[Bacula-users] Console restrictions
Hi, I am a bacula user and I have the same problem explained in this bug report: http://bugs.bacula.org/bug_view_advanced_page.php?bug_id=672 In this report, Kern say: This is mostly fixed in version 1.39.22 (latest beta). I say mostly because there is still at least one place where it is hard to apply ACLs. I have it on my list of things to look at. The case you show in this bug is fixed, in addition there is a WhereACL that defines where a restricted console can restore files that improves security even more if you force the user to always restore to the original location. But, I have installed this beta version (1.39.22) and the latest beta version (1.39.26) and I have the same problem in both cases. Thanks. David. -- View this message in context: http://www.nabble.com/Console-restrictions-tf2538911.html#a7073222 Sent from the Bacula - Users mailing list archive at Nabble.com. - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Howto configure restricted restore console
Hi,
You must put ComandACL param whit only restore comand in Console resurce in
bacula-dir.conf
CommandACL = restore
David.
Masopust, Christian wrote:
Hello,
i tried to configure my wxconsole to only allow the restore mode.
my bacula-dir.conf is:
Director {# define myself
Name = atpcc7fc-dir
DIRport = 9101# where we listen for UA connections
QueryFile = /opt/bacula/etc/query.sql
WorkingDirectory = /var/bacula
PidDirectory = /var/run
Password = DirectorPassword
Messages = Daemon
Maximum Concurrent Jobs = 20
FD Connect Timeout = 5 minutes
}
Console {
Name = RestoreClients
Password = RestorePassword
ClientACL = *all*
StorageACL = *all*
JobACL = RestoreFiles
CatalogACL = DefaultCatalog
}
...
wx-console.conf is:
Director {
Name = atpcc7fc-dir
DIRport = 9101
address = director-dns
Password = DirectorPassword
}
Console {
Name = RestoreClients
Password = RestorePassword
}
then i'll don't get any filesets from the director (.filesets gives empty
list, no
error-message). so, what is wrong with my Console in bacula-dir.conf?
What are the correct ACL-settings so that only restore (and maybe status)
commands
are possible?
thanks a lot,
christian
-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job
easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
--
View this message in context:
http://www.nabble.com/Howto-configure-restricted-restore-console-tf2458500.html#a6852883
Sent from the Bacula - Users mailing list archive at Nabble.com.
-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] Concurrent restores problem
Hi, I use bacula version 1.38.11 and I have configured concurrent Jobs using.
I use too a aoutochanger with two drives to keep my backups.
If I run two simultaneous Backups using diferent tapes (one for each Job),
bacula use the two drives and make this two backups concurrently.
But if I run one backup and one restore simultaneously or two restores
simultaneously only running one Job and the other is waiting storage:
Running Jobs:
JobId Level Name Status
==
546 RestoreFiles-Linux.2006-10-16_11.50.19 is running
547 RestoreFiles-Linux.2006-10-16_12.05.39 is waiting on max
Storage jobs
My concurrent Jobs configuration is the following:
bacula-dir.conf
Director {# define myself
Name = bacula-dir
Description = Director de Bacula
DIRport = 9101# where we listen for UA connections
QueryFile = /etc/bacula/query.sql
WorkingDirectory = /var/bacula
PidDirectory = /var/run
Maximum Concurrent Jobs = 20
Password = *# Console password
Messages = Standard
}
JobDefs {
Name = Default
Type = Backup
Level = Full
Schedule = Setmanal
Storage = Autochanger
Max Wait Time = 15 minutes
Full Backup Pool = Full
Pool = Full
Priority = 10
Maximum Concurrent Jobs = 20
}
...
All my Jobs using Default JobDefs
...
Job {
Name = RestoreFiles-Linux
Type = Restore
Client=bacula-fd
FileSet=Linux
Storage = Autochanger
Pool = Full
Messages = Linux
Where = /tmp/bacula-restores
Maximum Concurrent Jobs = 20
}
Job {
Name = RestoreFiles-Windows
Type = Restore
Client=davidov-fd
FileSet=Windows
Storage = Autochanger
Pool = Full
Messages = Windows
Where = D:/bacula-restores
Maximum Concurrent Jobs = 20
}
...
All my clients are similar this:
...
