On 02.12.2016 at 16:55 wrote 74cmonty:
> Hi,
> I want to connect to bareos-dir from a client using bconsole.
>
> On server where bareos-dir daemon is running, I have configured
> cat /etc/bareos/bareos-dir.d/console/hdbnode.conf
> Console {
> Name = hdbnode
> Description = Restricted Console for HDB Nodes
> Password = prxxQCeZPIWbmjcrreL1jGeBmswxHLqzdcRKeSpbNgxg
> CatalogACL = DLM-LVE
> CommandACL = list files, list jobs, status
> }
>
> On client where bareos-fd is running, I have configured
> cat /etc/bareos/bareos-dir.d/console/hdbnode.conf
> Console {
> Name = hdbnode
> Description = Restricted Console for HDB Nodes
> Password = prxxQCeZPIWbmjcrreL1jGeBmswxHLqzdcRKeSpbNgxg
> CatalogACL = DLM-LVE
> CommandACL = list files, list jobs, status
> }
> and
> cat /etc/bareos/bconsole.conf
> #
> # Bareos User Agent (or Console) Configuration File
> #
>
> Director {
> Name = bareos-dir
> address = <hostname bareos-dir daemon>
> Password = "5E39iUAuGH6XYtbSLdPnqTA98Lp5bz58J5+/j5je48P3"
> Description = "Bareos Console credentials for Director on bareos-dir"
> }
>
> Console {
> Name = hdbnode
> Password = "prxxQCeZPIWbmjcrreL1jGeBmswxHLqzdcRKeSpbNgxg"
> }
>
> From client I can successfully connect to bareos-dir with bconsole, but
> command list jobs fails:
> ld9906:~ # bconsole
> Connecting to Director <hostname bareos-dir daemon>:9101
> 1000 OK: bareos-dir Version: 16.2.4 (01 July 2016)
> Enter a period to cancel a command.
> *list jobs
> list: is an invalid command.
> *
>
> Why is command
> "list jobs"
> and "list files"
> failing, but command "status" is working?
You can only allow the complete command, not the options. So:
CommandACL = list, status
will work.
However, when using ACLs, you have to specify all resources, because
otherwise you don't have permission to access them.
So:
Job ACL = *all*
...
You might want to take the "operator" profile as example.
Jörg
--
Jörg Steffens [email protected]
Bareos GmbH & Co. KG Phone: +49 221 630693-91
http://www.bareos.com Fax: +49 221 630693-10
Sitz der Gesellschaft: Köln | Amtsgericht Köln: HRA 29646
Komplementär: Bareos Verwaltungs-GmbH
Geschäftsführer:
S. Dühr, M. Außendorf, Jörg Steffens, P. Storz
--
You received this message because you are subscribed to the Google Groups
"bareos-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
For more options, visit https://groups.google.com/d/optout.
