Level=Incremental Pool=Adams-Inc-Pool mon-sat at 23:05
}
Schedule {
Name = WeeklyCycleAfterBackup
Run = Full sun-sat at 23:10
}
FileSet {
Name = Catalog
Include {
Options {
signature = MD5
Compression = GZIP9
}
File = /var/spool/bacula/bacula.sql
}
}
Client {
Name = bacula-fd
Address = strugatsky.rockhopper.ad
FDPort = 9102
Catalog = MyCatalog
Password = PASSWORD # password for FileDaemon
File Retention = 30 days# 30 days
Job Retention = 6 months# six months
AutoPrune = yes # Prune expired Jobs/Files
}
Client {
Name = adams-fd
Address = 192.168.77.207
FDPort = 9102
Catalog = MyCatalog
Password = PASSWORD
File Retention = 30 days
Job Retention = 6 months
AutoPrune = yes
}
Storage {
Name = File
Address = strugatsky.rockhopper.ad
SDPort = 9103
Password = PASSWORD
Device = FileStorage
Media Type = File
Maximum Concurrent Jobs = 20
}
Catalog {
Name = MyCatalog
dbname = bacula; dbuser = bacula; dbpassword = PASSWORD
}
Messages {
Name = Standard
mailcommand = /usr/sbin/bsmtp -h localhost -f \\(Bacula\) \%r\\ -s
\Bacula: %t %e of %c %l\ %r
operatorcommand = /usr/sbin/bsmtp -h localhost -f \\(Bacula\) \%r\\ -s
\Bacula: Intervention needed for %j\ %r
mail = root@localhost = all, !skipped
operator = root@localhost = mount
console = all, !skipped, !saved
append = /var/spool/bacula/log = all, !skipped
catalog = all
}
Messages {
Name = Daemon
mailcommand = /usr/sbin/bsmtp -h localhost -f \\(Bacula\) \%r\\ -s
\Bacula daemon message\ %r
mail = root@localhost = all, !skipped
console = all, !skipped, !saved
append = /var/log/bacula.log = all, !skipped
}
Pool {
Name = Default
Pool Type = Backup
Recycle = yes # Bacula can automatically recycle Volumes
AutoPrune = yes # Prune expired volumes
Volume Retention = 365 days # one year
}
Pool {
Name = File
Pool Type = Backup
Recycle = yes
AutoPrune = yes
Volume Retention = 365 days
Maximum Volume Bytes = 1G
Maximum Volumes = 100 # Limit number of Volumes in Pool
LabelFormat = BaculaDB
}
Pool {
Name = Scratch
Pool Type = Backup
}
Console {
Name = bacula-mon
Password = PASSWORD
CommandACL = status, .status
}
FileSet {
Name = Adams-Documents
Include {
File = c:/Documents/
File = c:/Profiles
Options {
OneFS = no
Compression = GZIP9
}
}
}
Job {
Name = Adams-Documents
Type = Backup
Level = Full
Client = adams-fd
FileSet = Adams-Documents
Schedule = WeeklyCycleAdams
Storage = KnuthBackups
Pool = Default
Messages = Standard
}
Storage {
Name = KnuthBackups
Password = PASSWORD
Address = strugatsky.rockhopper.ad
SDPort = 9103
Device = KnuthBackups
Media Type = KnuthBackups
Maximum Concurrent Jobs = 20
}
Pool {
Name = DocumentsProfiles
Pool Type = Backup
Volume Retention = 8 days
Recycle = yes
AutoPrune = yes
LabelFormat = DocumentsProfiles
Maximum Volume Bytes =
[Bacula-users] [NEW BACULA USER] - Separate DIRECTOR and DATABASE install
Hi all, I'm new on bacula and make a test platform. I try to install my database server (postgresql 9.1) on a different server of bacula-director. No problem for the PostgreSQL server. But when i try to install director on another server, whith postgresql support, the postgresql server install automatically with director. Is there anyway to install director whith postgresl support without a local postgresql database ? All my servers are debian wheezy. Thanks. (and sorry for my poor english) +-- |This was sent by bulent.beyazki...@intrinsec.com via Backup Central. |Forward SPAM to ab...@backupcentral.com. +-- -- Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349351iu=/4140/ostg.clktrk ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] Bacula stopped backing up on windows client
I restarted all bacula related services on the clients and on the director. This solved the issue. +-- |This was sent by t.i.iva...@gmail.com via Backup Central. |Forward SPAM to ab...@backupcentral.com. +-- -- Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349351iu=/4140/ostg.clktrk ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] bacula TLS help
Hello Iban! And thank you for your reply.