Client {
Name = bacula-fd
#Address = localhost
Address = bacula.upc.es
#FDPort = 29102
FDPort = 9102
Catalog = MyCatalog
Password = bacula-fd # password for FileDaemon
File Retention = 30 days# 30 days
Job Retention = 6 months# six months
AutoPrune = yes # Prune expired Jobs/Files
Maximum Concurrent Jobs = 20
Storage {
Name = Autochanger
Address = bacula.upc.es
SDPort = 9103
Password = storage-Autochanger # password for Storage daemon
Device = Autochanger # must be same as Device in
Storage daemon
Media Type = DLT-7000 # must be same as MediaType in
Storage daemon
Autochanger = yes # enable for autochanger device
Maximum Concurrent Jobs = 20
}
bacula-fd:
FileDaemon { # this is me
Name = bacula-fd
FDport = 9102 # where we listen for the director
WorkingDirectory = /var/bacula
Pid Directory = /var/run
Maximum Concurrent Jobs = 20
}
bacula-sd:
Storage { # definition of myself
Name = bacula-sd
SDPort = 9103 # Director's port
WorkingDirectory = /var/bacula
Pid Directory = /var/run
Maximum Concurrent Jobs = 20
}
Can anybody help me, please?
Tanks.
David.
--
View this message in context:
http://www.nabble.com/Concurrent-restores-problem-tf2458801.html#a6853040
Sent from the Bacula - Users mailing list archive at Nabble.com.
-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] problem with TLS
Hi, I have rebuild bacula rmps to offer TLS suport (modifying --with-openssl
option for --with-openssl=/ in bacula.spec file).
I have created a certificate (/etc/bacula/cert.pem) and I have added TLS
directives, only for one client (bacula-fd), in my bacula config files like
this:
- bacula-dir.conf:
Director {# define myself
Name = bacula-dir
Description = Director de Bacula
DIRport = 9101# where we listen for UA connections
QueryFile = /etc/bacula/query.sql
WorkingDirectory = /var/bacula
PidDirectory = /var/run
Maximum Concurrent Jobs = 20
Password = director-password# Console password
Messages = Standard
TLS Enable = yes
TLS Require = no
TLS Verify Peer = no
#TLS Allowed CN = [EMAIL PROTECTED]
# This is a server certificate, used for incoming
# console connections.
TLS Certificate = /etc/bacula/cert.pem
}
Client {
Name = bacula-fd
Address = bacula-fd_adress
FDPort = 9102
Catalog = MyCatalog
Password = bacula-fd-password # password for FileDaemon
File Retention = 30 days# 30 days
Job Retention = 6 months# six months
AutoPrune = yes # Prune expired Jobs/Files
Maximum Concurrent Jobs = 20
TLS Enable = yes
TLS Require = yes
#TLS Verify Peer = yes
# This is a server certificate. It is used by connecting
# directors to verify the authenticity of this file daemon
TLS Certificate = /etc/bacula/cert.pem
}
Storage {
Name = FDA
# Do not use localhost here
Address = bacula_storage_adress # N.B. Use a fully qualified
name here
SDPort = 9103
Password = storage-FDA-password
Device = FDA
Media Type = File
Maximum Concurrent Jobs = 20
TLS Require = yes
# This is a client certificate, used by the director to
# connect to the storage daemon
TLS Certificate = /etc/bacula/cert.pem
}
- bacula-fd.conf:
Director {
Name = bacula-dir
Password = bacula-fd-password
TLS Enable = yes
TLS Require = yes
TLS Verify Peer = yes
# Allow only the Director to connect
TLS Allowed CN = [EMAIL PROTECTED]
# This is a server certificate. It is used by connecting
# directors to verify the authenticity of this file daemon
TLS Certificate = /etc/bacula/cert.pem
}
- bacula-fd.conf:
