Re: [Bacula-users] Bnet receive challenge response error ? Authentication errors...

2010-01-14 Thread Simon Spring - GoldNet GmbH
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

__Martin

Many thanks for your reply, i have two things here (which are quite  
long):

First, another debug of baculca-fd where something diffrent in the  
debug of:
(Note: Nothing changed in configuration etc... )
- ---
$> bacula-fd -f -u root -g bacula -c /etc/bacula/bacula-fd.conf -v -s - 
d250
bacula-fd: filed_conf.c:438-0 Inserting director res: godzilla-mon
gnadmin-fd: message.c:259-0 Copy message resource 809be70 to 8099a68
gnadmin-fd: jcr.c:135-0 read_last_jobs seek to 188
gnadmin-fd: jcr.c:142-0 Read num_items=0
gnadmin-fd: pythonlib.c:113-0 No script dir. prog=FDStartUp
gnadmin-fd: filed.c:225-0 filed: listening on port 9102
gnadmin-fd: bnet_server.c:96-0 Addresses host[ipv4:192.168.99.24:9102]
gnadmin-fd: bnet.c:667-0 who=client host=192.168.99.10 port=36387
gnadmin-fd: jcr.c:617-0 OnEntry JobStatus=gnadmin-fd: jcr.c:637-0  
OnExit JobStatus=C set=C
gnadmin-fd: find.c:81-0 init_find_files ff=809d668
gnadmin-fd: job.c:233-0  ssl=0
gnadmin-fd: cram-md5.c:133-0 cram-get received: auth cram-md5  
<402525749.1263482...@godzilla-dir> ssl=0

===> Watch this:
gnadmin-fd: cram-md5.c:152-0 sending resp to challenge: iHEfd7ZmW7/ 
zg8two9ItMC
gnadmin-fd: cram-md5.c:154-0 Receive chanllenge response failed.  
ERR=Success

> and back to where we were:
gnadmin-fd: authenticate.c:126-0 cram_get_auth failed for 192.168.99.10
gnadmin-fd: job.c:252-0 Quit command loop. Canceled=0
gnadmin-fd: runscript.c:103-0 runscript: running all RUNSCRIPT object  
(ClientAfterJob) JobStatus=C
gnadmin-fd: pythonlib.c:237-0 No startup module.
gnadmin-fd: job.c:343-0 Calling term_find_files
gnadmin-fd: job.c:346-0 Done with term_find_files
gnadmin-fd: mem_pool.c:377-0 garbage collect memory pool
gnadmin-fd: job.c:348-0 Done with free_jcr
- ---

Correspondant strace to above:

$> strace -i -T -v -f -F -p 27439
Process 27441 attached with 3 threads - interrupt to quit
[pid 27440] [b7f27410] select(5, [4], NULL, NULL, {141, 34}  

