[Bacula-users] Restoring with Encryption
Hello, Can you or anyone else on these lists confirm having this problem with Linux 2.0.3 (please ensure it is really 2.0.3) clients?If so, could you please send me (if possible) one or more of the files (say as a compressed tar file) that demonstrates the problem. It would simplify fixing the bug a lot if it is reproducible on Linux. Best regards, Kern On Thursday 26 April 2007 17:23, Vladimir Doisan wrote: I forgot to mention - the original client that I tested on was 32bit only P4 running Win2k (server was the same as in the test below ). It also had exact same issue when restoring. I do however doubt that we have 32/64 bit problem. Even though the CPUs are capable of 64 bit extensions - they are not used on 32 bit OS installs. Kern Sibbald wrote: Thank you for the tests -- very interesting. They help narrow down the problem, because I suspect that we are running into a 32/64 bit problem. On Thursday 26 April 2007 14:59, Vladimir Doisan wrote: Did the tests indicated in the bug 807, here are results client-fd Version: 2.0.3 (06 March 2007) VSS Linux Cross-compile Win32 Windows XP SP2 32 bit, Athlon 64 servr-dir Version: 2.0.3 (06 March 2007) - compiled from source Gentoo Linux 32 bit, Xeon 2.8 GHz (64 bit capable) * 1. Backup/Restore test with 4096 bit key * Backup: Ok Restore 1 file: Restores File Ok, with message - Error: ../../filed/restore.c:815 Signature validation failed for c:/Documents and Settings/user/Desktop/mail.txt: Signature is invalid * 2. Backup/Restore test with 2048 bit key * Backup: Ok Restore 1 file: Restores File Ok, with message - Error: ../../filed/restore.c:815 Signature validation failed for c:/Documents and Settings/user/Desktop/mail.txt: Signature is invalid * 3. Are you able to restore these encrypted files to a Linux client without error? * (using 2048b key) Restore 1 file: Restores File Ok, with message - restore.c:815 Signature validation failed for c:/Documents and Settings/user/Desktop/mail.txt: Signature is invalid * 4. Can you restore encrypted Linux files to your Windows client without error? * (using 2048b key) Restore 1 file:Restores File Ok, with message - Error: ../../findlib/attribs.c:457 Unable to set file times /backups/restores/etc/bacula/upgrade-win32-client.txt: ERR=The system cannot find the path specified. Let me know if you need me to run any more tests Vladimir Kern Sibbald wrote: On Tuesday 24 April 2007 23:09, Vladimir Doisan wrote: Was this problem resolved? To the best of my knowledge this is not resolved. There is a bug report (807) open on it, and I have requested some additional information from the submitter(s). The current situation as I see it is: - There was a bug opened on this problem the 20th of March. - I am not sure that Landon was aware of that bug report (he is now). - The submitter assigned the bug to Robert Nelson. - Robert responded to the bug report requesting more information, so I was under the impression he was working on fixing it. - A few days ago, he informed me (and I paraphrase it) I'm not working on it because it is a core code bug not a Windows bug. - I am not very happy with this situation (nothing being done), and I would like to see Robert and Landon put their heads together and get this bug fixed as soon as possible. - If it isn't fixed (or at least seriously worked on) in the next two weeks, I will work on it. I won't be very happy that this is not resolved by the two Bacula developers who are most capable to fix it, so there will be some important fall-out. Best regards, Kern PS: In order to try to isolate the conditions that create this problem, please take a look at the bug report and possibly attempt to answer some of the questions I asked in a bugnote. Also, please try 2048 bit keys, and indicate on the bug report whether or not any non-Intel or any 64 bit machines are involved. PPS: Please make *absolutely* sure your client is a 2.0.3 version. A similar, if not the same problem existed in an earlier 2.0.0 version. When restoring some file (tried 3 different files in 3 different folders) I get same error, however the file gets restored without problems. Bacula 2.0.3 Linux Dir and Win2k client. I am also using 4096 bit keys (bacula doc had example as 2048) Thanks. 24-Apr 16:48 backup-dir: Start Restore Job RestoreFiles.2007-04-24_16.48.41 24-Apr 16:48 backup-sd: Ready to read from volume RanoTuesdayVolume0001 on device FileStorage (/backups). 24-Apr 16:48 backup-sd: Forward spacing Volume RanoTuesdayVolume0001 to file:block 0:213. 24-Apr 15:49 erind-fd: RestoreFiles.2007-04-24_16.48.41 Error: ../../filed/restore.c:815 Signature validation failed for c:/Documents and