Storage { # definition of myself
Name = bacula-sd
SDPort = 9103 # Director's port
WorkingDirectory = /var/bacula
Pid Directory = /var/run
Maximum Concurrent Jobs = 20
# These TLS configuration options are used for incoming
# file daemon connections. Director TLS settings are handled
# below.
TLS Enable = yes
TLS Require = yes
# Peer certificate is not required/requested -- peer validity
# is verified by the storage connection cookie provided to the
# File Daemon by the director.
TLS Verify Peer = no
# This is a server certificate. It is used by connecting
# file daemons to verify the authenticity of this storage daemon
TLS Certificate = /etc/bacula/cert.pem
}
Director {
Name = bacula-dir
Password = storage-FDA-password
TLS Enable = yes
TLS Require = yes
# Require the connecting director to provide a certificate
# with the matching CN.
TLS Verify Peer = yes
TLS Allowed CN = [EMAIL PROTECTED]
# This is a server certificate. It is used by the connecting
# director to verify the authenticity of this storage daemon
TLS Certificate = /etc/bacula/cert.pem
}
And when I restart bacula, show this error:
11-Jul 11:08 bacula-dir: ERROR in tls.c:224 Error setting cipher list, no
valid ciphers available
*** glibc detected *** free(): invalid pointer: 0x002bfd00 ***
/etc/bacula/bacula-ctl-dir: line 197: 6475 Aborted
${BACDIRBIN}/bacula-dir $2 ${OPTIONS} -v -c ${BACDIRCFG}/bacula-dir.conf
I can't find the reason for this error. Can anybody help-me?
Furthermore, if I erase all previous TLS directives in bacula config files
and I restart bacula, it start OK, but when I run a job , it finish in error
and show the following message:
10-Jul 15:00 bacula-dir: Start Backup JobId 496,
Job=Bacula.2006-07-10_15.00.00
10-Jul 15:00 bacula-dir: Bacula.2006-07-10_15.00.00 Fatal error:
Authorization problem: Remote server requires TLS.
10-Jul 15:00 bacula-dir: Bacula.2006-07-10_15.00.00 Error: Bacula 1.38.9
(02May06): 10-Jul-2006 15:00:01
JobId: 496
Job:Bacula.2006-07-10_15.00.00
Backup Level: Full
Client: bacula-fd
i686-redhat-linux-gnu,redhat,Enterprise 3.0
FileSet:Linux 2006-06-22 11:01:20
Pool: Full
Storage:FDA-FULL
Scheduled time: 10-Jul-2006 15:00:00
Start time: 10-Jul-2006 15:00:01
End time: 10-Jul-2006 15:00:01
Elapsed time: 0 secs
Priority: 10
FD Files Written: 0
SD Files Written: 0
FD Bytes
Re: [Bacula-users] bacula TLS
A bacula user called Dave wrote me the following message: Hi, Do you have a procedure for setting up those tls keys? I'm trying to find a tutorial on that subject. As for your tls issue what OS are you running on and what version of bacula? The tls error required, but not configured in bacula, suggests to me that when you compiled and installed bacula or did it from a distribution package it didn't pull in the tls dependencies. Here's a way to find out: ldd `which bacula-dir` amoung that output you should see the following libs: libssl.so.4 libcrypto.so.4 libcrypt.so.3 If you don't have those that's at least the first part of the problem. As for the other errors about config file errors with tls require that might fix them as well, but i am not sure. Please keep me up to date on this issue as i am trying to get tls going here as well. Thanks. Dave. And my answer is the following: Hi Dave, I have used the bacula manual information http://bacula.org/rel-manual/Bacula_TLS.html and the following web information http://www.calivia.com/blog/mike/bacula-with-support-for-tls-encryption My bacula director machine has installed a Red Hat Enterprise 4 and I use bacula version 1.38.9. I have solved some errors putting the next lines in all places that use TLS: TLS Key = /etc/bacula/cert.pem TLS CA Certificate File = /etc/bacula/cert.pem (I use the same certificate that I used with TLS Certificate). Now, when I start bacula, the errors only are: [EMAIL PROTECTED] bacula]# ./bacula start Starting the Bacula Storage daemon 07-Jul 11:14 bacula-sd: Fatal error: TLS required but not configured in Bacula.Starting the Bacula File daemon 07-Jul 11:14 bacula-fd: Fatal error: TLS required but not configured in Bacula.07-Jul 11:14 bacula-fd: ERROR in filed.c:188 Please correct configuration file: /etc/bacula/bacula-fd.conf Starting the Bacula Director daemon 07-Jul 11:14 bacula-dir: Fatal error: Failed to initialize TLS context for Director bacula-dir in /etc/bacula/bacula-dir.conf. 07-Jul 11:14 bacula-dir: Fatal error: TLS required but not configured in Bacula. 