Re: [Bacula-users] Again LTO9 and performances...

[Josh Fisher via Bacula-users]

On 6/13/24 08:13, Gary R. Schmidt wrote:

On 13/06/2024 20:12, Stefan G. Weichinger wrote:


interested as well, I need to speedup my weekly/monthly FULL runs 
(with LTO6, though: way slower anyway).


Shouldn't the file daemon do multiple jobs in parallel?

To tape you can only write ONE stream of data.

To the spooling disk there could be more than one stream.


Yes, that seems wrong:
$ grep Concurrent *.conf
bacula-dir.conf:  Maximum Concurrent Jobs = 50
bacula-dir.conf:  Maximum Concurrent Jobs = 50
bacula-fd.conf:  Maximum Concurrent Jobs = 50
bacula-sd.conf:  Maximum Concurrent Jobs = 50


Sorry, I still don't understand what to adjust ;-)

that interleaving to tape sounds dangerous to me.


That's how Bacula works - and has since day one.

We've been using it like that since 2009, starting with an LTO-4 
autoloader, currently using an LTO-6, and I'm about to start agitating 
to upgrade to LTO-9.


Interleaving is not really an issue when data spooling is enabled. Data 
is despooled to tape one job at a time. Only when the spool size is too 
small will there be any interleaving. Even then, the interleaving will 
be a whole bunch of one job's blocks followed by a whole bunch of 
another. I't not a problem, and with sufficient disk space for the 
spool, it doesn't even happen.




What I want to have: the fd(s) should be able to dump backups to the 
spooling directory WHILE in parallel the sd spools previous backup 
jobs from spooling directory to tape (assuming I have only one tape 
drive, which is the case)


Bacula does not work that way.  No doubt if you tried really hard with 
priority and concurrency and pools you could maybe make it work like 
that, but just RTFM and use it as designed.


Why not? According to 
https://www.bacula.org/15.0.x-manuals/en/main/Data_Spooling.html it 
works exactly that way already. Most importantly, concurrent jobs 
continue to spool while one job is despooling to tape. Only one job is 
ever despooling at a given time.


On the other hand, the job that is despooling has exclusive control of 
the tape drive. On the last despool for a job (there ma be more than one 
if the job data exceeds the maximum spool size), the job has to also 
despool the job's spooled attributes to the catalog database before it 
releases the tape drive. Thus, even when other concurrent jobs are 
waiting to be despooled, the tape drive will be idle (or at least 
writing from its internal buffer) while the database writes occur. This 
is one of the reasons that database performance is so important in 
Bacula. I believe that the attributes are despooled before releasing the 
tape drive in order to ensure that despooling of both data and 
attributes is an atomic operation at job completion, probably to avoid 
race conditions.






-> parallelizing things more
It all seems quite parallel to me.


Cheers,
    Gary    B-)


___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users




___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Re: [Bacula-users] LTO-8 tape report error

[Gary R. Schmidt]

On 13/06/2024 22:43, Adam Weremczuk wrote:
1. Are you suggesting running a round with a cleaning cartridge? The 
drive is not asking for it (by showing "C").


I've seen HP drives throw these errors which go away after a clean.  It 
may be an indicator that the drive is dying or the head has gone out of 
alignment.


Another cause I've heard of is a screwed SCSI terminator or cable.


2. I don't get what you mean. This is a new thread.

No, it's not.  From your initial post ("> " pre-pended to make sure 
nothing thinks it's a real header):

> References: 
>  
>  
>  
>  <00c41d8c-a902-4863-8a58-e487aa291...@mcleod-schmidt.id.au>
>  <62627549-4851-4f11-9c9c-c56b10f46...@xunil.at>

And please don't top-post.

Cheers,
GaryB-)


___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Re: [Bacula-users] LTO-8 tape report error

[Adam Weremczuk]

1. Are you suggesting running a round with a cleaning cartridge? The 
drive is not asking for it (by showing "C").


2. I don't get what you mean. This is a new thread.

On 13/06/2024 13:07, Gary R. Schmidt wrote:


Any idea what's going on?


1 - Clean your heads.

2 - Don't hijack threads, start a new one.

