Am 11.10.24 um 19:44 schrieb Marcin Haba:
On Fri, 11 Oct 2024 at 19:16, Marcin Haba wrote:
Cloud {
Name = "contabo-bucket1"
Driver = "S3"
HostName = "eu2.contabostorage.com"
BucketName = "buc"
AccessKey = "xxx"
SecretKey = ""
Protocol = "HTTPS"
Hello Stefan
Am 11.10.24 um 19:44 schrieb Marcin Haba:
On Fri, 11 Oct 2024 at 19:16, Marcin Haba wrote:
Cloud {
Name = "contabo-bucket1"
Driver = "S3"
HostName = "eu2.contabostorage.com"
BucketName = "buc"
AccessKey = "xxx"
SecretKey = ""
Protocol = "HTTPS"
Hello Stefan
Am 11.10.24 um 19:54 schrieb Stefan G. Weichinger:
Am 11.10.24 um 19:16 schrieb Marcin Haba:
On Fri, 11 Oct 2024 at 17:23, Stefan G. Weichinger
wrote:
Trying to set up an autochanger using a S3-compatible bucket in "the
cloud" (in my case at Contabo in germany).
Fresh installation
Am 11.10.24 um 19:44 schrieb Marcin Haba:
On Fri, 11 Oct 2024 at 19:16, Marcin Haba wrote:
Cloud {
Name = "contabo-bucket1"
Driver = "S3"
HostName = "eu2.contabostorage.com"
BucketName = "buc"
AccessKey = "xxx"
SecretKey = ""
Protocol = "HTTPS"
Hello Stefan
Am 11.10.24 um 19:16 schrieb Marcin Haba:
On Fri, 11 Oct 2024 at 17:23, Stefan G. Weichinger wrote:
Trying to set up an autochanger using a S3-compatible bucket in "the
cloud" (in my case at Contabo in germany).
Fresh installation of Bacula-15.0.2, Bacularis-4.0.0 on a Debian-12
Trying to set up an autochanger using a S3-compatible bucket in "the
cloud" (in my case at Contabo in germany).
Fresh installation of Bacula-15.0.2, Bacularis-4.0.0 on a Debian-12.7
machine.
Added the packages: bacula-cloud-storage-s3 plus
bacula-cloud-storage-common
Restarted all the
Am 03.09.24 um 08:05 schrieb Stefan G. Weichinger:
Am 31.08.24 um 08:25 schrieb Stefan G. Weichinger:
Logs show:
# journalctl -u bacula-fd
Aug 28 20:07:16 samba bacula-fd[958]: samba-fd: job.c:3698-5189 Bad
response from SD to Append Data command. Wanted 3000 OK data
Aug 28 20:07:16 samba
Am 31.08.24 um 08:25 schrieb Stefan G. Weichinger:
Logs show:
# journalctl -u bacula-fd
Aug 28 20:07:16 samba bacula-fd[958]: samba-fd: job.c:3698-5189 Bad
response from SD to Append Data command. Wanted 3000 OK data
Aug 28 20:07:16 samba bacula-fd[958]: , got len=25 msg="3903 Error
a
On 31.08.24 07:56, Stefan G. Weichinger wrote:
As mentioned I added that Runscript and it seems to work.
Now I got 2 emails per job this night.
For each job like:
Bacula: Backup OK of samba-fd Full
there is also one with
Bacula: Console Unknown term code of samba-fd
that's
As mentioned I added that Runscript and it seems to work.
Now I got 2 emails per job this night.
For each job like:
Bacula: Backup OK of samba-fd Full
there is also one with
Bacula: Console Unknown term code of samba-fd
that's "new" ;-)
The backup job report looks OK.
For reference one of
Am 30.08.24 um 10:49 schrieb Marcin Haba:
On Fri, 30 Aug 2024 at 09:46, Stefan G. Weichinger <mailto:li...@xunil.at>> wrote:
Sounds great. May I ask why this isn't enabled by default?
Hello Stefan,
Yes, it is a good practice and a good idea. I think it isn't enabled
At first: thanks lot for the quick and detailed reply!
Great support ...
Am 29.08.24 um 18:25 schrieb Marcin Haba:
Bvfs cache is a great function in Bacula that has many advantages.