[pid 27439] [b7f27410] select(4, [3], NULL, NULL, NULL 
[pid 27441] [b7f27410] clock_gettime(CLOCK_REALTIME, {1263482451,  
16266248}) = 0 <0.19>
[pid 27441] [b7f27410] futex(0x80974e4, FUTEX_WAIT, 1, {80,  
715377752}) = -1 ETIMEDOUT (Connection timed out) <80.712073>
[pid 27441] [b7f27410] futex(0x809818c, FUTEX_WAKE, 1) = 0 <0.51>
[pid 27441] [b7f27410] time(NULL)   = 1263482531 <0.37>
[pid 27441] [b7f27410] gettimeofday({1263482531, 728932}, {4294967236,  
0}) = 0 <0.47>
[pid 27441] [b7f27410] time(NULL)   = 1263482531 <0.46>
[pid 27441] [b7f27410] clock_gettime(CLOCK_REALTIME, {1263482531,  
729180922}) = 0 <0.49>
[pid 27441] [b7f27410] futex(0x80974e4, FUTEX_WAIT, 3, {119,  
999751078} 
[pid 27440] [b7f27410] <... select resumed> ) = 0 (Timeout) <141.336600>
[pid 27440] [b7f27410] open("/usr/share/locale/locale.alias",  
O_RDONLY) = 5 <0.67>
[pid 27440] [b7f27410] fstat64(5, {st_dev=makedev(9, 1),  
st_ino=134410, st_mode=S_IFREG|0644, st_nlink=1, st_uid=0, st_gid=0,  
st_blksize=4096, st_blocks=8, st_size=2582,  
st_atime=2010/01/14-16:20:24, st_mtime=2009/01/04-03:48:52,  
st_ctime=2009/12/14-12:01:19}) = 0 <0.42>
[pid 27440] [b7f27410] mmap2(NULL, 4096, PROT_READ|PROT_WRITE,  
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f24000 <0.51>
[pid 27440] [b7f27410] read(5, "# Locale name alias data base.\n#"...,  
4096) = 2582 <0.70>
[pid 27440] [b7f27410] read(5, "", 4096) = 0 <0.51>
[pid 27440] [b7f27410] close(5) = 0 <0.51>
[pid 27440] [b7f27410] munmap(0xb7f24000, 4096) = 0 <0.55>
[pid 27440] [b7f27410] open("/usr/share/locale/en_US/LC_MESSAGES/ 
libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.60>
[pid 27440] [b7f27410] open("/usr/share/locale/en/LC_MESSAGES/ 
libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.56>
[pid 27440] [b7f27410] write(1, "gnadmin-fd: cram-md5.c:154-0 Rec"...,  
77) = 77 <0.64>
[pid 27440] [b7f27410] nanosleep({5, 0}, NULL) = 0 <5.009775>
[pid 27440] [b7f27410] getpeername(4, {sa_family=AF_INET,  
sin_port=htons(32910), sin_addr=inet_addr("192.168.99.10")}, [16]) = 0  
<0.54>
[pid 27440] [b7f27410] write(1, "gnadmin-fd: authenticate.c:126-0"...,  
71) = 71 <0.69>
[pid 27440] [b7f27410] open("/usr/share/locale/en_US/LC_MESSAGES/ 
bacula.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.81>
[pid 27440] [b7f27410] open("/usr/share/locale/en/LC_MESSAGES/ 
bacula.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.59>
[pid 27440] [b7f27410] time(NULL)   = 1263482597 <0.44>
[pid 27440] [b7f27410] open("/etc/localtime", O_RDONLY) = 5 <0.57>
[pid 27440] [b7f27410] fstat64(5, {st_dev=makedev(9, 1),  
st_ino=928521, st_mode=S_IFREG|0644, st_nlink=1, st_uid=0, st_gid=0,  
st_blksize=4096, st_blocks=8, st_size=685,  
st_atime=2010/01/14-16:23:12, st_mtime=2009/12/14-12:01:22,  
st_ctime=2009/12/14-12:01:22}) = 0 <0.48>
[pid 27440] [b7f27410] fstat64(5, {st_dev=makedev(9, 1),  
st_ino=928521

Re: [Bacula-users] Bnet receive challenge response error ? Authentication errors...

