On 01/12/16 05:17 PM, Claus Eriksen wrote:
> Hi,
>
> Having used a lot of time trying to solve this issue myself I figured it
> was time to ask here.
>
> I'm trying to enable encrypted tape backups on a IBM/Lenovo 3573-TL
> library with 4 LTO-6 sas tapedrives (ULT3580-HH6).
>
> The system is running Debian Jessie, with bareos and dependencies from
> Debian stretch (scheduler bug made me upgrade).
>
> SMP Debian 3.16.7-ckt20-1+deb8u2 (2016-01-02) x86_64 GNU/Linux
> bareos-storage-tape 14.2.6-1
>
> Making unencrypted backups (copy jobs right now) works fine, but when I
> get to the part with encryption I get the following error in bconsole:
>
> dir: ERROR in passphrase.c:86 Failed to get random bytes from gnutls_rnd
> for passphrase: ERR=Error in the system's randomness device.
>
> looking at a trace I get the following:
>
> trace-sd.24364:open("/dev/urandom", O_RDONLY) = 3
> trace-sd.24364-read(3, "\377\272\215\243:a\347\37\241N", 10) = 10
> trace-sd.24364-close(3)
>
> Any advice on how to proceed?
Debian chooses to distibute BAREOS with GNUTLS instead of OpenSSL which
means that you run somewhat less tested code especially when it comes
to anything outside of normal TLS security for data connections. So it
could be we forgot to initialize some GNUTLS stuff for this particular
use case I honestly only tested TLS connections and added the calls in
other places for GNUTLS but they are kind of untested.
You have a couple of options, upgrade to 15.2.2 from download.bareos.org
which is OpenSSL based and is on par with what 14.2.6 has and more and
also allows you to run the new webui. Debug the GNUTLS problem is also
an option but then you need some knowledge of installing debug symbols
and using a debugger etc.
--
Marco van Wieringen [email protected]
Bareos GmbH & Co. KG Phone: +49-221-63069389
http://www.bareos.com
Sitz der Gesellschaft: Köln | Amtsgericht Köln: HRA 29646
Komplementär: Bareos Verwaltungs-GmbH
Geschäftsführer: Stephan Dühr, M. Außendorf, J. Steffens,
P. Storz, M. v. Wieringen
--
You received this message because you are subscribed to the Google Groups
"bareos-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
For more options, visit https://groups.google.com/d/optout.