Re: [Bacula-users] Restoring with Encryption
Was this problem resolved? When restoring some file (tried 3 different files in 3 different folders) I get same error, however the file gets restored without problems. Bacula 2.0.3 Linux Dir and Win2k client. I am also using 4096 bit keys (bacula doc had example as 2048) Thanks. 24-Apr 16:48 backup-dir: Start Restore Job RestoreFiles.2007-04-24_16.48.41 24-Apr 16:48 backup-sd: Ready to read from volume RanoTuesdayVolume0001 on device FileStorage (/backups). 24-Apr 16:48 backup-sd: Forward spacing Volume RanoTuesdayVolume0001 to file:block 0:213. 24-Apr 15:49 erind-fd: RestoreFiles.2007-04-24_16.48.41 Error: ../../filed/restore.c:815 Signature validation failed for c:/Documents and Settings/ErinD/Desktop/Monthly Trans Summary.xls: Signature is invalid 24-Apr 16:48 backup-dir: RestoreFiles.2007-04-24_16.48.41 Error: Bacula 2.0.3 (06Mar07): 24-Apr-2007 16:48:47 JobId: 4 Job:RestoreFiles.2007-04-24_16.48.41 Client: erind-fd Start time: 24-Apr-2007 16:48:43 End time: 24-Apr-2007 16:48:47 Files Expected: 1 Files Restored: 1 Bytes Restored: 64,788 Rate: 16.2 KB/s FD Errors: 1 FD termination status: Error SD termination status: OK Termination:*** Restore Error *** 24-Apr 16:48 backup-dir: Begin pruning Jobs. 24-Apr 16:48 backup-dir: No Jobs found to prune. 24-Apr 16:48 backup-dir: Begin pruning Files. 24-Apr 16:48 backup-dir: No Files found to prune. 24-Apr 16:48 backup-dir: End auto prune. Kern Sibbald wrote: Hello, At this point, you should isolate the problem to a single file if possible that is causing the problem. Do a backup of that file only, then a restore. If you can isolate the error in that way, please open a bug report, giving the appropriate output error messages, uploading your bacula-dir.conf and bacula-sd.conf files (stripped of passwords), and the file in question. It seems to me that there is already a bug report open on Win32 for this problem, so you might want to check it as well -- possibly adding your information to it if it is identical to what you are seeing. Best regards, Kern On Saturday 31 March 2007 03:15, Michael Havas wrote: Hello, There was a bug in the restore code that was fixed in 2.0.3. Please update (at least the client FD), test again, and let us know if it resolves the problem. Best regards, Kern Hi Kern. Thanks for getting back to me. I upgraded the client to version 2.0.3 but I'm experiencing the same problem indicated in the original message below. I have verified that the client is now indeed 2.0.3 as well as the server. You may find the revised errors below: === + 30-Mar 20:05 el4_32_build-dir: Start Restore Job RestoreFiles.2007-03-30_20.05.43 30-Mar 20:05 el4_32_build-sd: 3301 Issuing autochanger loaded? drive 0 command. 30-Mar 20:05 el4_32_build-sd: 3302 Autochanger loaded? drive 0, result is Slot 4. 30-Mar 20:06 el4_32_build-sd: Ready to read from volume AHP562L3 on device Drive-1 (/dev/nst0). 30-Mar 20:06 el4_32_build-sd: Forward spacing Volume AHP562L3 to file:block 1:0. 30-Mar 20:07 staff-vaughn: RestoreFiles.2007-03-30_20.05.43 Fatal error: ../../filed/restore.c:1056 Decryption error for c:\temp/c/I386/ASMS/1/default/ 30-Mar 20:07 staff-vaughn: RestoreFiles.2007-03-30_20.05.43 Error: ../../filed/restore.c:310 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/default/ 30-Mar 20:07 staff-vaughn: RestoreFiles.2007-03-30_20.05.43 Error: ../../filed/restore.c:672 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/ 30-Mar 20:07 el4_32_build-sd: RestoreFiles.2007-03-30_20.05.43 Fatal error: read.c:139 Error sending to File daemon. ERR=Connection reset by peer 30-Mar 20:07 el4_32_build-sd: RestoreFiles.2007-03-30_20.05.43 Error: bnet.c:439 Write error sending 65536 bytes to client:132.206.43.204:36643: ERR=Connection reset by peer === - As you can see, this is precisely the same error I was receiving with Bacula