 Cheers,
     Gary    B-)


___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users



___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Re: [Bacula-users] Bacularis: set of rights for tape operators

[Stefan G. Weichinger]

Am 13.06.24 um 14:05 schrieb Marcin Haba:

This is wrong because if multiple commands are closed in one big quotes, 
it is treated as one command that does not exist, so it causes no access 
to anything.


You need to write it as this (without quotes):

   CommandAcl = gui, .api, .status, .storage, delete, show, mount, 
umount, label, update


Or in a way as Bacularis writes mutli-value directives:

   CommandAcl = ".api"
   CommandAcl = "gui"
   CommandAcl = ".status"
   CommandAcl = ".storage"
   CommandAcl = "delete"
   CommandAcl = "show"
   CommandAcl = "mount"
   CommandAcl = "umount"
   CommandAcl = "label"
   CommandAcl = "update"

Both work in the same way.


ok, thanks. corrected that, restarted bacula-dir .. that user still sees 
both Storage-Resources. Anyway, not a problem right now.





___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Re: [Bacula-users] Again LTO9 and performances...

[Gary R. Schmidt]

On 13/06/2024 20:12, Stefan G. Weichinger wrote:


interested as well, I need to speedup my weekly/monthly FULL runs 
(with LTO6, though: way slower anyway).


Shouldn't the file daemon do multiple jobs in parallel?

To tape you can only write ONE stream of data.

To the spooling disk there could be more than one stream.


Yes, that seems wrong:
$ grep Concurrent *.conf
bacula-dir.conf:  Maximum Concurrent Jobs = 50
bacula-dir.conf:  Maximum Concurrent Jobs = 50
bacula-fd.conf:  Maximum Concurrent Jobs = 50
bacula-sd.conf:  Maximum Concurrent Jobs = 50


Sorry, I still don't understand what to adjust ;-)

that interleaving to tape sounds dangerous to me.


That's how Bacula works - and has since day one.

We've been using it like that since 2009, starting with an LTO-4 
autoloader, currently using an LTO-6, and I'm about to start agitating 
to upgrade to LTO-9.


What I want to have: the fd(s) should be able to dump backups to the 
spooling directory WHILE in parallel the sd spools previous backup jobs 
from spooling directory to tape (assuming I have only one tape drive, 
which is the case)


Bacula does not work that way.  No doubt if you tried really hard with 
priority and concurrency and pools you could maybe make it work like 
that, but just RTFM and use it as designed.



-> parallelizing things more
It all seems quite parallel to me.


Cheers,
GaryB-)


___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Re: [Bacula-users] LTO-8 tape report error

[Gary R. Schmidt]

On 13/06/2024 21:12, Adam Weremczuk wrote:
This was working until yesterday when I rebooted the Bacula/LTO server 
and now gives:


-

  sg_raw -o - -r 1024 -t 60 -v /dev/sg1 8c 00 00 00 00 00 00 00  00 00 
00 00 04 00 00 00

     cdb to send: [8c 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00]
SCSI Status: Check Condition

Sense Information:
Fixed format, current; Sense key: Illegal Request
Additional sense: Invalid command operation code
  Raw sense data (in hex), sb_len=21, embedded_len=21
     70 00 05 00 00 00 00 0d  00 00 00 00 20 00 00 00
     00 00 00 00 00

Error 9 occurred, no data received
Illegal request, Invalid opcode

-

All scheduled backups were written last night and all other Bacula 
scripts executed fine.


Any idea what's going on?


1 - Clean your heads.

2 - Don't hijack threads, start a new one.

Cheers,
GaryB-)


___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Re: [Bacula-users] Bacularis: set of rights for tape operators

[Marcin Haba]

On Thu, 13 Jun 2024 at 13:35, Stefan G. Weichinger  wrote:

> Am 13.06.24 um 12:44 schrieb Marcin Haba:
>
> > You don't need to restart anything. Are you sure that you set all
> > CommandAcl directive values in the Console ACL? They should be one
> > command per one CommandAcl field:
> >
> > CommandAcl = gui
> > CommandAcl = .api
> > CommandAcl = .status
> > CommandAcl = .storage
> > CommandAcl = delete
> > CommandAcl = show
> > CommandAcl = mount
> > CommandAcl = umount
> > CommandAcl = label
> > CommandAcl = update
> >
> > If storage is not listed in the storage table it can be that the
> > .storage command is missing there. Could you confirm it? Also StorageAcl
> > needs to be set to all Storage that should be available for that user.
>
> all there, looks like this on the shell:
>
> Console {
>Name = "tape-operator-ACL"
>Password = ""
>StorageAcl = "HP-Autoloader"
>CommandAcl = "gui, .api, .status, .storage, delete, show, mount,
> umount, label, update"
> }
>

Hello Stefan,

This is wrong because if multiple commands are closed in one big quotes, it
is treated as one command that does not exist, so it causes no access to
anything.

You need to write it as this (without quotes):

  CommandAcl = gui, .api, .status, .storage, delete, show, mount, umount,
label, update

Or in a way as Bacularis writes mutli-value directives:

  CommandAcl = ".api"
  CommandAcl = "gui"
  CommandAcl = ".status"
  CommandAcl = ".storage"
  CommandAcl = "delete"
  CommandAcl = "show"
  CommandAcl = "mount"
  CommandAcl = "umount"
  CommandAcl = "label"
  CommandAcl = "update"

Both work in the same way.

Best regards,
Marcin Haba (gani)

-- 

"Greater love hath no man than this, that a man lay down his life for
his friends." Jesus Christ

"Większej miłości nikt nie ma nad tę, jak gdy kto życie swoje kładzie
za przyjaciół swoich." Jezus Chrystus
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Re: [Bacula-users] Bacularis: set of rights for tape operators

[Stefan G. Weichinger]

Am 13.06.24 um 12:44 schrieb Marcin Haba:

You don't need to restart anything. Are you sure that you set all 
CommandAcl directive values in the Console ACL? They should be one 
command per one CommandAcl field:


CommandAcl = gui
CommandAcl = .api
CommandAcl = .status
CommandAcl = .storage
CommandAcl = delete
CommandAcl = show
CommandAcl = mount
CommandAcl = umount
CommandAcl = label
CommandAcl = update

If storage is not listed in the storage table it can be that the 
.storage command is missing there. Could you confirm it? Also StorageAcl 
needs to be set to all Storage that should be available for that user.


all there, looks like this on the shell:

Console {
  Name = "tape-operator-ACL"
  Password = ""
  StorageAcl = "HP-Autoloader"
  CommandAcl = "gui, .api, .status, .storage, delete, show, mount, 
umount, label, update"

}


I want to get the information which tapes to insert into the
loader. Which ones are "overwritable" right now, what is needed for the
next jobs to be successful. I'd like not to have to process retention
times etc by myself.


I understand. Thanks. I don't know exactly this type of function in 
Bacula, however in the status director is information about the next 
volume for scheduled backup jobs. In Bacularis it is in (Director -> 
Tab: Actions -> Button: Status director  ->  SubTab: Raw status). For 
restore the required volumes are listed in the restore wizard before 
starting the restore.


ok. I see. Thanks so far!



___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

[Bacula-users] LTO-8 tape report error

[Adam Weremczuk]

This was working until yesterday when I rebooted the Bacula/LTO server 
and now gives:


-

 sg_raw -o - -r 1024 -t 60 -v /dev/sg1 8c 00 00 00 00 00 00 00  00 00 
00 00 04 00 00 00

cdb to send: [8c 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00]
SCSI Status: Check Condition

Sense Information:
Fixed format, current; Sense key: Illegal Request
Additional sense: Invalid command operation code
 Raw sense data (in hex), sb_len=21, embedded_len=21
70 00 05 00 00 00 00 0d  00 00 00 00 20 00 00 00
00 00 00 00 00

Error 9 occurred, no data received
Illegal request, Invalid opcode

-

All scheduled backups were written last night and all other Bacula 
scripts executed fine.


Any idea what's going on?

