[Bacula-users-fr] Re : Bacula-users-fr Digest, Vol 23, Issue 1
Bonjour Bruno, Merci pour tes remarques. Je ne sais pas si maintenant mon mail est arrivé en format texte et non html. Je n'ai,à ma connaissance rien modifié à part avoir ajouté le paramètre Heartbeat interval. Cordialement. --- En date de : Mar 4.9.12, bacula-users-fr-requ...@lists.sourceforge.net bacula-users-fr-requ...@lists.sourceforge.net a écrit : De: bacula-users-fr-requ...@lists.sourceforge.net bacula-users-fr-requ...@lists.sourceforge.net Objet: Bacula-users-fr Digest, Vol 23, Issue 1 À: bacula-users-fr@lists.sourceforge.net Date: Mardi 4 septembre 2012, 9h15 Send Bacula-users-fr mailing list submissions to bacula-users-fr@lists.sourceforge.net To subscribe or unsubscribe via the World Wide Web, visit https://lists.sourceforge.net/lists/listinfo/bacula-users-fr or, via email, send a message with subject or body 'help' to bacula-users-fr-requ...@lists.sourceforge.net You can reach the person managing the list at bacula-users-fr-ow...@lists.sourceforge.net When replying, please edit your Subject line so it is more specific than Re: Contents of Bacula-users-fr digest... Today's Topics: 1. Re: [***SPAM***] Re : Bacula-users-fr Digest, Vol 22, Issue 6 (Bruno Friedmann) 2. Erreur lors des backups (Elongama Mpongo Christian) -- Message: 1 Date: Wed, 29 Aug 2012 16:38:15 +0200 From: Bruno Friedmann br...@ioda-net.ch Subject: Re: [Bacula-users-fr] [***SPAM***] Re : Bacula-users-fr Digest, Vol 22, Issue 6 To: bacula-users-fr@lists.sourceforge.net Message-ID: 3150379.Q0sCGJVoX9@c-3po Content-Type: text/plain; charset=utf-8 Christian, Aidez-nous ? vous aider ... Pour les emails n'utilisez que le formatage texte, en supprimant toutes informations non utiles. Si possible changez aussi votre souscription (daily-digest) pour message par message. Bannissez toutes formes d'html, ?a rend juste les messages plus lourds, et illisible. Ne r?pondez qu'? la liste, vu que je vous y r?pond la copie sur mon mail ne fait que m'emb?ter. Dans ce que j'ai pu d?chiffrer par-ci par-l? dans le foutoir html pr?sent, il semblerait que le backup d?marre, mais s'arr?te apr?s un certain temps ou volume de donn?es. Auriez-vous mis en place des restrictions genre temps de backup allou?, ou maxsize volume etc ??? Comme pr?c?demment dit. sans le contexte, et les fichiers de conf, il est quasiment impossible de deviner ce que vous fa?tes avec bacula. Comme le dit le pr?cepte, si ?a marchait avant, qu'est-ce qui a chang? pour que ?a marche plus ? On Wednesday 29 August 2012 15.15:16 Elongama Mpongo Christian wrote: Bonjour tout le monde, Pour votre information,j'ai configur? le heartbeat interval = 120s sur le fichier contenant les clients,le fichier bacula-dir.conf et le fichier bacula-sd.conf;mais malgr? tout cela le probl?me persiste.Je peux vous confirmer que le backup commence bien et s'arr?te toujours 6.633GB en me retournant l'erreur ci-dessous : 29-Aug 09:40 baculabackup.mtds.com-dir JobId 3043: Start Backup JobId 3043, Job=JobDjaj.2012-08-29_09.40.00_02 29-Aug 09:40 baculabackup.mtds.com-dir JobId 3043: Using Device FileStorage 29-Aug 09:40 baculabackup.mtds.com-sd JobId 3043: Volume poolfull0002 previously written, moving to end of data. 29-Aug 09:40 baculabackup.mtds.com-sd JobId 3043: Ready to append to end of Volume poolfull0002 size=99597584948 29-Aug 08:36 djaj.mtds.com-fd JobId 3043: Generate VSS snapshots. Driver=Win32 VSS, Drive(s)=C 29-Aug 09:24 