I have a similar configuration. I think that the problem is in the CN:
CN=storage.jokefire.com/emailAddress=bluethu...@gmail.com
please could you show the value for DirAddress = bacula.example.org
in my case:
DirAddress = bacula.example.org
TLS Enable = yes
TLS Require = yes
TLS Verify Peer = no
TLS CA Certificate File = /etc/bacula/certs/ca/signing-ca-1.crt
TLS Certificate = /etc/bacula/certs/cert/bacula.crt
TLS Key = /etc/bacula/certs/key/bacula.key
This is my director configuration from bacula-dir.conf
Director {# define myself
Name = storage.jokefire.com
DIRport = 9101# where we listen for UA connections
QueryFile = /etc/bacula/query.sql
WorkingDirectory = /var/spool/bacula
PidDirectory = /var/run
Maximum Concurrent Jobs = 1
Password = secret # Console password
Messages = Daemon
TLS Certificate = /etc/pki/tls/certs/storage.jokefire.com.crt
TLS Key = /etc/pki/tls/private/storage.jokefire.com.key
TLS CA Certificate File = /etc/pki/CA/certs/rootBaculaCA.pem
TLS Enable = yes
TLS Require = yes
TLS Verify Peer = yes
}
I hope I got you right in that this was what you needed to know.
Looking at the cert:
openssl x509 -in /etc/bacula/certs/cert/bacula.crt -noout -text
Subject: C=ES, ST=X, O=, OU=Computing Department, CN=
bacula.example.org
openssl x509 -in /etc/pki/tls/certs/storage.jokefire.com.crt -noout -text
Subject: C=US, ST=X, L=, O= LLC, OU=Ops, CN=
storage.jokefire.com/emailAddress=bluethu...@gmail.com
[root@storage:~] #hostname -f
storage.jokefire.com
The CN must be the sme that DirAddress (I did not use email address for
cert sign)
It appears as if the DirAddress and the common name do agree. Might there
be something else I could have missed?
Thanks
Tim
On Wed, Nov 27, 2013 at 7:50 AM, Iban Cabrillo cabri...@ifca.unican.eswrote:
Hi Tim,
I have a similar configuration. I think that the proble is in the CN:
CN=storage.jokefire.com/emailAddress=bluethu...@gmail.com
please could you show the value for DirAddress = bacula.example.org
in my case:
DirAddress = bacula.example.org
TLS Enable = yes
TLS Require = yes
TLS Verify Peer = no
TLS CA Certificate File = /etc/bacula/certs/ca/signing-ca-1.crt
TLS Certificate = /etc/bacula/certs/cert/bacula.crt
TLS Key = /etc/bacula/certs/key/bacula.key
Looking at the cert:
openssl x509 -in /etc/bacula/certs/cert/bacula.crt -noout -text
Subject: C=ES, ST=X, O=, OU=Computing Department, CN=
bacula.example.org
The CN must be the sme that DirAddress (I did not use email address for
cert sign)
Regards, I
2013/11/27 Tim Dunphy bluethu...@gmail.com
Hello all,
I'm trying to add TLS encryption to my bacula setup.
I've been following this guide which got me almost all of the way there:
http://blog.earth-works.com/2013/08/03/configuring-bacula-to-use-tls-to-encrypt-connections/
I modified the following sections in my bacula-dir.conf file:
Director {# define myself
Name = storage.jokefire.com
DIRport = 9101# where we listen for UA connections
QueryFile = /etc/bacula/query.sql
WorkingDirectory = /var/spool/bacula
PidDirectory = /var/run
Maximum Concurrent Jobs = 1
Password = secret # Console password
Messages = Daemon
TLS Certificate = /etc/pki/tls/certs/storage.jokefire.com.crt
TLS Key = /etc/pki/tls/private/storage.jokefire.com.key
TLS CA Certificate File = /etc/pki/CA/certs/rootBaculaCA.pem
TLS Enable = yes
TLS Require = yes
TLS Verify Peer = yes
}
Client {
Name = ops.jokefire.com
Address = ops.jokefire.com
FDPort = 9102
Catalog = JokefireCatalog
Password = secret # password for FileDaemon
File Retention = 14 days# 14 days
Job Retention = 14d# 14 days
AutoPrune = yes # Prune expired Jobs/Files
TLS Certificate = /etc/pki/tls/certs/storage.jokefire.com.crt
TLS Key = /etc/pki/tls/private/storage.jokefire.com.key
TLS CA Certificate File = /etc/pki/CA/certs/rootBaculaCA.pem
TLS Enable = yes
TLS Require = yes
}
And in my bacula-fd.conf
Director {
Name = storage.jokefire.com
Password = secret