Unfortunately it also has some disadvantages. Before this cache is
created it takes some time and resources t
today I had to restore 2 files from a job with ~800GB and 785318 files in it
this is bacula-15.0.2 and bacularis-3.2.1 on debian-12.6
When I tried the restore in bacularis and chose the needed Job-ID for
selection of the files, the postgresql-DB went to 100% (on one core) and
the webserver t
Am 05.08.24 um 20:01 schrieb Charles Curley:
On Mon, 5 Aug 2024 11:04:59 -0400 (EDT)
Robert Heller wrote:
I *need* an automated network-based backup system, at least for my
home LAN -- I have 6 ARM SBCs that I want to make automated daily
backups of. I have used Amanda in the past, but Amand
Am 02.08.24 um 10:04 schrieb Martin Simmons:
On Fri, 2 Aug 2024 07:36:36 +0200, Stefan G Weichinger said:
Am 01.08.24 um 18:08 schrieb Martin Simmons:
finds no volumes to migrate
"media list" lists ~40 volumes in Pool "File"
I would still appreciate some help here.
Am 04.08.24 um 18:51 schrieb Robert Heller:
Amazon S3 still does not work :-(
I didn't really expect it to work ...
The community edition simply seems to be neglected for years now.
Sad, but true.
I have issues on github that are many years open and unresolved, 52 open
issues right now. The
Am 04.08.24 um 02:35 schrieb Robert Heller:
Files available at http://files.deepsoft.com/Other/Amanda-3.5.4-Debian12/
Amanda 3.5.4 built for Debian 12 (bookworm) for amd64 (x86_64) and arm64
(aarch64)
Built using a x86_64 vm with a vanila Debian 12 (bookworm) installed
(qemu-system-x86_64) on
Am 01.08.24 um 18:08 schrieb Martin Simmons:
finds no volumes to migrate
"media list" lists ~40 volumes in Pool "File"
I would still appreciate some help here.
Maybe the problem is the VolStatus? It must be "Full", "Used" or "Error" to
be considered for migration with SelectionType = "Olde
On 01.08.24 18:08, Martin Simmons wrote:
Maybe the problem is the VolStatus? It must be "Full", "Used" or "Error" to
be considered for migration with SelectionType = "OldestVolume".
The VolStatus of the source volumes or the target volumes?
___
B
On 01.08.24 18:08, Martin Simmons wrote:
Maybe the problem is the VolStatus? It must be "Full", "Used" or "Error" to
be considered for migration with SelectionType = "OldestVolume".
re-read, sorry. Must be the source volumes, right?
___
Bacula-us
Am 09.07.24 um 13:16 schrieb Stefan G. Weichinger:
I have:
Pool {
Name = "Daily"
Description = "daily backups"
PoolType = "Backup"
MaximumVolumes = 30
VolumeRetention = 864000
VolumeUseDuration = 432000
Storage = "HP-Autoloader"
Am 22.07.24 um 19:49 schrieb Robert Heller:
I opened an issue: https://github.com/zmanda/amanda/issues/259
I uploaded the *working* configs for Amanda 3.3.3 under CentOS 7. The 3.3.3
configuation is not liked by Amanda 3.5.1 under Debian 12 (not supprising). I
*think* I updated the configs for
I have:
Pool {
Name = "Daily"
Description = "daily backups"
PoolType = "Backup"
MaximumVolumes = 30
VolumeRetention = 864000
VolumeUseDuration = 432000
Storage = "HP-Autoloader"
}
Pool {
Name = "File"
PoolType = "Backup"
LabelFormat = "Vol-"
MaximumVolumes = 45
MaximumV
Am 04.07.24 um 15:20 schrieb Stefan G. Weichinger:
Am 04.07.24 um 01:16 schrieb Bill Arlofski via Bacula-users:
Your status storage shows that it is reading from the "daily" pool,
using the tape drive "HP-Ultrium", and it is wanting to write to the
"Daily" p
Am 04.07.24 um 01:16 schrieb Bill Arlofski via Bacula-users:
Hello Stefan,
Something is quite wrong here... :)
And a lot of extra information is missing.
Your status storage shows that it is reading from the "daily" pool,
using the tape drive "HP-Ultrium", and it is wanting to write to the
I can't get that migrate job running.
Job {
Name = "migrate-to-tape"
Type = "Migrate"
Pool = "File"
NextPool = "Daily"
JobDefs = "DefaultJob"
PurgeMigrationJob = yes
Enabled = yes
MaximumSpawnedJobs = 20
SelectionPattern = "."