djaj.mtds.com-fd JobId 3043: Error: /home/kern/bacula/k/bacula/src/lib/bsock.c:389 Write error sending 8578 bytes to Storage daemon:baculabackup.mtds.com:9103: ERR=Input/output error 29-Aug 09:24 djaj.mtds.com-fd JobId 3043: Fatal error: /home/kern/bacula/k/bacula/src/filed/backup.c:1190 Network send error to SD. ERR=Input/output error 29-Aug 09:24 djaj.mtds.com-fd JobId 3043: VSS Writer (BackupComplete): System Writer, State: 0x1 (VSS_WS_STABLE) 29-Aug 09:24 djaj.mtds.com-fd JobId 3043: VSS Writer (BackupComplete): MSDEWriter, State: 0x1 (VSS_WS_STABLE) 29-Aug 09:24 djaj.mtds.com-fd JobId 3043: VSS Writer (BackupComplete): Event Log Writer, State: 0x1 (VSS_WS_STABLE) 29-Aug 09:24 djaj.mtds.com-fd JobId 3043: VSS Writer (BackupComplete): Registry Writer, State: 0x1 (VSS_WS_STABLE) 29-Aug 09:24 djaj.mtds.com-fd JobId 3043: VSS Writer (BackupComplete): COM+ REGDB Writer, State: 0x1 (VSS_WS_STABLE) 29-Aug 09:24 djaj.mtds.com-fd JobId 3043: VSS Writer (BackupComplete): IIS Metabase Writer, State: 0x1 (VSS_WS_STABLE) 29-Aug 09:24 djaj.mtds.com-fd JobId 3043: VSS Writer (BackupComplete): WMI Writer, State: 0x1 (VSS_WS_STABLE) 29-Aug 10:28 baculabackup.mtds.com-dir JobId 3043: Error: Bacula baculabackup.mtds.com-dir 5.2.6 (21Feb12): Build OS:
Re: [Bacula-users] Problems with Bat crashing
Op 20120902 om 09:53 schreef Michael D. Wood: From: lst_ho...@kwsoft.de [mailto:lst_ho...@kwsoft.de] Sent: Friday, August 31, 2012 4:31 PM Zitat von Michael D. Wood m...@itsecuritypros.org: Has anyone else ran across this issue? Faulting application bat.exe, version 0.0.0.0, time stamp 0x4fec70d9, faulting module QtGui4.dll, version 4.8.1.0, time stamp 0x4f6c7cef, exception code 0xc005, fault offset 0x00411d40, process id 0xf8, application start time 0x01cd85aac11a9b2a. --END OF NOTIFICATION Maybe this one: http://bugs.bacula.org/view.php?id=1832 Much appreciated and my apologies - probably should have checked the bug tracker first! Another good thing is making it possible to read in the discussion order. Please reply _below_ the original text. Cheers Geert Stappers -- knock knock who is it? Merry Mary who?? Merry Christmas -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] bacula 5.2.10 on Windows 2008 R2 server : 1 MByte/sec transfer rate, very slow
Hi I have Bacula 5.01 Director installed on a Linux Ubuntu 10.04 server, and a Bacula 5.2.10 Client (Bacula-fd) running on a Windows Server 2008 R2 SP1 server, with Hyper-V role installed. Purpose is her to backup the host server, not the virtual machines. Initially the backup transfer rate was extremely slow (kbytes/sec). Changing the Network adapter (Broadcom NetXstreme 5714) settings to Large end Offload (LSO) = off as suggested in some posts increased the transfer rate to 1MB/sec, which is still 10 to 80 times slower than the transfer rates I have with other servers running Linux or Windows 7. Transferring a file 'by hand' over the net runs at 80 MB/sec ...So I suspect a problem with Bacula-fd. Any idea how to configure the server so that I can get decent backup transfer speeds ? I can't imagine these servers can't be managed by Bacula. Thanks in advance for your help, Kind regards Paul -- Paul VAN WAMBEKE ICT OpenUp! and GPI Projects National Botanic Garden of Belgium Bouchout Domain, Nieuwelaan 38 1860 Meise Tel: ++32 2 260 09 66 Fax: ++32 2 260 09 45 -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] SSL/TLS problems between director and FD (certificate issues)?
