Hi! Am 22.07.21 um 13:31 schrieb Stefan G. Weichinger: > > Trying to tune my new 10G NICs with amanda. > > So I want to switch from "auth ssh" to "auth bsdtcp" and get stuck ... > > Debian Buster doesn't bring systemd-units for amanda, right? >
Right.
Amanda client services are started by inetd on Debian Buster.
(One could probably write a systemd amanda-client unit quite easily, but so
what...)
> I applied my own files now.
>
> Edited hosts.allow
>
> amservice succeeds.
>
> amcheck not:
>
> ERROR: backup: selfcheck request failed: ambind: bind failed A: Permission
> denied
>
> what ...
>
>
> Does someone use current Debian w/ amanda and bsdtcp?
>
Yes, some of our Amanda clients are Debian Buster based and they seem to behave
fine.
On the backup server ("hegel") we have disklist entries like this (example for
client "kant"):
kant.intern.xss.co.at / {
user-tar
auth "bsdtcp"
} -1 eth0
As mentioned above on the client ("kant") the amanda services are started via
inetd.
So in /etc/inetd.conf we have the line:
amanda stream tcp nowait backup /usr/lib/amanda/amandad amandad -auth=bsdtcp
amdump amindexd amidxtaped
(we don't use tcpd)
In /etc/amanda-security.conf we have the following lines uncommented:
runtar:gnutar_path=/usr/bin/tar
tcp_port_range=512,1024
udp_port_range=840,860
Permissions might be important:
root@kant:~# ll /etc/amanda-security.conf
-rw-r--r-- 1 root root 2036 Jan 3 2021 /etc/amanda-security.conf
Then there is /etc/amandahosts:
root@kant:~# ll /etc/amandahosts
-rw------- 1 backup backup 55 Jan 3 2021 /etc/amandahosts
In /etc/amandahosts we have:
localhost backup
hegel.intern.xss.co.at amanda amdump
Finally open up the relevant port on the firewall, if any.
That seems to be all we had to do to get the amanda client
up and running on Debian clients (I hope I didn't forget
something important...)
HTH
- andreas
--
Andreas Haumer
*x Software + Systeme | mailto:[email protected]
Karmarschgasse 51/2/20 | http://www.xss.co.at/
A-1100 Vienna, Austria | Tel: +43-1-6060114-0
OpenPGP_signature
Description: OpenPGP digital signature
