Re: [Bacula-users] Bacula daemon message
Do you have an admin job in your config that's running console commands? It looks like something is executing purge commands automatically which sounds really rather dangerous to the health of your backups. The good news is it doesn't seem to be working because you no longer have a File storage any more, but if you were ever to re-create it you might find backups being randomly deleted. Ben Roberts -Original Message- From: Polcari, Joe (Contractor) [mailto:joe_polc...@cable.comcast.com] Sent: 17 January 2015 17:22 To: bacula-users@lists.sourceforge.net Subject: [Bacula-users] FW: Bacula daemon message How do I stop these? They seem to come at random times once a day. -Original Message- From: root@xxx On Behalf Of Bacula Sent: Saturday, January 17, 2015 11:04 AM To: bac...@localhost.xxx Subject: Bacula daemon message 17-Jan 11:04 xxx-dir JobId 0: This command can be DANGEROUS!!! It purges (deletes) all Files from a Job, JobId, Client or Volume; or it purges (deletes) all Jobs from a Client or Volume without regard to retention periods. Normally you should use the PRUNE command, which respects retention periods. 17-Jan 11:04 xxx-dir JobId 0: Automatically selected Catalog: MyCatalog 17-Jan 11:04 xxx-dir JobId 0: Using Catalog MyCatalog 17-Jan 11:04 xxx-dir JobId 0: Storage resource File: not found 17-Jan 11:04 xxx-dir JobId 0: The defined Storage resources are: 17-Jan 11:04 xxx-dir JobId 0: 1: Client1Storage 17-Jan 11:04 xxx-dir JobId 0: 2: Client2Storage 17-Jan 11:04 xxx-dir JobId 0: 3: Client3Storage 17-Jan 11:04 xxx-dir JobId 0: 4: Client4Storage 17-Jan 11:04 xxx-dir JobId 0: 5: Client5Storage 17-Jan 11:04 xxx-dir JobId 0: 6: Client6Storage 17-Jan 11:04 xxx-dir JobId 0: Selection aborted, nothing done. -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users This email and any files transmitted with it contain confidential and proprietary information and is solely for the use of the intended recipient. If you are not the intended recipient please return the email to the sender and delete it from your computer and you must not use, disclose, distribute, copy, print or rely on this email or its contents. This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase or sale of any financial instrument or as an official confirmation of any transaction. Any comments or statements made herein do not necessarily reflect those of GSA Capital. GSA Capital Partners LLP is authorised and regulated by the Financial Conduct Authority and is registered in England and Wales at Stratton House, 5 Stratton Street, London W1J 8LA, number OC309261. GSA Capital Services Limited is registered in England and Wales at the same address, number 5320529. -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Bacula daemon message
[root@cdcdbaculadir ~]# crontab -l no crontab for root [root@cdcdbaculadir ~]# From: Bryn Hughes [mailto:li...@nashira.ca] Sent: Saturday, January 17, 2015 3:13 PM To: bacula-users@lists.sourceforge.net Subject: Re: [Bacula-users] Bacula daemon message Are you SURE there isn't anything like a crontab somewhere that someone set up? This very very very very much has to be something that is being either typed in to bconsole or executed via a script somewhere. It isn't something Bacula is doing on its own. Bryn On 2015-01-17 10:54 AM, Polcari, Joe (Contractor) wrote: Nope, none of that. No admin jobs. All my storage is File. Backups and restores work fine. From: Roberts, Ben [mailto:ben.robe...@gsacapital.com] Sent: Saturday, January 17, 2015 1:05 PM To: Polcari, Joe (Contractor); bacula-users@lists.sourceforge.netmailto:bacula-users@lists.sourceforge.net Subject: RE: Bacula daemon message Do you have an admin job in your config that's running console commands? It looks like something is executing purge commands automatically which sounds really rather dangerous to the health of your backups. The good news is it doesn't seem to be working because you no longer have a File storage any more, but if you were ever to re-create it you might find backups being randomly deleted. Ben Roberts -Original Message- From: Polcari, Joe (Contractor) [mailto:joe_polc...