Re: [Bacula-users] NDMP plugin for Bacula
Hi Radosław, Thanks for the information. I will think about this. If the migration is so simple, it helps a lot. I also finally got contacted by Bacula Systems. Best regards, Peter On 12.09.2023 18:38, Radosław Korzeniewski wrote: Hello, wt., 12 wrz 2023 o 18:24 Peter Milesson via Bacula-users napisał(a): Hi Radosław, Thanks for the information. I know that the NDMP-plugin is commercial, and we are willing to pay license fees (up to a reasonable amount, of course) for using it with Bacula community edition. If you want to use any Bacula Enterprise Plugin then you need to use Bacula Enterprise software. It won't work with Bacula Community which lack required API and has incompatible licence. I'm not interested in the full Bacula Enterprise edition, as it's a complete overkill in our case. Why? The base (core) Bacula Enterprise has "basically" the same features build-in. Another aspect is migration. You can't find easier migration in the wild ever! You will use the same configuration files and the same catalog database (which requires a simple catalog schema upgrade similar to standard Bacula version upgrade). You can do this "in-place". If forced to migrate our very well working Bacula installation, there are also other backup products to consider. I do not understand. I think you have mistaken the product. If your Bacula Community is well working then Bacula Enterprise will do the same or better. Though I'm quite annoyed that Bacula Enterprises hasn't bothered to contact me at all. If you still want an offer for Bacula Enterprise we can prepare it for you. *Just say yes*. Without your confirmation no one will force you to get one. Radek -- Radosław Korzeniewski rados...@korzeniewski.net ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] NDMP plugin for Bacula
Hello, wt., 12 wrz 2023 o 18:24 Peter Milesson via Bacula-users < bacula-users@lists.sourceforge.net> napisał(a): > Hi Radosław, > > Thanks for the information. > > I know that the NDMP-plugin is commercial, and we are willing to pay > license fees (up to a reasonable amount, of course) for using it with > Bacula community edition. > If you want to use any Bacula Enterprise Plugin then you need to use Bacula Enterprise software. It won't work with Bacula Community which lack required API and has incompatible licence. > I'm not interested in the full Bacula Enterprise edition, as it's a > complete overkill in our case. > Why? The base (core) Bacula Enterprise has "basically" the same features build-in. > Another aspect is migration. > You can't find easier migration in the wild ever! You will use the same configuration files and the same catalog database (which requires a simple catalog schema upgrade similar to standard Bacula version upgrade). You can do this "in-place". > If forced to migrate our very well working Bacula installation, there are > also other backup products to consider. > I do not understand. I think you have mistaken the product. If your Bacula Community is well working then Bacula Enterprise will do the same or better. > > Though I'm quite annoyed that Bacula Enterprises hasn't bothered to > contact me at all. > > If you still want an offer for Bacula Enterprise we can prepare it for you. *Just say yes*. Without your confirmation no one will force you to get one. Radek -- Radosław Korzeniewski rados...@korzeniewski.net ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] NDMP plugin for Bacula
Hi Peter, Please could you add me on Linked In, I will relay your request internally. https://www.linkedin.com/in/oliveiraped/ Best Às 17:22 de 12/09/23, Peter Milesson via Bacula-users escreveu: Hi Radosław, Thanks for the information. I know that the NDMP-plugin is commercial, and we are willing to pay license fees (up to a reasonable amount, of course) for using it with Bacula community edition. I'm not interested in the full Bacula Enterprise edition, as it's a complete overkill in our case. Another aspect is migration. If forced to migrate our very well working Bacula installation, there are also other backup products to consider. Though I'm quite annoyed that Bacula Enterprises hasn't bothered to contact me at all. Best regards, Peter On 12.09.2023 18:00, Radosław Korzeniewski wrote: Hello, wt., 12 wrz 2023 o 13:48 Peter Milesson via Bacula-users napisał(a): Hi folks, Is there anybody having any experience with Bacula community edition and the NDMP plugin (commercial)? Does it work with the community edition? If you have access to Bacula Enterprise NDMP Plugin then use it with your Bacula Enterprise installation. Do not bother to force the Bacula Community client to use this plugin. Just use Bacula Enterprise. This is the simplest possible solution. From a technical point of view I know how to do it. But from a legal point of view you should not use this software in that way. I need to backup data from a NDMP-compliant NAS, and it starts to get urgent. Just use Bacula Enterprise. This is the simplest possible solution. I contacted Bacula Systems about a month ago about this, but no reaction so far. Hopefully, I can get some more information from the community. Ok, this changes the view. I can forward your email to our sales to close the deal if you wish. We (Inteos) are very professional and we can help in every case. Radek -- Radosław Korzeniewski rados...@korzeniewski.net ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] NDMP plugin for Bacula