Client version 2.0.2. Any help is much appreciated, Michael On Friday 30 March 2007 21:24, Michael Havas wrote: Hi everyone, I'm using bacula with encryption with Windows Client version 2.02 and Director/Storage daemons on CentOS 4.4. The client both the PKI Keypair and Master certificate for encryption. I've been testing out restores with bacula and encryption. I've found some disturbing results. Certain files and directories report decryption errors while others do not. Here are examples of the errors I receive when trying to restore c:\I386 (a backup of the winXP cd): === + 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Fatal error: ../../filed/restore.c:1056 Decryption error for c:\temp/c/I386/ASMS/1/default/ 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Error: ../../filed/restore.c:310 Missing cryptographic signature for
Re: [Bacula-users] Restoring with Encryption
Hello, At this point, you should isolate the problem to a single file if possible that is causing the problem. Do a backup of that file only, then a restore. If you can isolate the error in that way, please open a bug report, giving the appropriate output error messages, uploading your bacula-dir.conf and bacula-sd.conf files (stripped of passwords), and the file in question. It seems to me that there is already a bug report open on Win32 for this problem, so you might want to check it as well -- possibly adding your information to it if it is identical to what you are seeing. Best regards, Kern On Saturday 31 March 2007 03:15, Michael Havas wrote: Hello, There was a bug in the restore code that was fixed in 2.0.3. Please update (at least the client FD), test again, and let us know if it resolves the problem. Best regards, Kern Hi Kern. Thanks for getting back to me. I upgraded the client to version 2.0.3 but I'm experiencing the same problem indicated in the original message below. I have verified that the client is now indeed 2.0.3 as well as the server. You may find the revised errors below: === + 30-Mar 20:05 el4_32_build-dir: Start Restore Job RestoreFiles.2007-03-30_20.05.43 30-Mar 20:05 el4_32_build-sd: 3301 Issuing autochanger loaded? drive 0 command. 30-Mar 20:05 el4_32_build-sd: 3302 Autochanger loaded? drive 0, result is Slot 4. 30-Mar 20:06 el4_32_build-sd: Ready to read from volume AHP562L3 on device Drive-1 (/dev/nst0). 30-Mar 20:06 el4_32_build-sd: Forward spacing Volume AHP562L3 to file:block 1:0. 30-Mar 20:07 staff-vaughn: RestoreFiles.2007-03-30_20.05.43 Fatal error: ../../filed/restore.c:1056 Decryption error for c:\temp/c/I386/ASMS/1/default/ 30-Mar 20:07 staff-vaughn: RestoreFiles.2007-03-30_20.05.43 Error: ../../filed/restore.c:310 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/default/ 30-Mar 20:07 staff-vaughn: RestoreFiles.2007-03-30_20.05.43 Error: ../../filed/restore.c:672 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/ 30-Mar 20:07 el4_32_build-sd: RestoreFiles.2007-03-30_20.05.43 Fatal error: read.c:139 Error sending to File daemon. ERR=Connection reset by peer 30-Mar 20:07 el4_32_build-sd: RestoreFiles.2007-03-30_20.05.43 Error: bnet.c:439 Write error sending 65536 bytes to client:132.206.43.204:36643: ERR=Connection reset by peer === - As you can see, this is precisely the same error I was receiving with Bacula Client version 2.0.2. Any help is much appreciated, Michael On Friday 30 March 2007 21:24, Michael Havas wrote: Hi everyone, I'm using bacula with encryption with Windows Client version 2.02 and Director/Storage daemons on CentOS 4.4. The client both the PKI Keypair and Master certificate for encryption. I've been testing out restores with bacula and encryption. I've found some disturbing results. Certain files and directories report decryption errors while others do not. Here are examples of the errors I receive when trying to restore c:\I386 (a backup of the winXP cd): === + 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Fatal error: ../../filed/restore.c:1056 Decryption error for c:\temp/c/I386/ASMS/1/default/ 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Error: ../../filed/restore.c:310 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/default/ 30-Mar 14:52 el4_32_build-sd: RestoreFiles.2007-03-30_14.48.49 Fatal error: read.c:139 Error sending to