Hi,

On 9/21/2006 5:19 PM, Michael Brennen wrote:
> Arno Lehmann wrote:
> 
>>On 9/21/2006 5:03 AM, Roy Vestal wrote:
>>  
>>
>>>Does anyone know how to keep a client from being able to restore data 
>>>from another client? Specifically Windows clients?
>>>Specifics:
>>>
>>>I have 2 clients I'm testing with. Client1 is a linux machine, Client2 
>>>is a Windows machine. When I do a restore from Client2, it can see and 
>>>restore data from Client1 and vice versa.
>>>
>>>How do we stop this?
>>>    
>>
>>Use ACLs. They are set up in the console resource.
>>As far as I know, there are some holes in them in the 1.38 versions, but 
>>the current development versions should support ACLs correctly and 
>>without leaving holes.
>>  
> 
> 
> A couple of days ago I posted on a restore not working from a windows 
> clients running the latest CVS for director and storage daemons, and the 
> latest windows beta client.  That client is tightly ACL restricted, only 
> 'restore' permitted and access only to the relevant pools etc., and when 
> run in command mode the client still can see too other information that 
> is not its own.  Perhaps I've missed something, but I don't think the 
> problems raised by Jo Rhett have been fixed yet?

It seems to be so. I somehow had the impression that the restrictions 
worked correctly, except in cases where you use multiple catalogs. Also, 
when I upgraded to 1.39.whatever, I had to modify the check_bacula 
source to take the messages regarding restrictions application into account.

I'd suggest to document the problems with ACLs with a clear setup and 
then report this as a bug (in bugs.bacula.org).

Arno

-- 
IT-Service Lehmann                    [EMAIL PROTECTED]
Arno Lehmann                  http://www.its-lehmann.de

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to