SelectionType = "OldestVolume"
}
I have disk
Am 21.06.24 um 16:31 schrieb Radosław Korzeniewski:
Hello,
czw., 20 cze 2024 o 17:46 Stefan G. Weichinger <mailto:li...@xunil.at>> napisał(a):
Well, it looks for a volume named "Vol-xxx" in the tape loader,
which is
wrong.
Any chance you can share your j
Am 25.06.24 um 17:43 schrieb Martin Simmons:
On Tue, 25 Jun 2024 12:59:03 +0200, Stefan G Weichinger said:
I see various issues, maybe related to defective tapes also.
Volumes that are in mode "Append" are loaded and not written to as in:
25-Jun 12:52 samba-sd JobId 2840: 33
Am 25.06.24 um 17:43 schrieb Martin Simmons:
I "Purge" them, mark them as "Append" ... doesn't work.
Don't manually mark them as "Append" because that tells Bacula to wind forward
to the end of the data before writing. The "Purge" operation just affects the
catalog, not the data on the tape.
Am 25.06.24 um 12:59 schrieb Stefan G. Weichinger:
my director conf is 863 lines long, I assume I should pick out the
relevant parts. Will try to.
ok, showing config
I removed Jobs and Filesets for other VMs and Samba-Shares, that are
just edited copies of the shown ressources (I assume) to
Am 19.06.24 um 09:46 schrieb Radosław Korzeniewski:
Then you should put all your new tapes in the Scratch pool during
labeling, so Bacula can take one to the selected pool when required.
Finally you should configure the "Recycle" pool parameter pointing to
the Scratch pool, so all your unused t
On 21.06.24 16:31, Radosław Korzeniewski wrote:
There are multiple places it could be wrong. You will never know unless
you will get a whole picture.
Now we only have a few puzzle pieces which do not match together.
Sure, I will compile config and logs asap and come back here.
thanks
_
Am 20.06.24 um 17:32 schrieb Radosław Korzeniewski:
Great! So what job logs say about a volume selection when it selects "a
wrong volume"?
Well, it looks for a volume named "Vol-xxx" in the tape loader, which is
wrong.
Your configuration seems to be fine, but what Bacula says about your
co
Am 19.06.24 um 09:46 schrieb Radosław Korzeniewski:
Did you label your tapes? You can't use tapes in Bacula without labeling.
Sure I did!
When you label your tapes, just use "barcodes" options and Bacula will
read all barcodes from tapes and label them to match.
Then you should put all your
I have an annoying issue that I don't yet understand
I read the howtos around volumes and media type etc but so far couldn't
get it working:
There are 2 storages "File" and "HP-Autoloader" ... so disk- and
tape-based backups.
There are pools like "daily" "weekly" "monthly" that contain phy
Am 13.06.24 um 14:05 schrieb Marcin Haba:
This is wrong because if multiple commands are closed in one big quotes,
it is treated as one command that does not exist, so it causes no access
to anything.
You need to write it as this (without quotes):
CommandAcl = gui, .api, .status, .storage
Am 13.06.24 um 12:44 schrieb Marcin Haba:
You don't need to restart anything. Are you sure that you set all
CommandAcl directive values in the Console ACL? They should be one
command per one CommandAcl field:
CommandAcl = gui
CommandAcl = .api
CommandAcl = .status
CommandAcl = .storage
Comman
interested as well, I need to speedup my weekly/monthly FULL runs
(with LTO6, though: way slower anyway).
Shouldn't the file daemon do multiple jobs in parallel?
To tape you can only write ONE stream of data.
To the spooling disk there could be more than one stream.
Yes, that seems wrong:
Am 13.06.24 um 10:24 schrieb Marcin Haba:
On Thu, 13 Jun 2024 at 10:02, Stefan G. Weichinger <mailto:li...@xunil.at>> wrote:
I don't see how to assign the ACL to that user, sry
In the create API basic user window there is an option with label:
"Create dedicated B
Am 12.06.24 um 17:09 schrieb Marcin Haba:
Hello Stefan,
Thanks for your question. It showed me that it might be good to
add descriptions for the resources available for each role and probably
a new section in the documentation that describes it.
For the question about setting access for the
Could someone point me at a HOWTO or doc or point out a meaningful list
of roles/permissions to assign to a bacularis user who should be able to:
- list volumes
- manage the autochanger
maybe later
- label volumes
?