@cable.comcast.com] Sent: 17 January 2015 17:22 To: bacula-users@lists.sourceforge.netmailto:bacula-users@lists.sourceforge.net Subject: [Bacula-users] FW: Bacula daemon message How do I stop these? They seem to come at random times once a day. -Original Message- From: root@xxxmailto:root@xxx On Behalf Of Bacula Sent: Saturday, January 17, 2015 11:04 AM To: bac...@localhost.xxxmailto:bac...@localhost.xxx Subject: Bacula daemon message 17-Jan 11:04 xxx-dir JobId 0: This command can be DANGEROUS!!! It purges (deletes) all Files from a Job, JobId, Client or Volume; or it purges (deletes) all Jobs from a Client or Volume without regard to retention periods. Normally you should use the PRUNE command, which respects retention periods. 17-Jan 11:04 xxx-dir JobId 0: Automatically selected Catalog: MyCatalog 17-Jan 11:04 xxx-dir JobId 0: Using Catalog MyCatalog 17-Jan 11:04 xxx-dir JobId 0: Storage resource File: not found 17-Jan 11:04 xxx-dir JobId 0: The defined Storage resources are: 17-Jan 11:04 xxx-dir JobId 0: 1: Client1Storage 17-Jan 11:04 xxx-dir JobId 0: 2: Client2Storage 17-Jan 11:04 xxx-dir JobId 0: 3: Client3Storage 17-Jan 11:04 xxx-dir JobId 0: 4: Client4Storage 17-Jan 11:04 xxx-dir JobId 0: 5: Client5Storage 17-Jan 11:04 xxx-dir JobId 0: 6: Client6Storage 17-Jan 11:04 xxx-dir JobId 0: Selection aborted, nothing done. -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Bacula daemon message
Nope, none of that. No admin jobs. All my storage is File. Backups and restores work fine. From: Roberts, Ben [mailto:ben.robe...@gsacapital.com] Sent: Saturday, January 17, 2015 1:05 PM To: Polcari, Joe (Contractor); bacula-users@lists.sourceforge.net Subject: RE: Bacula daemon message Do you have an admin job in your config that's running console commands? It looks like something is executing purge commands automatically which sounds really rather dangerous to the health of your backups. The good news is it doesn't seem to be working because you no longer have a File storage any more, but if you were ever to re-create it you might find backups being randomly deleted. Ben Roberts -Original Message- From: Polcari, Joe (Contractor) [mailto:joe_polc...@cable.comcast.com] Sent: 17 January 2015 17:22 To: bacula-users@lists.sourceforge.netmailto:bacula-users@lists.sourceforge.net Subject: [Bacula-users] FW: Bacula daemon message How do I stop these? They seem to come at random times once a day. -Original Message- From: root@xxxmailto:root@xxx On Behalf Of Bacula Sent: Saturday, January 17, 2015 11:04 AM To: bac...@localhost.xxxmailto:bac...@localhost.xxx Subject: Bacula daemon message 17-Jan 11:04 xxx-dir JobId 0: This command can be DANGEROUS!!! It purges (deletes) all Files from a Job, JobId, Client or Volume; or it purges (deletes) all Jobs from a Client or Volume without regard to retention periods. Normally you should use the PRUNE command, which respects retention periods. 17-Jan 11:04 xxx-dir JobId 0: Automatically selected Catalog: MyCatalog 17-Jan 11:04 xxx-dir JobId 0: Using Catalog MyCatalog 17-Jan 11:04 xxx-dir JobId 0: Storage resource File: not found 17-Jan 11:04 xxx-dir JobId 0: The defined Storage resources are: 17-Jan 11:04 xxx-dir JobId 0: 1: Client1Storage 17-Jan 11:04 xxx-dir JobId 0: 2: Client2Storage 17-Jan 11:04 xxx-dir JobId 0: 3: Client3Storage 17-Jan 11:04 xxx-dir JobId 0: 4: Client4Storage 17-Jan 11:04 xxx-dir JobId 0: 5: Client5Storage 17-Jan 11:04 xxx-dir JobId 0: 6: Client6Storage 17-Jan 11:04 xxx-dir JobId 0: Selection aborted, nothing done. -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet ___ Bacula-users mailing list Bacula-users@lists.sourceforge.netmailto:Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users This email and any files transmitted with it contain confidential and proprietary information and is solely for the use of the intended recipient. If you are not the intended recipient please return the email to the sender and delete it from your computer and you must not use, disclose, distribute, copy, print or rely on this email or its contents. This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase or sale of any financial instrument or as an official confirmation of any transaction. Any comments or statements made herein do not necessarily reflect those of GSA Capital. GSA Capital Partners LLP is authorised and regulated by the Financial Conduct Authority and is registered in England and Wales at Stratton House, 5 Stratton Street, London W1J 8LA, number OC309261. GSA Capital Services Limited is registered in England and Wales at the same address, number 5320529. -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Bacula daemon message
