Am 22.07.21 um 14:13 schrieb Andreas Haumer:
Hi!

Am 22.07.21 um 13:31 schrieb Stefan G. Weichinger:

Trying to tune my new 10G NICs with amanda.

So I want to switch from "auth ssh" to "auth bsdtcp" and get stuck ...

Debian Buster doesn't bring systemd-units for amanda, right?


Right.
Amanda client services are started by inetd on Debian Buster.
(One could probably write a systemd amanda-client unit quite easily, but so 
what...)

I applied my own files now.

Edited hosts.allow

amservice succeeds.

amcheck not:

ERROR: backup: selfcheck request failed: ambind: bind failed A: Permission 
denied

what ...


Does someone use current Debian w/ amanda and bsdtcp?


Yes, some of our Amanda clients are Debian Buster based and they seem to behave 
fine.

On the backup server ("hegel") we have disklist entries like this (example for client 
"kant"):

kant.intern.xss.co.at / {
   user-tar
   auth "bsdtcp"
} -1 eth0


As mentioned above on the client ("kant") the amanda services are started via 
inetd.

So in /etc/inetd.conf we have the line:

amanda stream tcp nowait backup /usr/lib/amanda/amandad amandad -auth=bsdtcp 
amdump amindexd amidxtaped

(we don't use tcpd)


In /etc/amanda-security.conf we have the following lines uncommented:

runtar:gnutar_path=/usr/bin/tar
tcp_port_range=512,1024
udp_port_range=840,860

Permissions might be important:

root@kant:~# ll /etc/amanda-security.conf
-rw-r--r-- 1 root root 2036 Jan  3  2021 /etc/amanda-security.conf


Then there is /etc/amandahosts:

root@kant:~# ll /etc/amandahosts
-rw------- 1 backup backup 55 Jan  3  2021 /etc/amandahosts

In /etc/amandahosts we have:

localhost backup
hegel.intern.xss.co.at amanda amdump


Finally open up the relevant port on the firewall, if any.


That seems to be all we had to do to get the amanda client
up and running on Debian clients (I hope I didn't forget
something important...)

Andreas, ever thought of writing a small howto for the documentation?

A few years ago you could hope that it would be merged into the amanda sources ... now that the community project isn't maintained anymore, I would consider writing a blog post or so. I even have something in the pipeline already.

Jose told me he plans to write instructions for systemd + "auth ssh" for the upcoming debian bullseye packages (sorry, spoiler ;-)).

Did anyone ever benchmark bsdtcp against ssh?

Reply via email to