I don't want to give that employee full access, but I am a bit
overwhelm
Am 06.06.24 um 15:57 schrieb Marco Gaiarin:
Mandi! Josh Fisher via Bacula-users
In chel di` si favelave...
Not for a single job. When the storage daemon is writing a job's spooled
data to tape, the client must wait. However, if multiple jobs are
running in parallel, then the other jobs will
I had to run backups to Disk only while the tape drive was repaired.
Now the drive returned and I would like to migrate all the backups on
disk to tape.
"Migrate" Jobs should help here, right?
I defined a job like this:
Job {
Name = "migrate-to-tape"
Type = "Migrate"
Storage = "File"
Am 03.06.24 um 08:51 schrieb Stefan G. Weichinger:
Fourth, please reply back with the results from the above tests, and
with any other information you think may be important.
I will do asap. Right now I wait for their admin to swap all the tapes etc
the btape test went completely OK
In the
Am 02.06.24 um 17:00 schrieb Rob Gerber:
Well, I think something is wrong here. I WOULD NOT write any data or an
EOF to any production tapes with valuable data. This will almost
certainly lead to data loss. To be perfectly clear, if you rewind a tape
and write EOF to that tape, the data previou
the drive was repaired, the head (?) replaced
Now I have issues with the tapes labeled by the old drive ...
I assume I should relabel them but that alone doesn't always lead to
bacula correctly recognizing the tapes.
And the procedure to relabel multiple tapes is a bit of manual work
becau
Am 20.05.24 um 11:44 schrieb Stefan G. Weichinger:
Is there an easy way to delete all volumes belonging to a specific Job-ID?
For now I looked it up in Bacularis: check which jobs are on which
(disk-based) volume, rm the volume in Bacularis, then rm the
corresponding file from disk (in the
Am 15.05.24 um 16:02 schrieb Rob Gerber:
To manually remove the disk volumes, and associated job and file
entries, do a delete operation. Easily done in Bacularis or baculum, (I
haven't done it in bconsole though I'm sure it's doable there too). I
would have a catalog backup restored BEFORE I
Am 15.05.24 um 16:02 schrieb Rob Gerber:
Stefan, are your bacula catalog backups being made to a disk volume, as
is default, or to a tape volume? If being made to a disk volume you
could restore a catalog backup. If your catalog backups were being made
to that same machine whose backups were pu
Am 08.05.24 um 13:13 schrieb Stefan G. Weichinger:
I assume the drive has a problem.
we used a new cleaning tape and a new LTO tape, btape still fails
I tend to say this drive is defective
Today the IT and the CEOs decide how to proceed.
For now I created a temporary file-based storage on
I assume the drive has a problem.
btape append test fails ...
dmesg:
[Mi Mai 8 10:18:32 2024] scsi 1:0:7:1: Power-on or device reset occurred
[Mi Mai 8 10:18:32 2024] ch 1:0:7:1: [ch0] reading element address
assignment page failed!
[Mi Mai 8 10:18:32 2024] ch 1:0:7:1: [ch0] INITIALIZE EL
even btape fails
# /opt/bacula/bin/btape /dev/nst0
Tape block granularity is 1024 bytes.
btape: butil.c:298-0 Using device: "/dev/nst0" for writing.
btape: btape.c:477-0 open device "HP-Ultrium" (/dev/nst0): OK
*test
=== Write, rewind, and re-read test ===
I'm going to write 1 records and
Am 07.05.24 um 18:21 schrieb Rob Gerber:
Wait a sec - look at this again:
# mtx -f /dev/sg4 status
Storage Changer /dev/sg4:1 Drives, 8 Slots ( 0 Import/Export )
Data Transfer Element 0:Full (Storage Element 4 Loaded):VolumeTag =
CMR921L6
Storage Element 1:Full :VolumeTag=CMR904L6
Am 07.05.24 um 17:04 schrieb Stefan G. Weichinger:
Could it be related to something like blocksizes?
These tapes were used with Amanda before.
trying another tape now
I really get lost here. Wanted to re-label a tape to start over:
# systemctl stop bacula-sd
# mt -f /dev/st0 rewind
# mt
more info:
restarted daemons
entered bconsole
mounted a slot, labelled the tape
Catalog record for Volume "CMR921", Slot 4 successfully created.
Requesting to mount HP-Autoloader ...