File daemon. ERR=Connection reset by peer 30-Mar 14:52 el4_32_build-sd: RestoreFiles.2007-03-30_14.48.49 Error: bnet.c:439 Write error sending 65536 bytes to client:132.206.43.204:36643: ERR=Connection reset by peer 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Error: ../../filed/restore.c:672 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/ 30-Mar 14:52 el4_32_build-dir: RestoreFiles.2007-03-30_14.48.49 Error: Bacula 2.0.3 (06Mar07): 30-Mar-2007 14:52:21 === - I also receive the same errors when trying specifically to restore c:\I386\ASMS\1\default: === + 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Fatal error: ../../filed/restore.c:1056 Decryption error for c:\temp/c/I386/ASMS/1/default/ 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Error: ../../filed/restore.c:310 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/default/ 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Error: ../../filed/restore.c:672 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/ 30-Mar 15:04 el4_32_build-sd: RestoreFiles.2007-03-30_15.01.11 Fatal error: read.c:124 Error sending to File daemon. ERR=Connection reset by peer 30-Mar 15:04 el4_32_build-sd: RestoreFiles.2007-03-30_15.01.11 Error: bnet.c:406 Write error sending len to client:132.206.43.204:36643: ERR=Connection reset by peer === - Yet I am able to restore a
Re: [Bacula-users] Restoring with Encryption
Hello, There was a bug in the restore code that was fixed in 2.0.3. Please update (at least the client FD), test again, and let us know if it resolves the problem. Best regards, Kern On Friday 30 March 2007 21:24, Michael Havas wrote: Hi everyone, I'm using bacula with encryption with Windows Client version 2.02 and Director/Storage daemons on CentOS 4.4. The client both the PKI Keypair and Master certificate for encryption. I've been testing out restores with bacula and encryption. I've found some disturbing results. Certain files and directories report decryption errors while others do not. Here are examples of the errors I receive when trying to restore c:\I386 (a backup of the winXP cd): === + 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Fatal error: ../../filed/restore.c:1056 Decryption error for c:\temp/c/I386/ASMS/1/default/ 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Error: ../../filed/restore.c:310 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/default/ 30-Mar 14:52 el4_32_build-sd: RestoreFiles.2007-03-30_14.48.49 Fatal error: read.c:139 Error sending to File daemon. ERR=Connection reset by peer 30-Mar 14:52 el4_32_build-sd: RestoreFiles.2007-03-30_14.48.49 Error: bnet.c:439 Write error sending 65536 bytes to client:132.206.43.204:36643: ERR=Connection reset by peer 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Error: ../../filed/restore.c:672 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/ 30-Mar 14:52 el4_32_build-dir: RestoreFiles.2007-03-30_14.48.49 Error: Bacula 2.0.3 (06Mar07): 30-Mar-2007 14:52:21 === - I also receive the same errors when trying specifically to restore c:\I386\ASMS\1\default: === + 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Fatal error: ../../filed/restore.c:1056 Decryption error for c:\temp/c/I386/ASMS/1/default/ 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Error: ../../filed/restore.c:310 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/default/ 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Error: ../../filed/restore.c:672 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/ 30-Mar 15:04 el4_32_build-sd: RestoreFiles.2007-03-30_15.01.11 Fatal error: read.c:124 Error sending to File daemon. ERR=Connection reset by peer 30-Mar 15:04 el4_32_build-sd: RestoreFiles.2007-03-30_15.01.11 Error: bnet.c:406 Write error sending len to client:132.206.43.204:36643: ERR=Connection reset by peer === - Yet I am able to restore a single file c:\pagefile.sys from the same system without any problems. I am using both a PKI Keypair and a master cert to do the encryption and just the PKI Keypair to do the decryption. Thank you very much for your help with this, Michael - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Restoring with Encryption