Hello, It's been a long time since I have bugged this mailing list but sadly, I see no other way right now. I'm trying to set up TLS between an external FD on the Internet and an internal Director and SD, but failing. I have my own CA (created in TinyCA2 a long time ago) and have issued server type certificates to both the director/SD (both on same box) and the FD, but when I try to connect to the FD, I get this on the director console: 04-Sep 08:49 server-dir JobId 0: Error: openssl.c:86 Connect failure: ERR=error:14094413:SSL routines:SSL3_READ_BYTES:sslv3 alert unsupported certificate 04-Sep 08:49 server-dir JobId 0: Fatal error: TLS negotiation failed with FD at fdbox.server.com:9102. When I try to use a client-type certificate on the FD side, I get this: 04-Sep 08:46 server-dir JobId 0: Error: tls.c:92 Error with certificate at depth: 0, issuer = /C=LU/L=MyCA/O=MyOrg/OU=MyOU/CN=Root CA/emailAddress=security@blah, subject = /C=LU/L=MyCA/O=MyOrg/OU=MyOU/CN=fdbox.server.com, ERR=26:unsupported certificate purpose 04-Sep 08:46 server-dir JobId 0: Error: openssl.c:86 Connect failure: ERR=error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed 04-Sep 08:46 server-dir JobId 0: Fatal error: TLS negotiation failed with FD at fdbox.server.com:9102. On the Client side, I get this with a server-cert: k233-fd: filed.c:276-0 filed: listening on port 9102 k233-fd: cram-md5.c:72-0 send: auth cram-md5 233368770.2346346927@k233-fd ssl=2 k233-fd: cram-md5.c:150-0 sending resp to challenge: M7/byJ/nA+/av8JcPG+ZzB k233-fd: openssl.c:85-0 jcr=2480678 Connect failure: ERR=error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned and with a Client-type cert: k233-fd: filed.c:276-0 filed: listening on port 9102 k233-fd: cram-md5.c:72-0 send: auth cram-md5 233368770.2346346927@k233-fd ssl=2 k233-fd: cram-md5.c:150-0 sending resp to challenge: M7/byJ/nA+/av8JcPG+ZzB k233-fd: openssl.c:85-0 jcr=1fd6878 Connect failure: ERR=error:14094413:SSL routines:SSL3_READ_BYTES:sslv3 alert unsupported certificate The documentation doesn't really clarify which type of certificate goes where (TinyCA2 will only let me sign certs as Server or Client). Does the bacula-dir need a client-type cert? Has anybody got this working with Peer verification and their own CA? I'd be curious to see how you generated the certs... - Michel -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] Wrong times don't let Incremental work
Let's see if I'm doing this right. I have been looking for solutions with no success. I'm probably looking in the wrong places but I'm hitting a wall here. Been a while since I did the setup of the bacula server. First. OS: Fedora 13 Bacula Version: 5.0.3 DB: MySQL 5.1.55 Problem: Server was running fine until a user induced error (it was me) changed the date and time 2 months forward. I switched back the time but bacula does not do incremental updates anymore. Full backups seem to work an Differentials too, but not Increments. Setup was that full backups once a month with Differentials at the end of each week and incremental during the week. Can I get the Since back to current date from the future date? Or will I need to drop the DB? -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] job expiration question
John, Thanks for your reply. If I add Volume Use Duration = 1 month do I have to go to update - volume parameters- Pool from resource to get the new configuration applied to the existing old tapes? Uthra -Original Message- From: John Drescher [mailto:dresche...@gmail.com] Sent: Monday, September 03, 2012 8:32 AM To: Rao, Uthra R. (GSFC-672.0)[ADNET SYSTEMS INC]; bacula-users Subject: Re: [Bacula-users] job expiration question On Thu, Aug 30, 2012 at 12:01 PM, Rao, Uthra R. (GSFC-672.0)[ADNET SYSTEMS INC] uthra.r@nasa.gov wrote: John, I wanted to try something to get my 2TB tapes recycle faster. Current configuration: pool { name = server-archive Pool Type = Backup Autoprune = no Recycle = no Volume Retention = 10 years } To the above configuration I want to add Volume Use Duration = 1 month so that the tape will be used for 1 month and then will get FULL status though it Is not really FULL. Once the tape is in FULL status the 3 months retention period starts and after 3 months the tape is recycled and can be reused. By doing this I don't have to change the retention period but I will have a FULL back-up every 1+3 months (4months). Currently the tape is taking 3 months to fill up and another 3 months for the retention period (3+3=6 months). If you added Volume Use Duration = 1 month then the tape would be used for 1 month and then after that it will be marked Used. After it is marked used the retention period begins and is calculated from the the last written date/time that is recorded in the database for that volume. So if you have a 3 month volume retention (your above example shows 10 years) the tape should be ready to recycle in about 4 months. John -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] job expiration question
Thanks for your reply. If I add Volume Use Duration = 1 month do I have to go to update - volume parameters- Pool from resource to get the new configuration applied to the existing old tapes? I am not sure if the old tapes would be marked used as a result of applying the new configuration. I have never tried that. John -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] SSL/TLS problems between director and FD (certificate issues)?
