W dniu czwartek, 25 lutego 2016 09:33:53 UTC+1 użytkownik Marcin Krzyżanowski
napisał:
> Hi,
>
> I've installed Bareos (dir, fd, sd) on bananian (banana pi pro) that is
> connecting to a vps in internet over openvpn to bareos-fd to make the backup.
> Since the vps in public I've installed there also FW but opened ports 9101,
> 9102, 9103 for communication with bareos-dir/sd/fd.
>
> When I enter thebconsole and check the status of client - I receive:
> "Connecting to Client kfamVps at 10.8.0.1:9102"
> "Failed to connect to Client kfamVps."
>
> on the LH the client connects and responds to dir.
>
> I've made som tcp snoffin on openvpn interface and the communication is
> working ok - the packets are arriving it's destination.
>
> what can be the issue?
> I've triplechecked the passwords, ip's and so on.
>
> Below I'm putting the conf's:
>
> vps-fd - not working:
>
> Director {
> Name = bananapi-dir
> Password = "Nmcwd0"
> }
>
> Director {
> Name = bananapi-mon
> Password = "h9IWNaH7RtpuGveKyQvJaxhr95lpifUKH6qo2OWTukYs"
> Monitor = yes
> }
>
>
> FileDaemon { # this is me
> Name = kfamVps
> Maximum Concurrent Jobs = 2
>
> }
>
> Messages {
> Name = Standard
> director = bananapi-dir = all, !skipped, !restored
> }
>
> director's conf:
>
> Director { # define myself
> Name = bananapi-dir
> QueryFile = "/usr/lib/bareos/scripts/query.sql"
> Maximum Concurrent Jobs = 50
> Password = "nUsGr3RMWxvhQMWU2a6/d4s5HKJcTGEC7S0kx8w2jEPI" # Console
> password
> Messages = Daemon
> Auditing = yes
> }
>
> Client {
> Name = kfamVps
> Address = 10.8.0.1
> Password = "Nmcwd0"
> File Retention = 10 days
> Job Retention = 3 months
> AutoPrune = no
> }
>
> can I debug somegow where the communication is failing?
> in bconsole there is only this info:
> Passwords or names not the same or
> Maximum Concurrent Jobs exceeded on the FD or
> FD networking messed up (restart daemon).
>
> Regards
> Marcin
done some sniffing and this is the problem:
...$Hello Director bananapi-dir calling
...Wauthenticate.c:101 Connection from unknown Director bananapi-dir at
10.8.0.6 rejected.
....1999 Authorization failed.
....2999 Authentication failed.
as I understand well the files mapping are:
dir.conf -> fd.conf
Director section - field Name --> Director section - field Name (should it be
resolveable in dns, existent name and resolveable in dns or only internal
purpose of bareos)
Director section - field Password <-- not needed in fd.conf
Client section - field Name <-- only used in dir.coonf
Client section - field Password --> Director section - field Password
dir.conf:Director:Name = fd.conf:Director:Name
dir.conf:Client:Password = fd.conf:Director:Password
are there any other important settings? Should dir.conf:Client:Address field
should be fqdn or better IP address?
again configs after reinstall:
bareos-dir.conf:
Director { # define myself
Name = bananapi-dir
QueryFile = "/usr/lib/bareos/scripts/query.sql"
Maximum Concurrent Jobs = 30
Password = "OZNehq+hxKUqUTGjRtl28+mWqd2uYRPjbKWtAXUb6r2M" # Console
password
Messages = Daemon
Auditing = yes
}
Client {
Name = vps193835-fd
Address = vps193835
Password = "abcabc"
File Retention = 30 days
Job Retention = 6 months
AutoPrune = no
}
vps193835-fd:
FileDaemon { # definition of myself
Name = "vps193835-fd" # XXX_REPLACE_WITH_LOCAL_HOSTNAME_XXX-fd
Maximum Concurrent Jobs = 20
}
#
# List Directors who are permitted to contact this File daemon
#
Director {
Name = "bananapi-dir" #XXX_REPLACE_WITH_LOCAL_HOSTNAME_XXX-dir
Password = "abcabc" #"XXX_REPLACE_WITH_CLIENT_PASSWORD_XXX"
}
#
# Restricted Director, used by tray-monitor to get the
# status of the file daemon
#
#Director {
# Name = vps193835-mon #XXX_REPLACE_WITH_LOCAL_HOSTNAME_XXX-mon
# Password = "password" #"XXX_REPLACE_WITH_CLIENT_MONITOR_PASSWORD_XXX"
# Monitor = yes
#}
# Send all messages except skipped files back to Director
Messages {
Name = Standard
director = vps193835 = all, !skipped, !restored
#XXX_REPLACE_WITH_LOCAL_HOSTNAME_XXX-dir = all, !skipped, !restored
}
--
You received this message because you are subscribed to the Google Groups
"bareos-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
For more options, visit https://groups.google.com/d/optout.
