Le Monday 25 May 2009 10:54:59 Ulrich Leodolter, vous avez écrit :
> Hello
>
> On Mon, 2009-05-25 at 10:21 +0200, Eric Bollengier wrote:
> > Hello,
> >
> > Le Monday 25 May 2009 09:47:24 Ulrich Leodolter, vous avez écrit :
> > > Hello,
> > >
> > > I have configured 4 restore jobs
> > >
> > > RestoreFiles
> > > RestoreLinux
> > > RestoreWin
> > > RestoreMac
> > >
> > > clients are restricted by acl's to one restore job.
> >
> > For my information, can you copy&past Restore job definitions ? Why not
> > use client acl in your case? (i'm not using ACL and i would see how it
> > can be integrated with bacula)
>
> Job {
> Name = "RestoreFiles"
> Type = Restore
> Client = troll-fd
> FileSet = "Full Set"
> Storage = File
> Pool = Default
> Messages = Standard
> Where = /bacula-restores
> }
>
> Job {
> Name = "RestoreLinux"
> Type = Restore
> Client = troll-fd
> FileSet = "LinuxLocalPartitions"
> Storage = File
> Pool = Default
> Messages = Standard
> Where = /bacula-restores
> }
>
> Job {
> Name = "RestoreWin"
> Type = Restore
> Client = troll-fd
> FileSet = "FullWinSet"
> Storage = File
> Pool = Default
> Messages = Standard
> Where = C:/bacula-restores
> }
>
> Job {
> Name = "RestoreMac"
> Type = Restore
> Client = troll-fd
> FileSet = "FullMacSet"
> Storage = File
> Pool = Default
> Messages = Standard
> Where = /bacula-restores
> }
I'm pretty sure that the FileSet option is useless for restore, ie you must
specify something, but it's not used anywhere in the restore process.
Have you experimented something else ?
So, you should be able to use only on restore job for all your setup (a bit
more simple).
> Here is an example for my ACL config,
> Each client is restricted to one special
> os dependent FileSet.
>
> Console {
> Name = leodolter-acl
> Password = "xxxxxxxx"
> JobACL = Backup-leodolter, RestoreLinux
> ScheduleACL = *all*
> ClientACL = leodolter-fd
> FileSetACL = LinuxLocalPartitions
> CatalogACL = MyCatalog
> CommandACL = *all*
> StorageACL = *all*
> PoolACL = Default,DiskBackup,DiskCopy
> }
Ok, thanks
> ACL works nice from client bconsole,
> but bresto always runs bconsole on the
> director machine.
>
> I have no idea how to access console ACL
> on the director.
>
> > > when i try run restore using bresto there is no restore job option
> > > and job fails (bconsole is waiting for selection)
> > >
> > >
> > > Can't start your job:
> > > Using Catalog "MyCatalog"
> > > Bootstrap records written to
> > > /opt/bacula/working/troll-dir.restore.363.bsr
> > >
> > > The job will require the following
> > > Volume(s) Storage(s) SD Device(s)
> > > =======================================================================
> > >====
> > >
> > > Backup-0408 File FileStorage
> > >
> > >
> > > 1 file selected to be restored.
> > >
> > > The defined Restore Job resources are:
> > > 1: RestoreFiles
> > > 2: RestoreLinux
> > > 3: RestoreWin
> > > 4: RestoreMac
> > > Select Restore Job (1-4):
> > >
> > >
> > >
> > > Please include a job selection in "Restore selection -> Restore
> > > options" dialog.
> >
> > I also try to keep the option panel simple as possible. In bresto, you
> > can already limit the restore to a set of client depending on your login
> > and your rights.
>
> I have not setup security acl in bweb, but i always like to have at
> least one super user who can run restore for all clients.
The "admin" account can't be restricted.
Bye
> Ulrich
>
> > Bye
> >
> > > Thanks
> > > Ulrich
------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, &
iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian
Group, R/GA, & Big Spaceship. http://www.creativitycat.com
_______________________________________________
Bacula-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-devel