Adam


___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Re: [Bacula-users] Bacularis: set of rights for tape operators

[Marcin Haba]

On Thu, 13 Jun 2024 at 10:46, Stefan G. Weichinger  wrote:

> Am 13.06.24 um 10:24 schrieb Marcin Haba:
> > On Thu, 13 Jun 2024 at 10:02, Stefan G. Weichinger  > > wrote:
> > I don't see how to assign the ACL to that user, sry
> >
> >
> >   In the create API basic user window there is an option with label:
> >
> > "Create dedicated Bconsole config file"
> >
> > When you check this checkbox, you will see the Console ACL and Director
> > to select. It is exactly this option and this select to choose Console
> ACL.
>
> found, ok. Did so but now the user sees NO Storage in "Storage" although
> I chose the autoloader in the ACL etc
>
> Do I have to restart things after that patch or so?
>

Hello Stefan,

You don't need to restart anything. Are you sure that you set all
CommandAcl directive values in the Console ACL? They should be one command
per one CommandAcl field:

CommandAcl = gui
CommandAcl = .api
CommandAcl = .status
CommandAcl = .storage
CommandAcl = delete
CommandAcl = show
CommandAcl = mount
CommandAcl = umount
CommandAcl = label
CommandAcl = update

If storage is not listed in the storage table it can be that the .storage
command is missing there. Could you confirm it? Also StorageAcl needs to be
set to all Storage that should be available for that user.


> > I am not sure if I understand this question. What type of inserting do
> > you have on mind? Is it a list of volumes that will be used in backups
> > or something else?
>
> I would I want to get the information which tapes to insert into the
> loader. Which ones are "overwritable" right now, what is needed for the
> next jobs to be successful. I'd like not to have to process retention
> times etc by myself.
>
>
I understand. Thanks. I don't know exactly this type of function in Bacula,
however in the status director is information about the next volume for
scheduled backup jobs. In Bacularis it is in (Director -> Tab: Actions ->
Button: Status director  ->  SubTab: Raw status). For restore the required
volumes are listed in the restore wizard before starting the restore.

Best regards,
Marcin Haba (gani)
-- 

"Greater love hath no man than this, that a man lay down his life for
his friends." Jesus Christ

"Większej miłości nikt nie ma nad tę, jak gdy kto życie swoje kładzie
za przyjaciół swoich." Jezus Chrystus
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Re: [Bacula-users] Again LTO9 and performances...

[Stefan G. Weichinger]

interested as well, I need to speedup my weekly/monthly FULL runs 
(with LTO6, though: way slower anyway).


Shouldn't the file daemon do multiple jobs in parallel?

To tape you can only write ONE stream of data.

To the spooling disk there could be more than one stream.


Yes, that seems wrong:
$ grep Concurrent *.conf
bacula-dir.conf:  Maximum Concurrent Jobs = 50
bacula-dir.conf:  Maximum Concurrent Jobs = 50
bacula-fd.conf:  Maximum Concurrent Jobs = 50
bacula-sd.conf:  Maximum Concurrent Jobs = 50


Sorry, I still don't understand what to adjust ;-)

that interleaving to tape sounds dangerous to me.

What I want to have: the fd(s) should be able to dump backups to the 
spooling directory WHILE in parallel the sd spools previous backup jobs 
from spooling directory to tape (assuming I have only one tape drive, 
which is the case)


-> parallelizing things more

thanks!





___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Re: [Bacula-users] Bacularis: set of rights for tape operators

[Stefan G. Weichinger]

Am 13.06.24 um 10:24 schrieb Marcin Haba:
On Thu, 13 Jun 2024 at 10:02, Stefan G. Weichinger > wrote:

I don't see how to assign the ACL to that user, sry


  In the create API basic user window there is an option with label:

"Create dedicated Bconsole config file"

When you check this checkbox, you will see the Console ACL and Director 
to select. It is exactly this option and this select to choose Console ACL.


found, ok. Did so but now the user sees NO Storage in "Storage" although 
I chose the autoloader in the ACL etc


Do I have to restart things after that patch or so?

Yes, if the Console ACL will be assigned, then the user will see only 
storage resources allowed by the Console ACL. For volumes, it isn't part 
of Console ACLs, so they are listed all.


ok
our file-based volumes will be deleted soon anyway. And that guy is 
intelligent, he's able to filter information :-)



The user is able to "Update slots", nice .. this is important if he
swaps tapes etc

Ah, that leads me to another newbie question:

with amanda there was a command that showed me which tapes from which
pool were to be inserted next. So amanda checked retention times etc
etc
and asked for the next tapes to be overwritten. I haven't yet seen or
understood if Bacula is also able to provide me or the tape operator
with a list of tapes to be inserted (or even which ones to take out of
the library).