2010-01-14 Thread Martin Simmons
> On Thu, 14 Jan 2010 11:52:48 +0100, Simon Spring said:
> 
> Hi Martin
> ...
> >>
> >> Here is what i get from debug on the client:
> >>
> >> $> bacula-fd -c /etc/bacula/bacula-fd.conf -v -s -d350 -f
> >> bacula-fd: filed_conf.c:438-0 Inserting director res: godzilla-mon
> >> gnadmin-fd: message.c:259-0 Copy message resource 809be78 to 8099a70
> >> gnadmin-fd: jcr.c:135-0 read_last_jobs seek to 188
> >> gnadmin-fd: jcr.c:142-0 Read num_items=0
> >> gnadmin-fd: pythonlib.c:113-0 No script dir. prog=FDStartUp
> >> gnadmin-fd: filed.c:225-0 filed: listening on port 9102
> >> gnadmin-fd: bnet_server.c:96-0 Addresses  
> >> host[ipv4:192.168.99.24:9102]
> >> gnadmin-fd: bnet.c:667-0 who=client host=192.168.99.10 port=36387
> >> gnadmin-fd: jcr.c:617-0 OnEntry JobStatus=gnadmin-fd: jcr.c:637-0
> >> OnExit JobStatus=C set=C
> >> gnadmin-fd: find.c:81-0 init_find_files ff=809c488
> >> gnadmin-fd: job.c:233-0  >> gnadmin-fd: job.c:249-0 Executing Hello command.
> >> gnadmin-fd: job.c:359-0 Calling Authenticate
> >> gnadmin-fd: cram-md5.c:73-0 send: auth cram-md5
> >> <696202879.1263398...@gnadmin-fd> ssl=0
> >> gnadmin-fd: cram-md5.c:89-0 Bnet receive challenge response error.
> >
> > This line is the problem -- there was an error receiving the reply  
> > for some
> > reason.  Unfortunately, Bacula doesn't print the error message.
> >
> > You could try attaching strace to the bacula-fd while connecting, to  
> > see if
> > there is a errno reported in one of the socket syscalls.
> 
> $> strace -i -T -v -p 25723
> Process 25723 attached - interrupt to quit
> [b7f78410] select(5, [4], NULL, NULL, NULL) = 1 (in [4]) <5.991304>
> [b7f78410] accept(4, {sa_family=AF_INET, sin_port=htons(36887),  
> sin_addr=inet_addr("192.168.99.10")}, [16]) = 5 <0.64>
> [b7f78410] getpeername(5, {sa_family=AF_INET, sin_port=htons(36887),  
> sin_addr=inet_addr("192.168.99.10")}, [16]) = 0 <0.45>
> [b7f78410] getsockname(5, {sa_family=AF_INET, sin_port=htons(9102),  
> sin_addr=inet_addr("192.168.99.24")}, [16]) = 0 <0.39>
> [b7f78410] open("/etc/hosts.allow", O_RDONLY) = 6 <0.68>
> [b7f78410] fstat64(6, {st_dev=makedev(9, 1), st_ino=928703,  
> st_mode=S_IFREG|0644, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096,  
> st_blocks=8, st_size=773, st_atime=2010/01/14-11:39:48,  
> st_mtime=2010/01/14-11:31:20, st_ctime=2010/01/14-11:31:20}) = 0  
> <0.41>
> [b7f78410] mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE| 
> MAP_ANONYMOUS, -1, 0) = 0xb7f75000 <0.44>
> [b7f78410] read(6, "# /etc/hosts.allow: list of host"..., 4096) = 773  
> <0.73>
> [b7f78410] close(6) = 0 <0.53>
> [b7f78410] munmap(0xb7f75000, 4096) = 0 <0.59>
> [b7f78410] setsockopt(5, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0  
> <0.46>
> [b7c9e488] clone(child_stack=0xb722c4c4, flags=CLONE_VM|CLONE_FS| 
> CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS| 
> CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID|CLONE_DETACHED,  
> parent_tidptr=0xb722cbf8, {entry_number:6, base_addr:0xb722cbb0, limit: 
> 1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1,  
> seg_not_present:0, useable:1}, child_tidptr=0xb722cbf8) = 26838  
> <0.70>
> [b7f78410] futex(0x80976a0, FUTEX_WAKE, 1) = 1 <0.47>
> [b7f78410] select(5, [4], NULL, NULL, NULL
> 
> Anything in there, which rings a bell?
> 
> This is all i got from strace, after the last line, bconsole fires  
> "standard" Fatal error: Unable to auth... message.

I think that is only showing the main thread.  Try adding -f to the strace
command line.

__Martin

--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


Re: [Bacula-users] Bnet receive challenge response error ? Authentication errors...

2010-01-14 Thread Simon Spring - GoldNet GmbH
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Moray


Am 13.01.2010 um 17:56 schrieb Moray Henderson:
...
>
> Does the password contain any characters outside the ASCII range  
> 32-127?
> If so, it might be a codepage conversion problem.

I'm afraid, no, all "standard" chars from a-z and 0-9. Even tested  
with Password = "abcedefghi" on both sides. Nothing.

>
> Monitor the authentication conversation with tcpdump or wireshark, and
> compare between a working connection and the non-working one?

Did that, nothing diffrent or anything i would get a clue out of it.

>
> Set SELinux to permissive mode and try again?

This is set to permissive by default on etch/4.0, even disabled SEL  
without any
change in behaviour.

Simon
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.8 (Darwin)

iEYEARECAAYFAktO+E8ACgkQFMrSEgQnfr0UJwCfQjBnrr96K7l/aPd7fPXRPRnY
dy4AnRXvC26eacUXFH4OFhtB8HMQNMo7
=/bLT
-END PGP SIGNATURE-

--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


Re: [Bacula-users] Bnet receive challenge response error ? Authentication errors...