Are you SURE there isn't anything like a crontab somewhere that someone set up? This very very very very much has to be something that is being either typed in to bconsole or executed via a script somewhere. It isn't something Bacula is doing on its own. Bryn On 2015-01-17 10:54 AM, Polcari, Joe (Contractor) wrote: Nope, none of that. No admin jobs. All my storage is File. Backups and restores work fine. *From:*Roberts, Ben [mailto:ben.robe...@gsacapital.com] *Sent:* Saturday, January 17, 2015 1:05 PM *To:* Polcari, Joe (Contractor); bacula-users@lists.sourceforge.net *Subject:* RE: Bacula daemon message Do you have an admin job in your config that's running console commands? It looks like something is executing purge commands automatically which sounds really rather dangerous to the health of your backups. The good news is it doesn't seem to be working because you no longer have a File storage any more, but if you were ever to re-create it you might find backups being randomly deleted. Ben Roberts -Original Message- From: Polcari, Joe (Contractor) [mailto:joe_polc...@cable.comcast.com] Sent: 17 January 2015 17:22 To: bacula-users@lists.sourceforge.net mailto:bacula-users@lists.sourceforge.net Subject: [Bacula-users] FW: Bacula daemon message How do I stop these? They seem to come at random times once a day. -Original Message- From: root@xxx mailto:root@xxx On Behalf Of Bacula Sent: Saturday, January 17, 2015 11:04 AM To: bac...@localhost.xxx mailto:bac...@localhost.xxx Subject: Bacula daemon message 17-Jan 11:04 xxx-dir JobId 0: This command can be DANGEROUS!!! It purges (deletes) all Files from a Job, JobId, Client or Volume; or it purges (deletes) all Jobs from a Client or Volume without regard to retention periods. Normally you should use the PRUNE command, which respects retention periods. 17-Jan 11:04 xxx-dir JobId 0: Automatically selected Catalog: MyCatalog 17-Jan 11:04 xxx-dir JobId 0: Using Catalog MyCatalog 17-Jan 11:04 xxx-dir JobId 0: Storage resource File: not found 17-Jan 11:04 xxx-dir JobId 0: The defined Storage resources are: 17-Jan 11:04 xxx-dir JobId 0: 1: Client1Storage 17-Jan 11:04 xxx-dir JobId 0: 2: Client2Storage 17-Jan 11:04 xxx-dir JobId 0: 3: Client3Storage 17-Jan 11:04 xxx-dir JobId 0: 4: Client4Storage 17-Jan 11:04 xxx-dir JobId 0: 5: Client5Storage 17-Jan 11:04 xxx-dir JobId 0: 6: Client6Storage 17-Jan 11:04 xxx-dir JobId 0: Selection aborted, nothing done. -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Bacula daemon message
On 01/17/2015 03:29 PM, Polcari, Joe (Contractor) wrote: [root@cdcdbaculadir ~]# crontab -l no crontab for root Hi Joe, It may be that a job is running as a user other than root, try looking in /var/run/cron/crontabs (location may vary depending on distribution (assuming Linux here), and version of cron. But since you said random times of the day I have to doubt that it is a cron job calling a command or script. Since no one mentioned it yet, I'd like to say that it is also possible that a script o a person on another machine is running bconsole to connect to your server and is issuing a purge command. Check your bacula-dir.conf file for the line: Password = X Change to a nice, long random string created by something like pwgen (on Linux), then restart the Bacula director. Now, this will prevent whoever or whatever is attempting to purge your volumes from authenticating to the director, but you will probably see authentication error emails instead of purge warning emails at that point. :) Next step, run tcpdump, listening on all interfaces, include time stamps and write out to file: tcpdump -i any - tcp port 9101 21 /tmp/whoIsConnectingToBaculaDir.txt Then wait for one of those random emails... Once you get that email, you can stop the tcpdump. Take a look at the timestamp of the email, then correlate that time in the tcpdump output file. At this point you should have an idea where the connections are coming from and stop them. Good luck! :) -- Bill Arlofski Reverse Polarity, LLC http://www.revpol.com/ -- Not responsible for anything below this line -- -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Bacula daemon message