TLS Certificate = /etc/pki/tls/certs/storage.jokefire.com.crt
TLS Key = /etc/pki/tls/private/storage.jokefire.com.key
TLS CA Certificate File = /etc/pki/CA/certs/rootBaculaCA.pem
TLS Enable = yes
TLS Require = yes
}
FileDaemon { # this is me
Name = storage.jokefire.com
FDport = 9102 # where we listen for the director
WorkingDirectory = /var/bacula
Pid Directory = /var/run
Maximum Concurrent Jobs = 20
TLS Certificate = /etc/pki/tls/certs/storage.jokefire.com.crt
TLS Key =
[Bacula-users] Bacula Console - shows conflicting info
Hoping someone can help with this. In my Bacula console, if I use the status command to check the status of my remote office server (RemoteOfficeBackup) that I have set to backup each night I get the following: Terminated Jobs: JobId LevelFiles Bytes Status FinishedName == 138 Incr 81,68419.68 G OK 23-Nov-13 12:57 RemoteOfficeBackup 140 Full 0 0 OK 23-Nov-13 13:40 BackupCatalog 141 Diff131,1111.688 G Error24-Nov-13 05:12 RemoteOfficeBackup 143 Full 0 0 OK 24-Nov-13 05:37 BackupCatalog 144 Incr 81,70019.68 G OK 25-Nov-13 13:00 RemoteOfficeBackup 146 Full 0 0 OK 25-Nov-13 13:40 BackupCatalog 147 Incr 81,73519.68 G OK 26-Nov-13 12:59 RemoteOfficeBackup 149 Full 0 0 OK 26-Nov-13 13:40 BackupCatalog 150 Incr 81,73619.68 G OK 27-Nov-13 12:57 RemoteOfficeBackup 152 Full 0 0 OK 27-Nov-13 13:39 BackupCatalog This seems to show that it is backing up and working as intended. But when I do a job list using the command list jobs I see the following: 138 | RemoteOfficeBackup | 2013-11-23 03:05:05 | B| I |0 | 0 | f | | 139 | RemoteVoIPBackup| 2013-11-23 13:38:28 | B| I | 147 | 62,126,373 | T | | 140 | BackupCatalog | 2013-11-23 13:40:40 | B| F |0 | 0 | T | | 141 | RemoteOfficeBackup | 2013-11-24 03:05:04 | B| D |0 | 0 | f | | 142 | RemoteVoIPBackup| 2013-11-24 05:12:11 | B| D |1,025 | 865,661,918 | T | | 143 | BackupCatalog | 2013-11-24 05:37:50 | B| F |0 | 0 | T | | 144 | RemoteOfficeBackup | 2013-11-25 03:05:05 | B| I |0 | 0 | f | | 145 | RemoteVoIPBackup| 2013-11-25 13:38:14 | B| I | 156 | 59,109,511 | T | | 146 | BackupCatalog | 2013-11-25 13:40:08 | B| F |0 | 0 | T | | 147 | RemoteOfficeBackup | 2013-11-26 03:05:05 | B| I |0 | 0 | f | | 148 | RemoteVoIPBackup| 2013-11-26 13:37:50 | B| I | 176 | 68,255,999 | T | | 149 | BackupCatalog | 2013-11-26 13:39:59 | B| F |0 | 0 | T | | 150 | RemoteOfficeBackup | 2013-11-27 03:05:05 | B| I |0 | 0 | f | | 151 | RemoteVoIPBackup| 2013-11-27 13:37:59 | B| I | 147 | 49,363,467 | T | | 152 | BackupCatalog | 2013-11-27 13:39:35 | B| F |0 | 0 | T Looking at this it appears the server is not being backed up, as it shows 0 files, 0 bytes and an 'f' for fatal error. Which one should I believe? Is my server being backed up? Thanks in advance. Brad +-- |This was sent by bphill...@bpwgroup.com via Backup Central. |Forward SPAM to ab...@backupcentral.com. +-- -- Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349351iu=/4140/ostg.clktrk ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] Bacula Console - shows conflicting info
One thing to add, if this helps. I checked to see if the client bacula file deamon was running. This is what I got back from the client I am trying to backup. justin@ubuntu:/etc/bacula$ sudo service bacula-fd status * bacula-fd is not running justin@ubuntu:/etc/bacula$ sudo service bacula-fd restart * Stopping Bacula File daemon... [ OK ] * Starting Bacula File daemon... [ OK ] justin@ubuntu:/etc/bacula$ sudo service bacula-fd status * bacula-fd is not running justin@ubuntu:/etc/bacula$ It seems odd that the bacula-fd says it is not running and even a service restart won't get it to run. Is this my problem? +-- |This was sent by bphill...@bpwgroup.com via Backup Central. |Forward SPAM to ab...@backupcentral.com. +-- -- Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349351iu=/4140/ostg.clktrk ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