3001 Device ""HP-Ultrium" (/dev/nst0)" is mounted with Volume "CMR921"
started a (test) job to backup the c
On the weekend I tried to use a "weekly" pool for a set of full backups.
It failed with a tape error and since then we fail to get on track again.
Multiple reboots of the library, change of tapes, relabeling etc
I try for example to stop all bacula-services and unload a tape:
# mtx -f /dev/sg
Am 11.04.24 um 07:49 schrieb Bill Arlofski via Bacula-users:
On 4/10/24 11:38 PM, Stefan G. Weichinger wrote:
First coffee here right now ;-)
Thanks for your example.
Hello Stefan,
You are welcome!
Well, it is 23:41 here now, so I have switched from coffee to beer. :)
Understandable
I think those special chars are already in the filesystem like this.
It's no big deal as long as they are in the backups ;-)
Choosing files in the GUI is still possible, it just looks ugly or
incorrect somehow.
I will check if that relates to the way samba was set up there etc (the
relevan
Am 10.04.24 um 16:45 schrieb Bill Arlofski via Bacula-users:
Hello Stefan,
No, this will not backup anything because you have not specified
anything to backup with a `File = /path/to/somewhere` inside of your
`Include{}` block. So far, you have only set something (WildFile) inside
of an `Opti
Am 10.04.24 um 14:25 schrieb Rob Gerber:
I don't think it is correct, no.
I am not an expert, but last time I tried something like this I believe
the suggestion I was given was to use a runbefore script to run a find
command or similar to locate and build a file list, then give that list
to b
Is this Fileset correct?
Fileset {
Name = "VM_xxx-y"
Include {
Options {
WildFile = "\"/mnt/backup/vmbackup/Backup xxx-y/*.vbk\""
}
}
}
I don't get files with this ... seems not to match.
___
Bacula-users mailing list
Bacula-u
Am 09.04.24 um 08:38 schrieb Marcin Haba:
Hello Stefan,
Yes, filenames displayed in the restore process.
Also it might be good to check how the names are stored in the database
in the File table if everything is fine there.
will try that in an hour or so.
currently editing Jobs and doing in
Am 09.04.24 um 08:04 schrieb Marcin Haba:
Hello Stefan,
I agree with Anders' advice to check Bacula first. Bacula stores file
names in the database as they are, without interpreting them, no
encoding conversion. It means that something is wrong on the input when
names are stored, it will also
I am in the process of installing and configuring Bacula-13.0.4 and
Bacularis-2.7.0 on a Debian-12.5 server.
(moving over from using Amanda, I might ask a few questions around that
soon)
What I noticed: when I access "Restore" in Bacularis, there are files
displayed with strange chars ins
Am 06.03.24 um 15:55 schrieb Phil Stracchino:
On 3/6/24 01:58, Stefan G. Weichinger wrote:
As I try to come up with an initial setup for weekly-daily-monthly I
found this:
https://www.bacula.org/13.0.x-manuals/en/main/Automatic_Volume_Recycling.html#SECTION003060
Shouldn&#
As I try to come up with an initial setup for weekly-daily-monthly I
found this:
https://www.bacula.org/13.0.x-manuals/en/main/Automatic_Volume_Recycling.html#SECTION003060
Shouldn't there also be Jobs for Weekly and Monthly?
Which Pool to use for the Catalog Backups?
I once posted about german umlauts and the issues in amrecover.
Today I hit that again.
In the amrecover UI I found two files in a specific DLE:
2024-01-15-19-30-02 "SOME & FILE Name �bersicht.xlsx"
2024-01-09-19-30-01 "SOME & FILE Name �bersicht.pdf"
note the quotes around the names
for ot
Am 27.02.24 um 12:29 schrieb Marcin Haba:
Hello Stefan,
After adding the www-data to the bacula group you need to restart
php-fpm and web server services.
Here you can find more information about possible ways to solve this error:
https://bacularis.app/doc/brief/troubleshooting.html#permission
It seems to have worked now ... for the first windows-client.
I am in the process of removing the older release and baculum.
Earlier config was in "/etc/bacula", now the path seems to be
"/opt/bacula/etc"
I moved the configs, adjusted paths ... also in the API Panel.
Things are *read* ok,
Am 26.02.24 um 14:25 schrieb Rob Gerber:
Mixing topics is ok. Better in this case. All the information is in one
email thread.
fine
I have read that if you use mt to rewind the tape and then write eof to
the tape (end of file), it will fool bacula into thinking that the tape
is empty. If you
Am 24.02.24 um 20:53 schrieb Stefan G. Weichinger:
I was already able to get the windows-client to work by
upgrading/reinstalling the bacula-server part (basically starting from
scratch ... didn't matter much, but was a bit of work).
