alan pearson wrote:
Kevin
Full marks for a correct answer, I'd another service called 'amanda' in there
from who knows when !
So it's all disabled ... and I can be sure it's only k5amanda playing now....
Interestingly though now amrecover can't connect even with k5amanda only
running..
AMRECOVER Version 2.5.1p2. Contacting server on qtvsrv1 ...
[request failed: timeout waiting for ACK]
Alan,
try:
amreover -o auth=krb5
No amandad debug file is produced. But if I do
telnet qtvsrv1 k5amanda
I get connected and a debug file produced.....
Strange.....
Big thanks though, I'm a bit further on now. If anyone else has any more
clues...
----- Original Message ----
From: Kevin Till <[EMAIL PROTECTED]>
To: Alan Pearson <[EMAIL PROTECTED]>
Cc: [email protected]
Sent: Wednesday, 28 February, 2007 9:17:47 PM
Subject: Re: amrecover with krb5 - amindexd problems ?
Alan Pearson wrote:
A little update,
You notice below that amandad has been told to use krb5 auth ?
This from the debug log :
security_handleinit(handle=0x934f660, driver=0x1cbfa0 (BSD))
amandad: time 0.003: accept recv REQ pkt:
<<<<<
SERVICE amindexd
OPTIONS features=fffffeff9ffeffffff7f;auth=bsd;
auth=bsd ??? I don't think so.
This leads me to believe amandad is ignoring all server_args, which I
think I confirmed by experimentation. It doesn't matter what I put in
server_args, they get ignored. xinetd is not complaining about anything
which leads me to believe my syntax is all fine etc...
Hi Alan,
although I cannot confirm that krb5 support is working fine in 2.5.1p2, I can assure you
that server_args is working fine.
I suspect that another amanda process which runs bsd is started by xinetd. I would try to
put "disable = yes" to k5amanda. Restart xinetd, see if you see the same result.
--Kevin
Any help appreciated !
---
AlanP
On 28 Feb 2007, at 16:21, Alan Pearson wrote:
Guys
Trying to use amrecover like so :
[EMAIL PROTECTED] amandad]# amrecover DailySet1 -d /dev/nst0 -t qtvsrv1
-s qtvsrv1
AMRECOVER Version 2.5.1p2. Contacting server on qtvsrv1 ...
NAK: amindexd: invalid service
/etc/xinetd/k5amanda :
service k5amanda
socket_type = stream
protocol = tcp
wait = no
user = root
group = backup
server = /usr/libexec/amandad
server_args = -auth=krb5 amdump amindexd amidxtaped
}
Debug from amandad
[EMAIL PROTECTED] amandad]# cat amandad.20070228162001.debug
amandad: debug 1 pid 15440 ruid 1083 euid 1083: start at Wed Feb 28
16:20:01 2007
security_getdriver(name=BSD) returns 0xcecfa0
amandad: version 2.5.1p2
amandad: build: VERSION="Amanda-2.5.1p2"
amandad: BUILT_DATE="Thu Feb 1 03:24:00 GMT 2007"
amandad: BUILT_MACH="Linux qa-apps 2.6.9-42.ELsmp #1 SMP Wed
Jul 12 23:27:17 EDT 2006 i686 i686 i386 GNU/Linux"
amandad: CC="gcc"
amandad: CONFIGURE_COMMAND="'./configure' '--with-krb5-
security' '--with-user=amanda' '--with-group=backup' '--with-
config=DailySet1' '--sbindir=/usr/sbin' '--libexecdir=/usr/libexec'
'--libdir=/usr/lib' '--with-configdir=/etc/amanda' '--with-gnutar-
listdir=/var/amanda/gnutar-lists' '--mandir=/usr/share/man'"
amandad: paths: bindir="/usr/local/bin" sbindir="/usr/sbin"
amandad: libexecdir="/usr/libexec" mandir="/usr/share/man"
amandad: AMANDA_TMPDIR="/tmp/amanda" AMANDA_DBGDIR="/tmp/ amanda"
amandad: CONFIG_DIR="/etc/amanda" DEV_PREFIX="/dev/"
amandad: RDEV_PREFIX="/dev/r" DUMP="/sbin/dump"
amandad: RESTORE="/sbin/restore" VDUMP=UNDEF VRESTORE=UNDEF
amandad: XFSDUMP=UNDEF XFSRESTORE=UNDEF VXDUMP=UNDEF
VXRESTORE=UNDEF
amandad: SAMBA_CLIENT="/usr/bin/smbclient" GNUTAR="/bin/gtar"
amandad: COMPRESS_PATH="/bin/gzip" UNCOMPRESS_PATH="/bin/gzip"
amandad: LPRCMD="/usr/bin/lpr" MAILER="/usr/bin/Mail"
amandad: listed_incr_dir="/var/amanda/gnutar-lists"
amandad: defs: DEFAULT_SERVER="qa-apps" DEFAULT_CONFIG="DailySet1"
amandad: DEFAULT_TAPE_SERVER="qa-apps" HAVE_MMAP HAVE_SYSVSHM
amandad: LOCKING=POSIX_FCNTL SETPGRP_VOID DEBUG_CODE
amandad: AMANDA_DEBUG_DAYS=4 BSD_SECURITY KRB5_SECURITY
RSH_SECURITY
amandad: USE_AMANDAHOSTS CLIENT_LOGIN="amanda" FORCE_USERID
HAVE_GZIP
amandad: COMPRESS_SUFFIX=".gz" COMPRESS_FAST_OPT="--fast"
amandad: COMPRESS_BEST_OPT="--best" UNCOMPRESS_OPT="-dc"
amandad: time 0.000: dgram_recv(dgram=0xcef584, timeout=0,
fromaddr=0xcff570)
amandad: time 0.000: (sockaddr_in *)0xcff570 = { 2, 516, 172.16.1.9 }
security_handleinit(handle=0x8e49660, driver=0xcecfa0 (BSD))
amandad: time 0.003: accept recv REQ pkt:
<<<<<
SERVICE amindexd
OPTIONS features=fffffeff9ffeffffff7f;auth=bsd;
amandad: time 0.003: amindexd: invalid service
amandad: time 0.003: sending NAK pkt:
<<<<<
ERROR amindexd: invalid service
amandad: dgram_send_addr(addr=0xbfef92b0, dgram=0xcef584)
amandad: time 0.003: (sockaddr_in *)0xbfef92b0 = { 2, 516, 172.16.1.9 }
amandad: dgram_send_addr: 0xcef584->socket = 0
security_close(handle=0x8e49660, driver=0xcecfa0 (BSD))
amandad: time 29.999: pid 15440 finish time Wed Feb 28 16:20:31 2007
Anyone any ideas ? Any help appreciated !
---
AlanP
--
Thank you!
Kevin Till
Amanda documentation: http://wiki.zmanda.com
Amanda forums: http://forums.zmanda.com