So far I look for "Full" tapes and remove them etc


I am not sure if I understand this question. What type of inserting do 
you have on mind? Is it a list of volumes that will be used in backups 
or something else?


I would I want to get the information which tapes to insert into the 
loader. Which ones are "overwritable" right now, what is needed for the 
next jobs to be successful. I'd like not to have to process retention 
times etc by myself.




___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Re: [Bacula-users] Bacularis: set of rights for tape operators

[Marcin Haba]

On Thu, 13 Jun 2024 at 10:02, Stefan G. Weichinger  wrote:

> Am 12.06.24 um 17:09 schrieb Marcin Haba:
> > Hello Stefan,
> >
> > Thanks for your question. It showed me that it might be good to
> > add descriptions for the resources available for each role and probably
> > a new section in the documentation that describes it.
> >
> > For the question about setting access for the tape operator, I assume
> > that you have the tape library already configured with Bacularis.
> > Setting this access for that user can be done in various ways. Below I
> > described the most detailed manual way (without using wizards) that
> > enables to set most options and tune access exactly to what needed.
>
> At first: thank you for the quick and detailed reply! Going through
> right now.
>
> > So, the steps are following:
> >
> > 1) I would propose to create a new role for the tape operator with the
> > following resources assigned (Security -> Tab: Roles):
> >
> >   - VolumeList - that gives access to the volume list page
> >   - VolumeView - that gives access to the detailed single volume view
> page
> >   - StorageList - that gives access to the storage list page
> >   - StorageView - that gives access to the single storage view page
> >
> > 2) Then I would propose to create a console ACL (Security -> Tab:
> > Console Acls) with:
> >
> >   - StorageAcl - that has defined all storage resources for which you
> > would like to give access for the tape operator
> >   - CommandAcl - with commands: gui, .api, .status, .storage, delete,
> > show, mount, umount, label, update
> >
> > 3) Next I would create a new API user. Normally it can be done in
> > (Security -> Tab: API basic users) but during preparing this mail I
> > found a bug in this function. Because of that please apply a one line
> > patch (for version 3.2.0) from attachment to file located usually here:
> >
> > /usr/share/bacularis/protected/API/Modules/BaculaConfig.php
> >
> > Once it is done, you can create in (Security -> Tab: API basic users)
> > new tape operator user and assign to it the Console Acl from point 2)
>

Hello Stefan,

Thanks for feedback from your tries.

I don't see how to assign the ACL to that user, sry
>

 In the create API basic user window there is an option with label:

"Create dedicated Bconsole config file"

When you check this checkbox, you will see the Console ACL and Director to
select. It is exactly this option and this select to choose Console ACL.

> 4) At the end I would create a new API host connection (Security -> Tab:
> > API hosts) to the API host with the tape library and Bacularis API
> > installed providing basic user credentials from step 3)
> >
> > 5) Finally I would create a new Bacularis Web user for this tape
> > operator (Security -> Tab: Users) with:
> >
> >   - tape operator role created in point 1)
> >   - API host created in point 4)
> >
> > 6) [Extra point] To avoid modifying by the tape operator anything
> > related to the Bacula SD configuration, you can switch all Bacula
> > resources for this user to 'read-only' or 'no access' mode. It is
> > possible to do on (API Panel -> Basic users -> Edit: tape operator
> > user). There you can set "read-only" or "no access" permissions for
> > every Bacula resource or all at once (Resource permissions section).
>
>
> looks promising. That user sees STorage and Volumes, although currently
> it sees both "File" and "Tape" volumes ... both pools, both storages.
>
> That isn't a problem for me, it's just missing, maybe because I skipped
> 6) and 3) isn't fully done. (patch applied, yes)
>

Yes, if the Console ACL will be assigned, then the user will see only
storage resources allowed by the Console ACL. For volumes, it isn't part of
Console ACLs, so they are listed all.