On Sep 4, 2012, at 4:18 AM, Michel Meyers wrote: Hello, It's been a long time since I have bugged this mailing list but sadly, I see no other way right now. I'm trying to set up TLS between an external FD on the Internet and an internal Director and SD, but failing. I have my own CA (created in TinyCA2 a long time ago) and have issued server type certificates to both the director/SD (both on same box) and the FD, but when I try to connect to the FD, I get this on the director console: 04-Sep 08:49 server-dir JobId 0: Error: openssl.c:86 Connect failure: ERR=error:14094413:SSL routines:SSL3_READ_BYTES:sslv3 alert unsupported certificate 04-Sep 08:49 server-dir JobId 0: Fatal error: TLS negotiation failed with FD at fdbox.server.com:9102. When I try to use a client-type certificate on the FD side, I get this: 04-Sep 08:46 server-dir JobId 0: Error: tls.c:92 Error with certificate at depth: 0, issuer = /C=LU/L=MyCA/O=MyOrg/OU=MyOU/CN=Root CA/emailAddress=security@blah, subject = /C=LU/L=MyCA/O=MyOrg/OU=MyOU/CN=fdbox.server.com, ERR=26:unsupported certificate purpose 04-Sep 08:46 server-dir JobId 0: Error: openssl.c:86 Connect failure: ERR=error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed 04-Sep 08:46 server-dir JobId 0: Fatal error: TLS negotiation failed with FD at fdbox.server.com:9102. On the Client side, I get this with a server-cert: k233-fd: filed.c:276-0 filed: listening on port 9102 k233-fd: cram-md5.c:72-0 send: auth cram-md5 233368770.2346346927@k233-fd ssl=2 k233-fd: cram-md5.c:150-0 sending resp to challenge: M7/byJ/nA+/av8JcPG+ZzB k233-fd: openssl.c:85-0 jcr=2480678 Connect failure: ERR=error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned and with a Client-type cert: k233-fd: filed.c:276-0 filed: listening on port 9102 k233-fd: cram-md5.c:72-0 send: auth cram-md5 233368770.2346346927@k233-fd ssl=2 k233-fd: cram-md5.c:150-0 sending resp to challenge: M7/byJ/nA+/av8JcPG+ZzB k233-fd: openssl.c:85-0 jcr=1fd6878 Connect failure: ERR=error:14094413:SSL routines:SSL3_READ_BYTES:sslv3 alert unsupported certificate The documentation doesn't really clarify which type of certificate goes where (TinyCA2 will only let me sign certs as Server or Client). Does the bacula-dir need a client-type cert? Has anybody got this working with Peer verification and their own CA? I'd be curious to see how you generated the certs… I did not analyze what you did (sorry, no time), but I can point you at what I did for my setup: http://www.freebsddiary.org/bacula-tls.php If memory servers, all certs were created the same way. -- Dan Langille - http://langille.org -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] job expiration question
On Sep 4, 2012, at 9:42 AM, John Drescher wrote: Thanks for your reply. If I add Volume Use Duration = 1 month do I have to go to update - volume parameters- Pool from resource to get the new configuration applied to the existing old tapes? I am not sure if the old tapes would be marked used as a result of applying the new configuration. I have never tried that. It should. You can confirm this by looking at the volume parameters before and after the command. -- Dan Langille - http://langille.org -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Amazon Glacier
On Aug 21, 2012, at 8:38 AM, eric santelices wrote: With Amazon announcement of Glacier it seems like a natural fit for Bacula. Does anyone know if/when we would see support for this storage resource? -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users Here are quite a few things to consider when considering Glacier: http://www.daemonology.net/blog/2012-09-04-why-tarsnap-doesnt-use-glacier.html -- Dan Langille - http://langille.org -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] SSL/TLS problems between director and FD (certificate issues)?
On 2012-09-04 20:19, Dan Langille wrote: I did not analyze what you did (sorry, no time), but I can point you at what I did for my setup: http://www.freebsddiary.org/bacula-tls.php If memory servers, all certs were created the same way. Thanks, I resorted to creating my certs via cacert.org for now and those work, so I can definitely pinpoint my TinyCA2-generated certificates as the problem source. I'll have to redo my certs whenever I have the time to do so. - Michel -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] bacula 5.2.10 on Windows 2008 R2 server : 1 MByte/sec transfer rate, very slow
Hi I have Bacula 5.01 Director installed on a Linux Ubuntu 10.04 server, and a Bacula 5.2.10 Client (Bacula-fd) running on a Windows Server 2008 R2 SP1 server, with Hyper-V role installed. Purpose is her to backup the host server, not the virtual machines. Initially the backup transfer rate was extremely slow (kbytes/sec). Changing the Network adapter (Broadcom NetXstreme 5714) settings to Large end Offload (LSO) = off as suggested in some posts increased the transfer rate to 1MB/sec, which is still 10 to 80 times slower than the transfer rates I have with other servers running Linux or Windows 7. Transferring a file 'by hand' over the net runs at 80 MB/sec ...So I suspect a problem with Bacula-fd. Any idea how to configure the server so that I can get decent backup transfer speeds ? I can't imagine these servers can't be managed by Bacula. First use something like iperf to make sure that the problem is not bacula. Test all possible combinations of send/receive for the following: . host server . bacula sd server . another pc/server that is separate (can be linux or windows) That should give you concrete evidence as to whether the problem is related to bacula. Hyper-V network can be terribly difficult in some cases. James -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users