07-Jul 11:14 bacula-dir: Fatal error: TLS required but not configured in Bacula. 07-Jul 11:14 bacula-dir: Fatal error: TLS required but not configured in Bacula. 07-Jul 11:14 bacula-dir: Fatal error: TLS required but not configured in Bacula. 07-Jul 11:14 bacula-dir ERROR TERMINATION Please correct configuration file: /etc/bacula/bacula-dir.conf Furthermore, I tryed ldd `which bacula-dir` comand, and the output is the following: [EMAIL PROTECTED] ~]# ldd `which bacula-dir` libmysqlclient_r.so.10 = /usr/lib/mysql/libmysqlclient_r.so.10 (0x00a7e000) libz.so.1 = /usr/lib/libz.so.1 (0x00a64000) libpthread.so.0 = /lib/tls/libpthread.so.0 (0x00a5) libssl.so.4 = /lib/libssl.so.4 (0x0028c000) libcrypto.so.4 = /lib/libcrypto.so.4 (0x00124000) libstdc++.so.5 = /usr/lib/libstdc++.so.5 (0x00c01000) libm.so.6 = /lib/tls/libm.so.6 (0x00a25000) libgcc_s.so.1 = /lib/libgcc_s.so.1 (0x00b88000) libc.so.6 = /lib/tls/libc.so.6 (0x008f9000) libcrypt.so.1 = /lib/libcrypt.so.1 (0x003a2000) libnsl.so.1 = /lib/libnsl.so.1 (0x00438000) /lib/ld-linux.so.2 (0x008e) libgssapi_krb5.so.2 = /usr/lib/libgssapi_krb5.so.2 (0x00de8000) libkrb5.so.3 = /usr/lib/libkrb5.so.3 (0x00d69000) libcom_err.so.2 = /lib/libcom_err.so.2 (0x00d64000) libk5crypto.so.3 = /usr/lib/libk5crypto.so.3 (0x00101000) libresolv.so.2 = /lib/libresolv.so.2 (0x00b73000) libdl.so.2 = /lib/libdl.so.2 (0x00a4a000) The libcrypt.so.3 lib don't appear! :) Then, how I can solve this problem? Anybody can help me? Thanks. David. -- View this message in context: http://www.nabble.com/bacula-TLS-tf1785382.html#a5214386 Sent from the Bacula - Users forum at Nabble.com. Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] bacula TLS
Hi, I have created a certificate (/etc/bacula/cert.pem) and I have added TLS
directives, only for one client (bacula-fd), in my bacula config files like
this:
- bacula-dir.conf:
Director {# define myself
Name = bacula-dir
Description = Director de Bacula
DIRport = 9101# where we listen for UA connections
QueryFile = /etc/bacula/query.sql
WorkingDirectory = /var/bacula
PidDirectory = /var/run
Maximum Concurrent Jobs = 20
Password = director-password# Console password
Messages = Standard
TLS Enable = yes
TLS Require = no
TLS Verify Peer = no
#TLS Allowed CN = [EMAIL PROTECTED]
# This is a server certificate, used for incoming
# console connections.
TLS Certificate = /etc/bacula/cert.pem
}
Client {
Name = bacula-fd
Address = bacula-fd_adress
FDPort = 9102
Catalog = MyCatalog
Password = bacula-fd-password # password for FileDaemon
File Retention = 30 days# 30 days
Job Retention = 6 months# six months
AutoPrune = yes # Prune expired Jobs/Files
Maximum Concurrent Jobs = 20
TLS Enable = yes
TLS Require = yes
#TLS Verify Peer = yes
# This is a server certificate. It is used by connecting
# directors to verify the authenticity of this file daemon
TLS Certificate = /etc/bacula/cert.pem
}
Storage {
Name = FDA
# Do not use localhost here
Address = bacula_storage_adress # N.B. Use a fully qualified
name here
SDPort = 9103
Password = storage-FDA-password
Device = FDA
Media Type = File
Maximum Concurrent Jobs = 20
TLS Require = yes
# This is a client certificate, used by the director to
# connect to the storage daemon
TLS Certificate = /etc/bacula/cert.pem
}
- bacula-fd.conf:
Director {
Name = bacula-dir
Password = bacula-fd-password
TLS Enable = yes
TLS Require = yes
TLS Verify Peer = yes
# Allow only the Director to connect
TLS Allowed CN = [EMAIL PROTECTED]
# This is a server certificate. It is used by connecting
# directors to verify the authenticity of this file daemon
TLS Certificate = /etc/bacula/cert.pem
}
- bacula-fd.conf:
Storage { # definition of myself
Name = bacula-sd
SDPort = 9103 # Director's port
WorkingDirectory = /var/bacula
Pid Directory = /var/run
Maximum Concurrent Jobs = 20
# These TLS configuration options are used for incoming
# file daemon connections. Director TLS settings are handled
# below.
TLS Enable = yes
TLS Require = yes
# Peer certificate is not required/requested -- peer validity
# is verified by the storage connection cookie provided to the
# File Daemon by the director.
TLS Verify Peer = no
# This is a server certificate. It is used by connecting
# file daemons to verify the authenticity of this storage daemon
TLS Certificate = /etc/bacula/cert.pem
}
Director {
Name = bacula-dir
Password = storage-FDA-password
TLS Enable = yes
TLS Require = yes
# Require the connecting director to provide a certificate
# with the matching CN.
TLS Verify Peer = yes
TLS Allowed CN = [EMAIL PROTECTED]
# This is a server certificate. It is used by the connecting
# director to verify the authenticity of this storage daemon
TLS Certificate = /etc/bacula/cert.pem
}
And when I restart bacula ...
[EMAIL PROTECTED] bacula]# ./bacula restart
Stopping the Bacula File daemon
Stopping the Bacula Storage daemon
Stopping the Bacula Director daemon
Starting the Bacula Storage daemon
06-Jul 13:07 bacula-sd: Fatal error: TLS required but not configured in
Bacula.
06-Jul 13:07 bacula-sd: Fatal error: TLS Key file not defined for
Director b acula-dir in /etc/bacula/bacula-sd.conf.
06-Jul 13:07 bacula-sd: Fatal error: Neither TLS CA Certificate or TLS
CA Ce rtificate Dir are defined for Director bacula-dir in
/etc/bacula/bacula-sd.co nf. At least one CA certificate store is required
when using TLS Verify Peer.
Starting the Bacula File daemon
06-Jul 13:07 bacula-fd: Fatal error: TLS required but not configured in
Bacula.
06-Jul 13:07 bacula-fd: ERROR in filed.c:188 Please correct configuration
file: /etc/bacula/bacula-fd.conf
Starting the Bacula Director daemon
06-Jul 13:07 bacula-dir: Fatal error: TLS Key file not defined for
Director bacula-dir in /etc/bacula/bacula-dir.conf.
06-Jul 13:07 bacula-dir: Fatal error: TLS required but not configured in
Bacula .
06-Jul 13:07 bacula-dir: Fatal error: TLS required but not configured in
Bacula .
06-Jul 13:07 bacula-dir: Fatal error: TLS required but not configured in
Bacula .
06-Jul 13:07 bacula-dir: Fatal error: TLS required but not configured in
Bacula .
06-Jul 13:07 bacula-dir ERROR TERMINATION
Please correct configuration file: /etc/bacula/bacula-dir.conf
Thanks.
--
View this message in context:
http://www.nabble.com/bacula-TLS-tf1785382.html#a5197990
Sent from the Bacula - Users forum at
[Bacula-users] tray-monitor problem
Hi,
I have a little problem with tray-monitor. It Show the following error
message in bacula-dir:
http://www.nabble.com/user-images/3145.png
My tray-monitor.conf file is like this:
#
# Bacula Tray Monitor Configuration File
#
Monitor {
Name = bacula-mon
Password = bacula-mon-password # password for the Directors
RefreshInterval = 5 seconds
}
Client {
Name = bacula-fd
Address = bacula_adress
FDPort = 9102
Password = bacula-mon-password # password for FileDaemon
}
Client {
Name = brandy2-fd
Address = brandy2_adress
FDPort = 9102
Password = bacula-mon-password # password for FileDaemon
}
Client {
Name = corleone-fd
Address = corleone_adress
FDPort = 9102
Password = bacula-mon-password # password for FileDaemon
}
Client {
Name = LIA-fd
Address = LIA_adress
FDPort = 9102
Password = bacula-mon-password # password for FileDaemon
}
Client {
Name = davidov-fd
Address = davidov_adress
FDPort = 9102
Password = bacula-mon-password # password for FileDaemon
}
Client {
Name = camaleo-fd
Address = camaleo_adress
FDPort = 9102
Password = bacula-mon-password # password for FileDaemon
}
Storage {
Name = bacula-sd
Address = bacula_storage_adress
SDPort = 9103
Password = bacula-mon-password # password for StorageDaemon
}
Director {
Name = bacula-dir
DIRport = 9101
address = bacula_dir_adress
}
All my clients configuration file (bacula-fd.conf) and my storage
configuration file (bacula-sd.conf) contains the following restricted
Director resource:
Director {
Name = bacula-mon
Password = bacula-mon-password
Monitor = yes
}
And my bacula-dir.conf file contains the following restricted Console
resource:
Console {
Name = bacula-mon
Password = bacula-mon-password
CommandACL = status, .status
}
And my catalog resource in bacula-dir.conf is like this:
Catalog {
Name = MyCatalog
dbname = bacula; user = bacula; password =
}
Can anybody help me?
