I really think I got it working now!

When I am comparing with the instructions given here:

http://www.bacula.org/rel-manual/Bacula_TLS.html

The difference in my conf is:

bacula-fd.conf; add

# "Global" File daemon configuration specifications # FileDaemon { # this is me
     Name = xxxxx-fd
.....
   TLS Enable = yes
( along with a root cert, cert and key )

bacula-dir.conf; add

# Client (File Services) to backup
Client {
 Name = xxxxx-fd
.....
TLS Enable = yes
( along with a root cert, cert and key )

The directive

TLS Allowed CN = "xxxxx.xxxxx.xxxx"
I have yet to see have an effect. Makes no difference if I remove it.

What I have done is to log on with bconsole in between changes and issued a 'run' to start the job. If I remove the added directives it stops working again ( after restarting the service of course ) with a " Fatal error: Authorization problem: Remote server requires TLS." message at the end.
Remains to see if the nightly run is ok.

Again, many thanks to Dan Langille!

Should I suggest these changes to the manual to someone perhaps?

rgds

Andreas Aronsson wrote:


Remind me again, what you're doing and the symptoms? I'm not convinced it's the Director.

I am connecting through bconsole, issuing the command 'run' and selecting the only job I've scheduled.
One line in the resulting message is as follows:

09-Mar 09:02 xxxxx-dir: xxxxx.2006-03-09_09.02.34 Fatal error: Authorization problem: Remote server requires TLS.

My conclusion is thus

bconsole -> [issuing command] -> director -> [tries to connect] -> filedaemon [who demands TLS handshake] -> director fails and stops

Perhaps I am wrong?


--
Andreas Aronsson
Mobil: +46 704 566 595
www.aron.nu

"I'd rather have friends who care than friends who agree with me."
- Arlo Guthrie



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to