What about other users crontabs? The bacula user for instance. Or perhaps a RunScript on one of your Bacula Jobs? As Bryn said, this is not something that Bacula is doing on its own. Regards Mike On 2015-01-18 09:29, Polcari, Joe (Contractor) wrote: [root@cdcdbaculadir ~]# crontab -l no crontab for root [root@cdcdbaculadir ~]# FROM: Bryn Hughes [mailto:li...@nashira.ca] SENT: Saturday, January 17, 2015 3:13 PM TO: bacula-users@lists.sourceforge.net SUBJECT: Re: [Bacula-users] Bacula daemon message Are you SURE there isn't anything like a crontab somewhere that someone set up? This very very very very much has to be something that is being either typed in to bconsole or executed via a script somewhere. It isn't something Bacula is doing on its own. Bryn On 2015-01-17 10:54 AM, Polcari, Joe (Contractor) wrote: Nope, none of that. No admin jobs. All my storage is File. Backups and restores work fine. FROM: Roberts, Ben [mailto:ben.robe...@gsacapital.com] SENT: Saturday, January 17, 2015 1:05 PM TO: Polcari, Joe (Contractor); bacula-users@lists.sourceforge.net SUBJECT: RE: Bacula daemon message Do you have an admin job in your config that's running console commands? It looks like something is executing purge commands automatically which sounds really rather dangerous to the health of your backups. The good news is it doesn't seem to be working because you no longer have a File storage any more, but if you were ever to re-create it you might find backups being randomly deleted. Ben Roberts -Original Message- From: Polcari, Joe (Contractor) [mailto:joe_polc...@cable.comcast.com] Sent: 17 January 2015 17:22 To: bacula-users@lists.sourceforge.net Subject: [Bacula-users] FW: Bacula daemon message How do I stop these? They seem to come at random times once a day. -Original Message- From: root@xxx On Behalf Of Bacula Sent: Saturday, January 17, 2015 11:04 AM To: bac...@localhost.xxx Subject: Bacula daemon message 17-Jan 11:04 xxx-dir JobId 0: This command can be DANGEROUS!!! It purges (deletes) all Files from a Job, JobId, Client or Volume; or it purges (deletes) all Jobs from a Client or Volume without regard to retention periods. Normally you should use the PRUNE command, which respects retention periods. 17-Jan 11:04 xxx-dir JobId 0: Automatically selected Catalog: MyCatalog 17-Jan 11:04 xxx-dir JobId 0: Using Catalog MyCatalog 17-Jan 11:04 xxx-dir JobId 0: Storage resource File: not found 17-Jan 11:04 xxx-dir JobId 0: The defined Storage resources are: 17-Jan 11:04 xxx-dir JobId 0: 1: Client1Storage 17-Jan 11:04 xxx-dir JobId 0: 2: Client2Storage 17-Jan 11:04 xxx-dir JobId 0: 3: Client3Storage 17-Jan 11:04 xxx-dir JobId 0: 4: Client4Storage 17-Jan 11:04 xxx-dir JobId 0: 5: Client5Storage 17-Jan 11:04 xxx-dir JobId 0: 6: Client6Storage 17-Jan 11:04 xxx-dir JobId 0: Selection aborted, nothing done. -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet [1] ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users [2] Links: -- [1] http://p.sf.net/sfu/gigenet [2] https://lists.sourceforge.net/lists/listinfo/bacula-users -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] FW: Bacula daemon message
How do I stop these? They seem to come at random times once a day. -Original Message- From: root@xxx On Behalf Of Bacula Sent: Saturday, January 17, 2015 11:04 AM To: bac...@localhost.xxx Subject: Bacula daemon message 17-Jan 11:04 xxx-dir JobId 0: This command can be DANGEROUS!!! It purges (deletes) all Files from a Job, JobId, Client or Volume; or it purges (deletes) all Jobs from a Client or Volume without regard to retention periods. Normally you should use the PRUNE command, which respects retention periods. 17-Jan 11:04 xxx-dir JobId 0: Automatically selected Catalog: MyCatalog 17-Jan 11:04 xxx-dir JobId 0: Using Catalog MyCatalog 17-Jan 11:04 xxx-dir JobId 0: Storage resource File: not found 17-Jan 11:04 xxx-dir JobId 0: The defined Storage resources are: 17-Jan 11:04 xxx-dir JobId 0: 1: Client1Storage 17-Jan 11:04 xxx-dir JobId 0: 2: Client2Storage 17-Jan 11:04 xxx-dir JobId 0: 3: Client3Storage 17-Jan 11:04 xxx-dir JobId 0: 4: Client4Storage 17-Jan 11:04 xxx-dir JobId 0: 5: Client5Storage 17-Jan 11:04 xxx-dir JobId 0: 6: Client6Storage 17-Jan 11:04 xxx-dir JobId 0: Selection aborted, nothing done. -- New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