Hello, There was a bug in the restore code that was fixed in 2.0.3. Please update (at least the client FD), test again, and let us know if it resolves the problem. Best regards, Kern Hi Kern. Thanks for getting back to me. I upgraded the client to version 2.0.3 but I'm experiencing the same problem indicated in the original message below. I have verified that the client is now indeed 2.0.3 as well as the server. You may find the revised errors below: === + 30-Mar 20:05 el4_32_build-dir: Start Restore Job RestoreFiles.2007-03-30_20.05.43 30-Mar 20:05 el4_32_build-sd: 3301 Issuing autochanger loaded? drive 0 command. 30-Mar 20:05 el4_32_build-sd: 3302 Autochanger loaded? drive 0, result is Slot 4. 30-Mar 20:06 el4_32_build-sd: Ready to read from volume AHP562L3 on device Drive-1 (/dev/nst0). 30-Mar 20:06 el4_32_build-sd: Forward spacing Volume AHP562L3 to file:block 1:0. 30-Mar 20:07 staff-vaughn: RestoreFiles.2007-03-30_20.05.43 Fatal error: ../../filed/restore.c:1056 Decryption error for c:\temp/c/I386/ASMS/1/default/ 30-Mar 20:07 staff-vaughn: RestoreFiles.2007-03-30_20.05.43 Error: ../../filed/restore.c:310 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/default/ 30-Mar 20:07 staff-vaughn: RestoreFiles.2007-03-30_20.05.43 Error: ../../filed/restore.c:672 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/ 30-Mar 20:07 el4_32_build-sd: RestoreFiles.2007-03-30_20.05.43 Fatal error: read.c:139 Error sending to File daemon. ERR=Connection reset by peer 30-Mar 20:07 el4_32_build-sd: RestoreFiles.2007-03-30_20.05.43 Error: bnet.c:439 Write error sending 65536 bytes to client:132.206.43.204:36643: ERR=Connection reset by peer === - As you can see, this is precisely the same error I was receiving with Bacula Client version 2.0.2. Any help is much appreciated, Michael On Friday 30 March 2007 21:24, Michael Havas wrote: Hi everyone, I'm using bacula with encryption with Windows Client version 2.02 and Director/Storage daemons on CentOS 4.4. The client both the PKI Keypair and Master certificate for encryption. I've been testing out restores with bacula and encryption. I've found some disturbing results. Certain files and directories report decryption errors while others do not. Here are examples of the errors I receive when trying to restore c:\I386 (a backup of the winXP cd): === + 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Fatal error: ../../filed/restore.c:1056 Decryption error for c:\temp/c/I386/ASMS/1/default/ 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Error: ../../filed/restore.c:310 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/default/ 30-Mar 14:52 el4_32_build-sd: RestoreFiles.2007-03-30_14.48.49 Fatal error: read.c:139 Error sending to File daemon. ERR=Connection reset by peer 30-Mar 14:52 el4_32_build-sd: RestoreFiles.2007-03-30_14.48.49 Error: bnet.c:439 Write error sending 65536 bytes to client:132.206.43.204:36643: ERR=Connection reset by peer 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Error: ../../filed/restore.c:672 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/ 30-Mar 14:52 el4_32_build-dir: RestoreFiles.2007-03-30_14.48.49 Error: Bacula 2.0.3 (06Mar07): 30-Mar-2007 14:52:21 === - I also receive the same errors when trying specifically to restore c:\I386\ASMS\1\default: === + 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Fatal error: ../../filed/restore.c:1056 Decryption error for c:\temp/c/I386/ASMS/1/default/ 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Error: ../../filed/restore.c:310 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/default/ 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Error: ../../filed/restore.c:672 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/ 30-Mar 15:04 el4_32_build-sd: RestoreFiles.2007-03-30_15.01.11 Fatal error: read.c:124 Error sending to File daemon. ERR=Connection reset by peer 30-Mar 15:04 el4_32_build-sd: RestoreFiles.2007-03-30_15.01.11 Error: bnet.c:406 Write error sending len to client:132.206.43.204:36643: ERR=Connection reset by peer === - Yet I am able to restore a single file c:\pagefile.sys from the same system without any problems. I am using both a PKI Keypair and a master cert to do the encryption and just the PKI Keypair to do the decryption. Thank you very much for your help with this, Michael - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