>
> The user is able to "Update slots", nice .. this is important if he
> swaps tapes etc
>
> Ah, that leads me to another newbie question:
>
> with amanda there was a command that showed me which tapes from which
> pool were to be inserted next. So amanda checked retention times etc etc
> and asked for the next tapes to be overwritten. I haven't yet seen or
> understood if Bacula is also able to provide me or the tape operator
> with a list of tapes to be inserted (or even which ones to take out of
> the library).
>
> So far I look for "Full" tapes and remove them etc
>

I am not sure if I understand this question. What type of inserting do you
have on mind? Is it a list of volumes that will be used in backups or
something else?

hints welcome
>
> Thanks so far, in an hour I show the tape op around Bacularis for the
> first time :-)
>

Good luck with it :-)

Best regards,
Marcin Haba (gani)


-- 

"Greater love hath no man than this, that a man lay down his life for
his friends." Jesus Christ

"Większej miłości nikt nie ma nad tę, jak gdy kto życie swoje kładzie
za przyjaciół swoich." Jezus Chrystus
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net

Re: [Bacula-users] Bacularis: set of rights for tape operators

[Stefan G. Weichinger]

Am 12.06.24 um 17:09 schrieb Marcin Haba:

Hello Stefan,

Thanks for your question. It showed me that it might be good to 
add descriptions for the resources available for each role and probably 
a new section in the documentation that describes it.


For the question about setting access for the tape operator, I assume 
that you have the tape library already configured with Bacularis. 
Setting this access for that user can be done in various ways. Below I 
described the most detailed manual way (without using wizards) that 
enables to set most options and tune access exactly to what needed.


At first: thank you for the quick and detailed reply! Going through 
right now.



So, the steps are following:

1) I would propose to create a new role for the tape operator with the 
following resources assigned (Security -> Tab: Roles):


  - VolumeList - that gives access to the volume list page
  - VolumeView - that gives access to the detailed single volume view page
  - StorageList - that gives access to the storage list page
  - StorageView - that gives access to the single storage view page

2) Then I would propose to create a console ACL (Security -> Tab: 
Console Acls) with:


  - StorageAcl - that has defined all storage resources for which you 
would like to give access for the tape operator
  - CommandAcl - with commands: gui, .api, .status, .storage, delete, 
show, mount, umount, label, update


3) Next I would create a new API user. Normally it can be done in 
(Security -> Tab: API basic users) but during preparing this mail I 
found a bug in this function. Because of that please apply a one line 
patch (for version 3.2.0) from attachment to file located usually here:


/usr/share/bacularis/protected/API/Modules/BaculaConfig.php

Once it is done, you can create in (Security -> Tab: API basic users) 
new tape operator user and assign to it the Console Acl from point 2)


I don't see how to assign the ACL to that user, sry


4) At the end I would create a new API host connection (Security -> Tab: 
API hosts) to the API host with the tape library and Bacularis API 
installed providing basic user credentials from step 3)


5) Finally I would create a new Bacularis Web user for this tape 
operator (Security -> Tab: Users) with:


  - tape operator role created in point 1)
  - API host created in point 4)

6) [Extra point] To avoid modifying by the tape operator anything 
related to the Bacula SD configuration, you can switch all Bacula 
resources for this user to 'read-only' or 'no access' mode. It is 
possible to do on (API Panel -> Basic users -> Edit: tape operator 
user). There you can set "read-only" or "no access" permissions for 
every Bacula resource or all at once (Resource permissions section).



looks promising. That user sees STorage and Volumes, although currently 
it sees both "File" and "Tape" volumes ... both pools, both storages.


That isn't a problem for me, it's just missing, maybe because I skipped 
6) and 3) isn't fully done. (patch applied, yes)


The user is able to "Update slots", nice .. this is important if he 
swaps tapes etc


Ah, that leads me to another newbie question:

with amanda there was a command that showed me which tapes from which 
pool were to be inserted next. So amanda checked retention times etc etc 
and asked for the next tapes to be overwritten. I haven't yet seen or 
understood if Bacula is also able to provide me or the tape operator 
with a list of tapes to be inserted (or even which ones to take out of 
the library).


So far I look for "Full" tapes and remove them etc

hints welcome

Thanks so far, in an hour I show the tape op around Bacularis for the 
first time :-)




___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users