Hello, wt., 12 wrz 2023 o 13:48 Peter Milesson via Bacula-users < bacula-users@lists.sourceforge.net> napisał(a): > Hi folks, > > Is there anybody having any experience with Bacula community edition and > the NDMP plugin (commercial)? Does it work with the community edition? > If you have access to Bacula Enterprise NDMP Plugin then use it with your Bacula Enterprise installation. Do not bother to force the Bacula Community client to use this plugin. Just use Bacula Enterprise. This is the simplest possible solution. >From a technical point of view I know how to do it. But from a legal point of view you should not use this software in that way. > I need to backup data from a NDMP-compliant NAS, and it starts to get > urgent. Just use Bacula Enterprise. This is the simplest possible solution. > I contacted Bacula Systems about a month ago about this, but no > reaction so far. Hopefully, I can get some more information from the > community. > Ok, this changes the view. I can forward your email to our sales to close the deal if you wish. We (Inteos) are very professional and we can help in every case. Radek -- Radosław Korzeniewski rados...@korzeniewski.net ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] NDMP plugin for Bacula
Hi Radosław, Thanks for the information. I know that the NDMP-plugin is commercial, and we are willing to pay license fees (up to a reasonable amount, of course) for using it with Bacula community edition. I'm not interested in the full Bacula Enterprise edition, as it's a complete overkill in our case. Another aspect is migration. If forced to migrate our very well working Bacula installation, there are also other backup products to consider. Though I'm quite annoyed that Bacula Enterprises hasn't bothered to contact me at all. Best regards, Peter On 12.09.2023 18:00, Radosław Korzeniewski wrote: Hello, wt., 12 wrz 2023 o 13:48 Peter Milesson via Bacula-users napisał(a): Hi folks, Is there anybody having any experience with Bacula community edition and the NDMP plugin (commercial)? Does it work with the community edition? If you have access to Bacula Enterprise NDMP Plugin then use it with your Bacula Enterprise installation. Do not bother to force the Bacula Community client to use this plugin. Just use Bacula Enterprise. This is the simplest possible solution. From a technical point of view I know how to do it. But from a legal point of view you should not use this software in that way. I need to backup data from a NDMP-compliant NAS, and it starts to get urgent. Just use Bacula Enterprise. This is the simplest possible solution. I contacted Bacula Systems about a month ago about this, but no reaction so far. Hopefully, I can get some more information from the community. Ok, this changes the view. I can forward your email to our sales to close the deal if you wish. We (Inteos) are very professional and we can help in every case. Radek -- Radosław Korzeniewski rados...@korzeniewski.net ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] TLS using certs with X509v3 extensions
On Tue, Sep 12, 2023, at 6:23 AM, Vanush "Misha" Paturyan wrote:
> On Mon, 11 Sept 2023 at 20:19, Dan Langille wrote:
>>
>> Yes, I think it's SSL erroring out, I agree with your theory.
>>
>> Which means: what Key Usage needs to be included for each of:
>>
>> * bacula-fd
>> * bacula-sd
>> * bacula-dir
>>
>> Thank you for sharing your details. Is this cert used with bacula-sd or
>> bacula-fd?
>
> That was a certificate from bacula-fd. bacula-sd certificate has the same
> extensions (Key Usage: Digital Signature, Non Repudiation, Key Encipherment,
> Data Encipherment). Its CN matches the value of SDAddress in the `Storage`
> section of bacula-sd.conf file. For completeness, the TLS related entries in
> that file are:
> TLS Enable = yes
> TLS Require = no
> TLS Verify Peer = yes
> TLS CA Certificate =
> TLS Certificate =
> TLS Key =
We differ only in TLS Require
One thing I just realized: There are two clauses in configuration files, each
of which can take a certificate. Until now, I never considered that each one
could be a different cert; one client, one server.