2010-01-14 Thread Simon Spring - GoldNet GmbH
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Martin
...
>>
>> Here is what i get from debug on the client:
>>
>> $> bacula-fd -c /etc/bacula/bacula-fd.conf -v -s -d350 -f
>> bacula-fd: filed_conf.c:438-0 Inserting director res: godzilla-mon
>> gnadmin-fd: message.c:259-0 Copy message resource 809be78 to 8099a70
>> gnadmin-fd: jcr.c:135-0 read_last_jobs seek to 188
>> gnadmin-fd: jcr.c:142-0 Read num_items=0
>> gnadmin-fd: pythonlib.c:113-0 No script dir. prog=FDStartUp
>> gnadmin-fd: filed.c:225-0 filed: listening on port 9102
>> gnadmin-fd: bnet_server.c:96-0 Addresses  
>> host[ipv4:192.168.99.24:9102]
>> gnadmin-fd: bnet.c:667-0 who=client host=192.168.99.10 port=36387
>> gnadmin-fd: jcr.c:617-0 OnEntry JobStatus=gnadmin-fd: jcr.c:637-0
>> OnExit JobStatus=C set=C
>> gnadmin-fd: find.c:81-0 init_find_files ff=809c488
>> gnadmin-fd: job.c:233-0 > gnadmin-fd: job.c:249-0 Executing Hello command.
>> gnadmin-fd: job.c:359-0 Calling Authenticate
>> gnadmin-fd: cram-md5.c:73-0 send: auth cram-md5
>> <696202879.1263398...@gnadmin-fd> ssl=0
>> gnadmin-fd: cram-md5.c:89-0 Bnet receive challenge response error.
>
> This line is the problem -- there was an error receiving the reply  
> for some
> reason.  Unfortunately, Bacula doesn't print the error message.
>
> You could try attaching strace to the bacula-fd while connecting, to  
> see if
> there is a errno reported in one of the socket syscalls.

$> strace -i -T -v -p 25723
Process 25723 attached - interrupt to quit
[b7f78410] select(5, [4], NULL, NULL, NULL) = 1 (in [4]) <5.991304>
[b7f78410] accept(4, {sa_family=AF_INET, sin_port=htons(36887),  
sin_addr=inet_addr("192.168.99.10")}, [16]) = 5 <0.64>
[b7f78410] getpeername(5, {sa_family=AF_INET, sin_port=htons(36887),  
sin_addr=inet_addr("192.168.99.10")}, [16]) = 0 <0.45>
[b7f78410] getsockname(5, {sa_family=AF_INET, sin_port=htons(9102),  
sin_addr=inet_addr("192.168.99.24")}, [16]) = 0 <0.39>
[b7f78410] open("/etc/hosts.allow", O_RDONLY) = 6 <0.68>
[b7f78410] fstat64(6, {st_dev=makedev(9, 1), st_ino=928703,  
st_mode=S_IFREG|0644, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096,  
st_blocks=8, st_size=773, st_atime=2010/01/14-11:39:48,  
st_mtime=2010/01/14-11:31:20, st_ctime=2010/01/14-11:31:20}) = 0  
<0.41>
[b7f78410] mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE| 
MAP_ANONYMOUS, -1, 0) = 0xb7f75000 <0.44>
[b7f78410] read(6, "# /etc/hosts.allow: list of host"..., 4096) = 773  
<0.73>
[b7f78410] close(6) = 0 <0.53>
[b7f78410] munmap(0xb7f75000, 4096) = 0 <0.59>
[b7f78410] setsockopt(5, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0  
<0.46>
[b7c9e488] clone(child_stack=0xb722c4c4, flags=CLONE_VM|CLONE_FS| 
CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS| 
CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID|CLONE_DETACHED,  
parent_tidptr=0xb722cbf8, {entry_number:6, base_addr:0xb722cbb0, limit: 
1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1,  
seg_not_present:0, useable:1}, child_tidptr=0xb722cbf8) = 26838  
<0.70>
[b7f78410] futex(0x80976a0, FUTEX_WAKE, 1) = 1 <0.47>
[b7f78410] select(5, [4], NULL, NULL, NULL

Anything in there, which rings a bell?

This is all i got from strace, after the last line, bconsole fires  
"standard" Fatal error: Unable to auth... message.


