I think this is a bug but I may be doing something wrong ... ?
Baculum is the current version:
# cat /etc/apt/sources.list.d/baculum.list
deb http://bacula.org/downloads/baculum/debian jessie main
deb-src http://bacula.org/downloads/baculum/debian jessie main
A restricted console is defined within the Director conf:
# cat /etc/bacula/conf.d/console/Console-charles.conf
Console {
Name = "charles"
Password = "pass"
CommandACL =
run,show,.client,.jobs,.fileset,.pool,.storage,.jobs,.bvfs_update,.bvfs_lsdirs,.bvfs_lsfiles,.bvfs_versions,.bvfs_get_jobids,.bvfs_restore,restore
CatalogACL = MyCatalog
ClientACL = bllistest.iciti.av:fd
JobACL = bllistest.iciti.av
PoolACL = Default
StorageACL = "HP_1-8_G2_Tape_Autoloader"
FileSetACL = bllistest.iciti.av
WhereACL = *all*
}
A corresponding bconsole is defined:
root@backup2.iciti:~# cat /etc/bacula/bconsole.d/charles.conf
Director {
Name = backup2-dir
Address = localhost
DIRport = 9101
Password = "NOT USED"
}
Console {
Name = "charles"
Password = "pass"
}
A test restore was attempted:
* Opened http://backup2.iciti.av:9095/ and logged on as charles
* Perform restore
* Backup from client: blisstest.iciti.av:fd (only choice in drop-down)
* Backup selection method: Only selected backup (default)
* Backup for restore: [5429] ... (default, latest, successful Full)
* In "Step 3 - select files to restore", drilled down to
/root/.bash_profile and clicked its "Add"
* In "Step 4 - select destination for restore"
** Restore to client: blisstest.iciti.av:fd (only choice in drop-down)
** Restore to directory: /tmp/restore (default)
* In "Step 5 - options for restore"
** Replace files: do not replace files (default)
** Restore job priority: 10 (default)
* In "Step 6 - Finish"
** Run restore
Baculum displayed a list of jobs not including the restore.
From /etc/baculum/Data-apache/baculum.dbg:
Sep 28 10:23:32 [Debug] [Execute] Command=sudo /usr/sbin/bconsole -c
/etc/bacula/bconsole.d/charles.conf -D backup2-dir <<END_OF_DATA
restore file="?b25429" client="bllistest.iciti.av:fd"
where="/tmp/restore" replace="never" fileset="bllistest.iciti.av"
priority="10" yes
quit
END_OF_DATA, Output=stdClass Object
(
[output] => Array
(
[0] => restore file="?b25429"
client="bllistest.iciti.av:fd" where="/tmp/restore" replace="never"
fileset="bllistest.iciti.av" priority="10" yes
[1] => Using Catalog "MyCatalog"
[2] => Bootstrap records written to
/var/lib/bacula/backup2.iciti.av:dir.restore.4.bsr
[3] => Bootstrap records written to
/var/lib/bacula/backup2.iciti.av:dir.restore.4.bsr
[4] =>
[5] => The Job will require the following (*=>InChanger):
[6] => Volume(s) Storage(s)
SD Device(s)
[7] =>
===========================================================================
[8] =>
[9] => *AS0008L6
HP_1-8_G2_Tape_Autoloader HP_1-8_G2_Tape_Autoloader
[10] =>
[11] => Volumes marked with "*" are in the Autochanger.
[12] =>
[13] =>
[14] => 1 file selected to be restored.
[15] =>
[16] => Using Catalog "MyCatalog"
[17] => No authorization. FileSet "backup2.iciti.av".
[18] => Job not run.
)
[exitcode] => 0
)
Given that the FileSet was explicitly named as bllistest.iciti.av, why
did Baculum attempt to access FileSet backup2.iciti.av?
Experimentation (changing the "File set" line) confirmed that FileSet
backup2.iciti.av had been read from Job Restore:
Job {
Name = "Restore"
JobDefs = "Common"
Type = Restore
Client = "backup2.iciti.av:fd"
File set = "backup2.iciti.av"
Storage = "HP_1-8_G2_Tape_Autoloader"
Where = /tmp/restore
}
Best
Charles
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