The server was older than the client, that seems to
Am 24.02.24 um 03:07 schrieb Rob Gerber:
Hello Stefan!
I have a server that I back up via bacula that I can only access via
SMB. It is a high-end NAS appliance running gentoo linux, with
absolutely no shell access by anyone but the vendor who provides it. The
appliance does its job well, but
Am 23.02.24 um 09:50 schrieb Stefan G. Weichinger:
I am still learning my way to use bacula and could need some explanations.
In the meantime I learned there is a Windows client ;-)
installed it, added client definition to the server, edited client conf ...
I see the client and its status
I am still learning my way to use bacula and could need some explanations.
One goal of my customer is to backup an old Windows Server VM with ~15
shares.
My bacula-server is a Debian-VM with bacula-13.0.3, and baculum-11.0.6
I have a config running, writing to a HP changer with 8 tapes etc
I think I found the issue:
the execute-permission was missing on "/etc/bacula"
I can unload tapes now from baculum.
testing things now
I hope I haven't broken anything by editing everything ;-)
thanks, Stefan
___
Bacula-users mailing list
Bacula-u
sorry for "flooding"
I just want to provide as much details as possible
*mount
Automatically selected Catalog: MyCatalog
Using Catalog "MyCatalog"
Automatically selected Storage: loader1
Enter autochanger slot: 2
3991 Bad autochanger "loaded? drive 0" command: ERR=Keine Berechtigung.
Results=
3
I edited the names and the device-names:
Device {
Name = "HP-Ultrium4"
MediaType = "LTO-4"
DeviceType = "Tape"
ArchiveDevice = "/dev/tape/by-id/scsi-350014380032d5e61-nst"
LabelMedia = yes
AlwaysOpen = yes
Autochanger = yes
MaximumFileSize = 200
}
Autochanger {
Name = "H
I try to set up a HP 1x8 Changer and an LTO drive.
I defined it in
* bacula-sd.conf
Device {
Name = "HP-LTO7"
MediaType = "LTO-4"
DeviceType = "Tape"
ArchiveDevice = "/dev/nst0"
LabelMedia = yes
AlwaysOpen = yes
Autochanger = yes
MaximumFileSize = 200
}
Autochanger {
Am 26.01.24 um 21:01 schrieb Marcin Haba:
Hello Stefan,
Yes, for PostgreSQL 15 you need this patch. It should still be valid.
At the moment Bacula GitLab stopped working so I am sending the patch
in attachment. It is a one line patch.
After applying it, the TDbCommand error should not occur an
seems I hit this:
https://www.mail-archive.com/bacula-users@lists.sourceforge.net/msg72759.html
Is it advised to use bacularis instead now?
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/
Am 25.01.24 um 11:58 schrieb Stefan G. Weichinger:
"Error code: 1000
Message: Internal error. TDbCommand failed to execute the query SQL "
SELECT conname, consrc, contype, "
Googled that, unsure about it.
I find
https://www.mail-archive.com/search
greetings, bacula-users
I am a complete starter with bacula and test things in a Debian 12.4
machine.
I can write to and read from tape already, using an autochanger ...
looks good already.
I maybe have a "mixed" setup: at first I installed from the debian
repos, then I found the specifi
On 16.11.23 22:08, Moritz Both wrote:
Greetings,
we use amanda with usb disks and manually change them every day. I
configured udev to create a symlink to /dev/amanda-vtape when the disk
is plugged in.
In /etc/fstab I configured this device so it can be mounted to
/mnt/amanda-vtape by the a
Am 04.09.23 um 09:03 schrieb Stefan G. Weichinger:
Upgraded Kea from 2.2.0 to 2.2.1 and Stork from 1.11 to 1.12
restarted every service, Stork is shown as 1.12.0
but the apps are shown as 2.2.0 with uptimes larger than one month,
although the kea-services were restarted right now
Solved
Upgraded Kea from 2.2.0 to 2.2.1 and Stork from 1.11 to 1.12
restarted every service, Stork is shown as 1.12.0
but the apps are shown as 2.2.0 with uptimes larger than one month,
although the kea-services were restarted right now
I rebooted one node. Same picture.