Thanks.
--
View this message in context:
http://www.nabble.com/tray-monitor-problem-tf1893440.html#a5178225
Sent from the Bacula - Users forum at Nabble.com.
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] tray-monitor problem
Thanks Georger, your suggestion is correct. I have solved the problem. Regards, David. -- View this message in context: http://www.nabble.com/tray-monitor-problem-tf1893440.html#a5180138 Sent from the Bacula - Users forum at Nabble.com. Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Client console restrictions
Hi,
I think I have found the problem:
In bacula-dir.conf file I have configured de brandy2 client console
resource like this (rest of my clients are similar):
Console {
Name = Brandy2-con
Password =
JobACL = Brandy2, RestoreFiles-Linux
ClientACL = brandy2-fd
StorageACL = FDA
ScheduleACL = *all*
PoolACL = *all*
FileSetACL = Linux
CatalogACL = MyCatalog
CommandACL = run, q, quit, restore, status
}
I have a job RestoreFiles-Linux for restore all linux clients.
Including this job to console resource in bacucula-dir.conf file, when you
launch a different client restore job, bacula don't acccept this client job,
but it accept the RestoreFiles-Linux job and restore another client selected
files using this job (RestoreFiles-Linux). But if you don't put this job in
console resource, from client console can not restore files.
I have tryed configure one FileSet and one restore job for ech client, but
don't work, because it choose corresponding restore job and restore equally.
I don't know which is the solution. Somebody can help me?
Thanks.
--
View this message in context:
http://www.nabble.com/Client-console-restrictions-t1773302.html#a4882125
Sent from the Bacula - Users forum at Nabble.com.
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] bacula TLS
Hi, I have installed all my bacula system (director, storage, clients, consoles, ...) by means of rpm or debian packages. Specifically, my director version is 1.38.9 and it is installed in red hat system. But, the problem is that I want use TLS comunications and I think that installing bacula with packages not is possible connect bacula with openssl automatically, because when I configure this, bacula-dir not start and launch errors. If I install bacula by means of packages I can not use TLS? This is true? There are some way to solve this problem? Thanks. -- View this message in context: http://www.nabble.com/bacula-TLS-t1785382.html#a4862565 Sent from the Bacula - Users forum at Nabble.com. ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] bacula TLS
Thanks Ben, I will try your suggestion. David. -- View this message in context: http://www.nabble.com/bacula-TLS-t1785382.html#a4868833 Sent from the Bacula - Users forum at Nabble.com. ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Client console restrictions
On Monday 12 June 2006 13:09, David Rodriguez Demelos wrote:
I'm a new bacula user and I have a little problem with client console.
I have configured the client console restrictions in bacula-dir.conf like
this:
...
Console {
Name = Client Name
Password =
JobACL = Job Client Name, RestoreFiles-Linux
ClientACL = client-fd
StorageACL = My Storage
ScheduleACL = *all*
PoolACL = *all*
FileSetACL = Linux
CatalogACL = MyCatalog
CommandACL = run, q, quit, restore, status
}
...
With this configuration I want the client console only can use its jobs.
When I execute run jobs from client it work ok, but when I execute a
restore job from client with bconsole program and select the option number
3 (Enter list of comma separated JobIds to select), I can select a other
client job. Bacula launch a error message (bacula can not use this job),
but the restore process continue and finally it restore this backup in the
first client computer. This is very dangeraous, because any client can get
another client data.