Let me us my bacula-sd as an example:
Storage {
Name = "bacula-sd-04"
TLS Certificate = server key goes here
}
Director {
Name = "bacula-dir"
TLS Certificate = client cert goes here
}
Perhaps that is what I need to investigate. Also, I could look into a a
dual-use certificate: it's
possible for the EKU to assert both "Web Client" and "Web Server"
>
>>
>> I ask because yesterday I started running some copy jobs. The cert used by
>> bacula-sd was acceptable for receiving backups. It was not acceptable for
>> copy jobs.
>>
>> 09-Sep 10:19 bacula-sd-04 JobId 358322: Error: openssl.c:68 Connect failure:
>> ERR=error:1417C086:SSL routines:tls_process_client_certificate:certificate
>> verify failed
>> 09-Sep 10:19 bacula-sd-04 JobId 358322: Fatal error: bnet.c:75 TLS
>> Negotiation failed.
>> 09-Sep 10:19 bacula-sd-04 JobId 358322: Fatal error: TLS negotiation failed
>> with FD at "10.55.0.7:27230"
>> 09-Sep 10:19 bacula-sd-04 JobId 358322: Fatal error: Incorrect authorization
>> key from File daemon at client rejected.
>> For help, please see:
>> http://www.bacula.org/rel-manual/en/problems/Bacula_Frequently_Asked_Que.html
>> 09-Sep 10:19 bacula-sd-04 JobId 358322: Security Alert: Unable to
>> authenticate File daemon
>
> I wonder if your SD connects to itself here, and fails to validate itself?
> The log above does mention an FD at 10.55.0.7. Does that FD component have a
> certificate? maybe there's mis-match with the CN of that certificate and the
> FDAddress directive in the bacula-fd.conf file?
There is no bacula-fd at 10.55.0.7 - it is not running and not configured. It
is bacula-sd only at that IP address.
Yes, bacula-sd-04 is at 10.55.0.7 - I don't know why FD is mentioned in the
error.
>From the docs (https://bacula.org/13.0.x-manuals/en/main/Migration_Copy.html):
The Copy and the Migration jobs run without using the File daemon by copying
the data from the old backup Volume to a different Volume in a different Pool
My reading of that: an FD should not be involved here.
--
Dan Langille
d...@langille.org
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] NDMP plugin for Bacula
Hi folks, Is there anybody having any experience with Bacula community edition and the NDMP plugin (commercial)? Does it work with the community edition? I need to backup data from a NDMP-compliant NAS, and it starts to get urgent. I contacted Bacula Systems about a month ago about this, but no reaction so far. Hopefully, I can get some more information from the community. Best regards, Peter ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] TLS using certs with X509v3 extensions
On Mon, 11 Sept 2023 at 20:19, Dan Langille wrote: > > Yes, I think it's SSL erroring out, I agree with your theory. > > Which means: what Key Usage needs to be included for each of: > > * bacula-fd > * bacula-sd > * bacula-dir > > Thank you for sharing your details. Is this cert used with bacula-sd or > bacula-fd? > That was a certificate from bacula-fd. bacula-sd certificate has the same extensions (Key Usage: Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment). Its CN matches the value of SDAddress in the `Storage` section of bacula-sd.conf file. For completeness, the TLS related entries in that file are: TLS Enable = yes TLS Require = no TLS Verify Peer = yes TLS CA Certificate = TLS Certificate = TLS Key = > I ask because yesterday I started running some copy jobs. The cert used by > bacula-sd was acceptable for receiving backups. It was not acceptable for > copy jobs. > > 09-Sep 10:19 bacula-sd-04 JobId 358322: Error: openssl.c:68 Connect > failure: ERR=error:1417C086:SSL > routines:tls_process_client_certificate:certificate verify failed > 09-Sep 10:19 bacula-sd-04 JobId 358322: Fatal error: bnet.c:75 TLS > Negotiation failed. > 09-Sep 10:19 bacula-sd-04 JobId 358322: Fatal error: TLS negotiation > failed with FD at "10.55.0.7:27230" > 09-Sep 10:19 bacula-sd-04 JobId 358322: Fatal error: Incorrect > authorization key from File daemon at client rejected. > For help, please see: > http://www.bacula.org/rel-manual/en/problems/Bacula_Frequently_Asked_Que.html > 09-Sep 10:19 bacula-sd-04 JobId 358322: Security Alert: Unable to > authenticate File daemon > I wonder if your SD connects to itself here, and fails to validate itself? The log above does mention an FD at 10.55.0.7. Does that FD component have a certificate? maybe there's mis-match with the CN of that certificate and the FDAddress directive in the bacula-fd.conf file? Misha ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