Any ideas?
This is on De
Am 03.07.23 um 13:53 schrieb Stefan G. Weichinger:
I *think* communication between stork and kea is encrypted now, just not
fully verified.
As far as I understand I have mode "Encryption" now as described here:
https://kea.readthedocs.io/en/kea-2.2.0/arm/security.html#tls-htt
Am 30.06.23 um 18:23 schrieb Stefan G. Weichinger:
So it's very likely that adding that IP SAN to the cert fixes things.
Replaced the CA and the certs/keys in kea-dhcp4.conf and
kea-ctrl-agent.conf.
That changes things, but doesn't fully fix my issues.
Should the cert i
Am 30.06.23 um 17:53 schrieb Eric Graham:
Stefan,
I've been down this road and the short answer is to not bother trying to
use the various options to skip certificate verification. Those settings
don't do what you (I) think they do, and it's easier to just make the
certs work.
When you gene
Am 30.06.23 um 12:16 schrieb Stefan G. Weichinger:
After some more restarting and re-registering currently stork looks good.
I assume currently the stork-agents talk to the kea-ctrl-agents
unencrypted ... I am not 100% sure yet.
Tested flipping this:
kea-ctrl-agent.conf:"cert-req
After some more restarting and re-registering currently stork looks good.
I assume currently the stork-agents talk to the kea-ctrl-agents
unencrypted ... I am not 100% sure yet.
--
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org
Jun 30 11:37:22 adc1 stork-agent[754889]: time="2023-06-30 11:37:22"
level="info" msg=" kea: control: https://10.0.0.231:8000/ (auth key:
not found)"
Jun 30 11:37:43 adc1 stork-agent[754889]: time="2023-06-30 11:37:43"
level="info" msg="Loaded server cert:
/var/lib/stork-agent/certs/cert
Am 29.06.23 um 16:56 schrieb Eric Graham:
My deployments have a single CA that's used as trust-anchor on both
machines, and then the certificates are signed by the CA. The CA is
further added to the systems' trust stores. I haven't tried what you're
doing (sorry).
I decided to set up a small
Am 29.06.23 um 16:56 schrieb Eric Graham:
My deployments have a single CA that's used as trust-anchor on both
machines, and then the certificates are signed by the CA. The CA is
further added to the systems' trust stores. I haven't tried what you're
doing (sorry).
That's something I hear all
Am 29.06.23 um 15:34 schrieb Eric Graham:
Stefan,
I think so, but I'm not sure if it's best practice to share that
certificate with Kea since you'd need to open up permissions a little
and allow Kea to read the private key. If you have no qualms with that
note, then it's probably worth an att
Am 28.06.23 um 09:28 schrieb Stefan G. Weichinger:
Am 27.06.23 um 17:17 schrieb Eric Graham:
Stefan,
Make sure that when you change the password, you also change it in
Stork and in the HA hook config on each daemon of each server.
I am not aware of documentation from ISC for generating
Am 27.06.23 um 17:17 schrieb Eric Graham:
Stefan,
Make sure that when you change the password, you also change it in Stork
and in the HA hook config on each daemon of each server.
I am not aware of documentation from ISC for generating certificates,
this:
https://github.com/isc-projects/k
Am 27.06.23 um 17:17 schrieb Eric Graham:
Stefan,
Make sure that when you change the password, you also change it in Stork
and in the HA hook config on each daemon of each server.
I have done that and cross-checked things but somehow communication
wasn't established again. Had to roll back t
Am 23.06.23 um 17:34 schrieb Eric Graham:
Stefan,
Please be aware that you posted a password in your control agent config.
I strongly recommend replacing it.
You may prefer to put the socket in /var. Cleaning of /tmp is
distro-dependent behavior. You'll need to make that change (to the
sock
Am 23.06.23 um 17:34 schrieb Eric Graham:
Stefan,
Please be aware that you posted a password in your control agent config.
I strongly recommend replacing it.
Yes, thanks, I noticed it after sending the mail.
You may prefer to put the socket in /var. Cleaning of /tmp is
distro-dependent beha
Am 22.06.23 um 19:35 schrieb Eric Graham:
Check the permissions of the control socket on your server:
* Confirm that the Kea control agent can read it * Confirm that
SELinux is not denying the attempt
Eric, thanks for your help.
If it works most of the time ... why wouldn't the permissions be
1 - 100 of 1707 matches
Mail list logo