>> gnadmin-fd: authenticate.c:131-0 cram_auth failed for 192.168.99.10
>> gnadmin-fd: job.c:252-0 Quit command loop. Canceled=0
>> gnadmin-fd: runscript.c:103-0 runscript: running all RUNSCRIPT object
>> (ClientAfterJob) JobStatus=C
>> gnadmin-fd: pythonlib.c:237-0 No startup module.
>> gnadmin-fd: job.c:343-0 Calling term_find_files
>> gnadmin-fd: job.c:346-0 Done with term_find_files
>> gnadmin-fd: mem_pool.c:377-0 garbage collect memory pool
>> gnadmin-fd: job.c:348-0 Done with free_jcr
>>
>> 192.168.99.10 is bacula server deamon
>> 192.168.99.24 is the client
>
> What is 192.168.99.10 (from the authenticate.c:131-0 line above)?   
> Maybe you
> have routing problems?

No, it was a wrong output. As stated: Net is 192.168.99.0/24 - Routing  
in there works
as expected.

Simon
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.8 (Darwin)

iEYEARECAAYFAktO94AACgkQFMrSEgQnfr2CsACaA3ED61ktOm7OAPldAYMBCTR1
gMwAoKGweqTb8AoB6pFZrLhcqmBwdHj8
=EeUb
-END PGP SIGNATURE-

--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


Re: [Bacula-users] Bnet receive challenge response error ? Authentication errors...

2010-01-13 Thread Martin Simmons
> On Wed, 13 Jan 2010 17:16:21 +0100, Simon Spring said:
> 
> Hi all
> 
> I do have a quite misterious and headacking problem with one of my  
> fresh hosts, which
> i'd like to integrate with bacula.
> 
> Whatever i try or do, i cannot connect to the bacula-fd on my client,  
> i allways get the message below:
> 
> *
> 13-Jan 16:57 godzilla-dir JobId 0: Fatal error: Unable to authenticate  
> with File daemon at "theclient.dom.local:9102". Possible causes:
> Passwords or names not the same or
> Maximum Concurrent Jobs exceeded on the FD or
> FD networking messed up (restart daemon).
> Please see http://www.bacula.org/rel-manual/ 
> faq.html#AuthorizationErrors for help.
> **
> What i am able: telnet to the host (by ip and fqdn) on the respective  
> port 9102 without problems.
> 
> I ensured at least 5 times (and let it countercheck by collegue), that  
> passwords do match on both hosts/sides (yes, they do).
> 
> There is no firewall active on both sides, hosts.allow allows  
> anything, host and ip resolve (ping etc.) vicecersa correctly.
> 
> Here is what i get from debug on the client:
> 
> $> bacula-fd -c /etc/bacula/bacula-fd.conf -v -s -d350 -f
> bacula-fd: filed_conf.c:438-0 Inserting director res: godzilla-mon
> gnadmin-fd: message.c:259-0 Copy message resource 809be78 to 8099a70
> gnadmin-fd: jcr.c:135-0 read_last_jobs seek to 188
> gnadmin-fd: jcr.c:142-0 Read num_items=0
> gnadmin-fd: pythonlib.c:113-0 No script dir. prog=FDStartUp
> gnadmin-fd: filed.c:225-0 filed: listening on port 9102
> gnadmin-fd: bnet_server.c:96-0 Addresses host[ipv4:192.168.99.24:9102]
> gnadmin-fd: bnet.c:667-0 who=client host=192.168.99.10 port=36387
> gnadmin-fd: jcr.c:617-0 OnEntry JobStatus=gnadmin-fd: jcr.c:637-0  
> OnExit JobStatus=C set=C
> gnadmin-fd: find.c:81-0 init_find_files ff=809c488
> gnadmin-fd: job.c:233-0  gnadmin-fd: job.c:249-0 Executing Hello command.
> gnadmin-fd: job.c:359-0 Calling Authenticate
> gnadmin-fd: cram-md5.c:73-0 send: auth cram-md5  
> <696202879.1263398...@gnadmin-fd> ssl=0
> gnadmin-fd: cram-md5.c:89-0 Bnet receive challenge response error.

This line is the problem -- there was an error receiving the reply for some
reason.  Unfortunately, Bacula doesn't print the error message.

You could try attaching strace to the bacula-fd while connecting, to see if
there is a errno reported in one of the socket syscalls.