Bacula should not allow the user to use JobIds from another client, so this
sounds like a bug. However, you will need to provide me with specific
output
showing this problem as well as a bit of information about your setup.
Please see the Support Page of the Bacula web site. In particular without
knowing what Bacula version you are using, I cannot even start ...
How I can configure this for to solve this problem?
Thanks.
--
View this message in context:
http://www.nabble.com/Client-console-restrictions-t1773302.html#a4826704
Sent from the Bacula - Users forum at Nabble.com.
___
Bacula-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/bacula-users
--
Best regards,
Kern
(
/\
V_V
Hi, tanks Kern for your attention.
My bacula server version is 1.38.9 and it is installed in Red Hat EL4. I
have a windows 2003 client (Davidov) and Red Hat EL4 client (brandy2) with
version 1.38.9 too. Furthermore I have two Debian clients (Corleone and LIA)
with version 1.36.3. I have the problem in all my clients.
I have configured my bacula-dir.conf file like this:
#
# Default Bacula Director Configuration file
#
# The only thing that MUST be changed is to add one or more
# file or directory names in the Include directive of the
# FileSet resource.
#
# For Bacula release 1.38.9 (02 May 2006) -- redhat Enterprise 3.0
#
# You might also want to change the default email address
# from root to your address. See the mail and operator
# directives in the Messages resource.
#
#
Director ##
Director {# define myself
Name = bacula-dir
Description = Director de Bacula
DIRport = 9101# where we listen for UA connections
QueryFile = /etc/bacula/query.sql
WorkingDirectory = /var/bacula
PidDirectory = /var/run
Maximum Concurrent Jobs = 20
Password = # Console password
Messages = Standard
}
JobDefs ##
JobDefs {
Name = Default
Type = Backup
Level = Full
Schedule = Setmanal
Storage = FDA
Messages = Standard
Full Backup Pool = Full
Pool = Full
Priority = 10
Maximum Concurrent Jobs = 20
}
### Jobs
##
# Bacula Job #
##
Job {
Name = Bacula
Client = bacula-fd
JobDefs = Default
FileSet = Linux
Write Bootstrap = /var/bacula/Bacula.bsr
}
###
# Brandy2 Job #
###
Job {
Name = Brandy2
Client = brandy2-fd
JobDefs = Default
FileSet = Linux
Write Bootstrap = /var/bacula/Brandy2.bsr
}
# Corleone Job #
Job {
Name = Corleone
Client = corleone-fd
JobDefs = Default
FileSet = Linux
Write Bootstrap = /var/bacula/Corleone.bsr
}
###
# LIA Job #
###
Job {
Name = LIA
Client = LIA-fd
JobDefs = Default
FileSet = Linux
Write Bootstrap = /var/bacula/LIA.bsr
}
###
# Davidov Job #
###
Job {
Name = Davidov
Client = davidov-fd
JobDefs = Default
FileSet = Windows
Write Bootstrap = /var/bacula/Davidov.bsr
}
#
# BackupCatalog Job #
#
Job {
Name = BackupCatalog
Type = Backup
JobDefs = Default
Level = Full
Client = bacula-fd
FileSet=Catalog
Schedule = Setmanal-Despres-Backup
Storage = FDA
Messages = Standard
Pool = Full
# This creates an ASCII copy of the catalog
RunBeforeJob = /etc/bacula/make_catalog_backup bacula bacula
# This deletes the copy of the catalog
RunAfterJob = /etc/bacula/delete_catalog_backup
Write Bootstrap = /var/bacula/BackupCatalog.bsr
Priority = 11 # run after main backup
Maximum Concurrent Jobs = 20
[Bacula-users] bug in bacula documentation
Hi, I think that I have found a bug in chapter Using stunnel to encrypt comunications to clients in bacula documentation. Especifically in config Files for stunnel to Encrypt the Control Channel section. There are a example of stunnel-dir.conf and stunnel-fd1.conf files, and two files are identical. Look like a copy-paste bug. Furthermore, I think that this chapter is not explained very well. There are things not very clear. Thanks. -- View this message in context: http://www.nabble.com/bug-in-bacula-documentation-t1780891.html#a4848836 Sent from the Bacula - Users forum at Nabble.com. ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
