Hello Stefan, Am 20.05.2026 um 08:41 schrieb Stefan Harbich:
Hello, is it possible to encrypt the data traffic between the Director and the PostgreSQL database server?
that should be possible, but it would only be useful (IMO) if the database is on a different host and accessed via network.
In that case, it's a matter of configuring server and client to use TLS or GSSAPI. The client would be the Director but as that uses the normal PostgreSQL client library, it makes the configuration rely on regular postgres client configuration on the DIR side. I would claim that everything that works using simple configuration and defaults works (which in most cases means you rely on your distro to ship reasonable default configurations) but it gets tricky if the Director would need interactive help when initializing its catalog connection (for example would need a password when using an encrypted client certificate).
As usual, there are many options available and I suspect most Bacula users run the catalog besides the DIR on the same host and do not even enable Postgresql's network listener, so this is rather rarely a concern.
If you just configure your server to require TLS, for example, you should quickly know for sure.
Cheers, Arno
Best regards, Stefan Harbich _______________________________________________ Bacula-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/bacula-users
-- Arno Lehmann IT-Service Lehmann Sandstr. 6, 49080 Osnabrück _______________________________________________ Bacula-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/bacula-users