> gnadmin-fd: authenticate.c:131-0 cram_auth failed for 192.168.3.10
> gnadmin-fd: job.c:252-0 Quit command loop. Canceled=0
> gnadmin-fd: runscript.c:103-0 runscript: running all RUNSCRIPT object  
> (ClientAfterJob) JobStatus=C
> gnadmin-fd: pythonlib.c:237-0 No startup module.
> gnadmin-fd: job.c:343-0 Calling term_find_files
> gnadmin-fd: job.c:346-0 Done with term_find_files
> gnadmin-fd: mem_pool.c:377-0 garbage collect memory pool
> gnadmin-fd: job.c:348-0 Done with free_jcr
> 
> 192.168.99.10 is bacula server deamon
> 192.168.99.24 is the client

What is 192.168.3.10 (from the authenticate.c:131-0 line above)?  Maybe you
have routing problems?

__Martin

--
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


Re: [Bacula-users] Bnet receive challenge response error ? Authentication errors...

2010-01-13 Thread Moray Henderson
Simon Spring wrote:
>Hi all
>
>I do have a quite misterious and headacking problem with one of my
>fresh hosts, which
>i'd like to integrate with bacula.
>
>Whatever i try or do, i cannot connect to the bacula-fd on my client,
>i allways get the message below:
>
>*
>13-Jan 16:57 godzilla-dir JobId 0: Fatal error: Unable to authenticate
>with File daemon at "theclient.dom.local:9102". Possible causes:
>Passwords or names not the same or
>Maximum Concurrent Jobs exceeded on the FD or
>FD networking messed up (restart daemon).
>Please see http://www.bacula.org/rel-manual/
>faq.html#AuthorizationErrors for help.
>**
>What i am able: telnet to the host (by ip and fqdn) on the respective
>port 9102 without problems.
>
>I ensured at least 5 times (and let it countercheck by collegue), that
>passwords do match on both hosts/sides (yes, they do).
>
>There is no firewall active on both sides, hosts.allow allows
>anything, host and ip resolve (ping etc.) vicecersa correctly.
>
>Here is what i get from debug on the client:
>
>$> bacula-fd -c /etc/bacula/bacula-fd.conf -v -s -d350 -f
>bacula-fd: filed_conf.c:438-0 Inserting director res: godzilla-mon
>gnadmin-fd: message.c:259-0 Copy message resource 809be78 to 8099a70
>gnadmin-fd: jcr.c:135-0 read_last_jobs seek to 188
>gnadmin-fd: jcr.c:142-0 Read num_items=0
>gnadmin-fd: pythonlib.c:113-0 No script dir. prog=FDStartUp
>gnadmin-fd: filed.c:225-0 filed: listening on port 9102
>gnadmin-fd: bnet_server.c:96-0 Addresses host[ipv4:192.168.99.24:9102]
>gnadmin-fd: bnet.c:667-0 who=client host=192.168.99.10 port=36387
>gnadmin-fd: jcr.c:617-0 OnEntry JobStatus=gnadmin-fd: jcr.c:637-0
>OnExit JobStatus=C set=C
>gnadmin-fd: find.c:81-0 init_find_files ff=809c488
>gnadmin-fd: job.c:233-0 gnadmin-fd: job.c:249-0 Executing Hello command.
>gnadmin-fd: job.c:359-0 Calling Authenticate
>gnadmin-fd: cram-md5.c:73-0 send: auth cram-md5
><696202879.1263398...@gnadmin-fd> ssl=0
>gnadmin-fd: cram-md5.c:89-0 Bnet receive challenge response error.
>gnadmin-fd: authenticate.c:131-0 cram_auth failed for 192.168.3.10
>gnadmin-fd: job.c:252-0 Quit command loop. Canceled=0
>gnadmin-fd: runscript.c:103-0 runscript: running all RUNSCRIPT object
>(ClientAfterJob) JobStatus=C
>gnadmin-fd: pythonlib.c:237-0 No startup module.
>gnadmin-fd: job.c:343-0 Calling term_find_files
>gnadmin-fd: job.c:346-0 Done with term_find_files
>gnadmin-fd: mem_pool.c:377-0 garbage collect memory pool
>gnadmin-fd: job.c:348-0 Done with free_jcr
>
>192.168.99.10 is bacula server deamon
>192.168.99.24 is the client
>
>bacula is on 2.4.2 on both sides, i tried with 2.4.4 on the client,
>with identical/same results.
>I'm using 2.6.18-6-686 / Debian GNU/Linux 4.0 underneath.
>
>With identical configfiles (except adresses of course) on other
>clients with identical/same releases, everything works, as expected.
>
>I tried reinstalling the client bacula-fd, with the same result.
>
>Any hint is very appreciated.
>
>Rgds

Does the password contain any characters outside the ASCII range 32-127?
If so, it might be a codepage conversion problem.

Monitor the authentication conversation with tcpdump or wireshark, and
compare between a working connection and the non-working one?

Set SELinux to permissive mode and try again?


Moray.
"To err is human.  To purr, feline"





--
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


[Bacula-users] Bnet receive challenge response error ? Authentication errors...

2010-01-13 Thread Simon Spring - GoldNet GmbH
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi all

I do have a quite misterious and headacking problem with one of my  
fresh hosts, which
i'd like to integrate with bacula.

Whatever i try or do, i cannot connect to the bacula-fd on my client,  
i allways get the message below:

*
13-Jan 16:57 godzilla-dir JobId 0: Fatal error: Unable to authenticate  
with File daemon at "theclient.dom.local:9102". Possible causes:
Passwords or names not the same or
Maximum Concurrent Jobs exceeded on the FD or
FD networking messed up (restart daemon).
Please see http://www.bacula.org/rel-manual/ 
faq.html#AuthorizationErrors for help.
**
What i am able: telnet to the host (by ip and fqdn) on the respective  
port 9102 without problems.

I ensured at least 5 times (and let it countercheck by collegue), that  
passwords do match on both hosts/sides (yes, they do).

There is no firewall active on both sides, hosts.allow allows  
anything, host and ip resolve (ping etc.) vicecersa correctly.

Here is what i get from debug on the client:

$> bacula-fd -c /etc/bacula/bacula-fd.conf -v -s -d350 -f
bacula-fd: filed_conf.c:438-0 Inserting director res: godzilla-mon
gnadmin-fd: message.c:259-0 Copy message resource 809be78 to 8099a70
gnadmin-fd: jcr.c:135-0 read_last_jobs seek to 188
gnadmin-fd: jcr.c:142-0 Read num_items=0
gnadmin-fd: pythonlib.c:113-0 No script dir. prog=FDStartUp
gnadmin-fd: filed.c:225-0 filed: listening on port 9102
gnadmin-fd: bnet_server.c:96-0 Addresses host[ipv4:192.168.99.24:9102]
gnadmin-fd: bnet.c:667-0 who=client host=192.168.99.10 port=36387
gnadmin-fd: jcr.c:617-0 OnEntry JobStatus=gnadmin-fd: jcr.c:637-0  
OnExit JobStatus=C set=C
gnadmin-fd: find.c:81-0 init_find_files ff=809c488
gnadmin-fd: job.c:233-0  ssl=0
gnadmin-fd: cram-md5.c:89-0 Bnet receive challenge response error.
gnadmin-fd: authenticate.c:131-0 cram_auth failed for 192.168.3.10
gnadmin-fd: job.c:252-0 Quit command loop. Canceled=0
gnadmin-fd: runscript.c:103-0 runscript: running all RUNSCRIPT object  
(ClientAfterJob) JobStatus=C
gnadmin-fd: pythonlib.c:237-0 No startup module.
gnadmin-fd: job.c:343-0 Calling term_find_files
gnadmin-fd: job.c:346-0 Done with term_find_files
gnadmin-fd: mem_pool.c:377-0 garbage collect memory pool
gnadmin-fd: job.c:348-0 Done with free_jcr

192.168.99.10 is bacula server deamon
192.168.99.24 is the client

bacula is on 2.4.2 on both sides, i tried with 2.4.4 on the client,  
with identical/same results.
I'm using 2.6.18-6-686 / Debian GNU/Linux 4.0 underneath.

With identical configfiles (except adresses of course) on other  
clients with identical/same releases, everything works, as expected.

I tried reinstalling the client bacula-fd, with the same result.

Any hint is very appreciated.

Rgds

Simon












-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.8 (Darwin)

iEYEARECAAYFAktN8dUACgkQFMrSEgQnfr2WDQCaA2oJElvjLEDcz3H/OWVqPhc2
vh0An0GC3pXZibFCuifDK9Schn97+Q2i
=OiRt
-END PGP SIGNATURE-

--
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users