Re: [Bacula-users] Problem: deleted files entrys are still in the database and are restored
Hello, But it the situation, when a file is knowingly removed/email deleted/whatever is deleted is in 99% of cases. Knowingly, i repeat. And if this file is still restored this leads the whole restore-process ad absurdum... As is the case with most tools, you need to evaluate them and discover the best way to implement in your environment. You've done this and discovered the best solution would be full backups each night. I've worked with several commercial backup systems, most of them have the same feature yes its annoying but its the nature of the beast. -- R.I.Pienaar - Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Catalog problem
Hello, It is in the documentation, just like the answers to every other question you asked: http://www.bacula.org/rel-manual/Installing_Configurin_MySQL.html#mysql_phase2 You need to read the documentation. Bacula is complex, you need to read the documentation BEFORE you ask the list questions. Spend at least a day reading the whole document to get a solid overview, then start going through the tutorial sections etc, this way when you read or come across an error you already have a good background of things involved in bacula. You also need to know linux and mysql very well before starting. And before mailing the list, you should read http://www.bacula.org/?page=support If you're not prepared to do these things, you need to buy a point and click backup system. On 1/8/08, Reynier Perez Mira [EMAIL PROTECTED] wrote: Hi Andrea: Generally speaking, opening two threads for the same problem is not going to get you an answer any sooner. Having said that, Soury for that, is not my intention open and reopen the same problem. My guess is that you did not create a 'bacula' database within mysql, and/or that the user '[EMAIL PROTECTED]' is missing the correct access privileges *for the bacula database*. bacula database exists, bacula user have ALL PRIVILEGES. Can you connect with 'mysql -u bacula -p bacula' ? Yes, I can connect. Also, do not forget that you will need to create the database schema (with the included scripts) before starting to use the program. What you mean with database schema? What command I need to run? Where to looking for those scripts? Ing. Reynier Pérez Mira - Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users -- R.I.Pienaar - Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] New Infrastructure Implementation
On 1/4/08, Michel Meyers [EMAIL PROTECTED] wrote: - I will need to stop mysql slave before and restart it after backup. I read the documentation but something is still not clear for me. Can I execute a script on client before and a script on client after and start the backup only if success? Or it's better to use a script on director that remotely stops the db engine? You can use both. It also depends on how you back up your MySQL databases. If you just grab MySQL's files from its data directories, you have to shut it down. Alternatively, you could dump the databases (using mysqldump) and then back up those db dumps. The advantage of the latter is that restores are much easier and don't depend so much on your MySQL version etc (ie if you changed MySQL versions since the backup was taken, a restore might be very troublesome). You should investigate: - using LVM to store your databases on - using mysqlhotcopy and innodb hot backup to drive the backups and then backing that up - or use zmanda + LVM to back up your data with bacula pulling the backups from your DB servers to your tape You can dump as well and I suggest doing regular dumps but on large databases with many indexes restoring can take a long long time (days) so not optimal. - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] New Infrastructure Implementation
hello, You should investigate: - using LVM to store your databases on Are you talking about using LVM snapshot feature? It's a little difficult because we need to modify filesystem on production servers yeah, that gives you the shortest downtime with the quickest restore option for backups. You snapshot the DB, with innodb you dont even need to lock tables mostly It Just Works. Harder with MyISAM. But if you dont have LVM now yes it will be a pain. - using mysqlhotcopy and innodb hot backup to drive the backups and then backing that up this is not bad, I'll keep it in mind. only if you can afford table locks. - or use zmanda + LVM to back up your data with bacula pulling the backups from your DB servers to your tape It seems cool, but reading from the zmanda site it seems that it support tape drives. why do I need bacula, too? there are 2 products, Amanda - thats like bacula kind of, a general backup solution. Zmanda thats a perl script specifically for backing up mysql and nothing else, it creates files that you should then move to your backup storage using either Bacula or anything else like it. Zmanda is aware of LVM, hot copies and all sorts of things and usually just does the right thing, if your OS support snapshots it will use them etc, well worth investigating and makes a good partner to bacula. You can dump as well and I suggest doing regular dumps but on large databases with many indexes restoring can take a long long time (days) so not optimal. In fact, we have huge tables, so it's better to restore files. We dropped the idea of backing up db (full) weekly and replication log daily (incremental) because it take a long of time to restore a single table. will you be happy then to take the DB you are restoring to offline during the restore? You would need to do that for this kind of restore. Sounds to me though that LVM with hourly snapshots will be a great win for you, you make hourly snapshots on each server and when a dev makes a mistake you put the last hours back. and you can just use the snapshot made at midnight and ship it off-machine using bacula. Might be a big enough win that reinstalling servers becomes viable. With that many servers I guess you already have it automated anyway. -- R.I.Pienaar - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] New Infrastructure Implementation
Hello, On 1/4/08, Frank Sweetser [EMAIL PROTECTED] wrote: One thing you should really be aware of, then, is that the practice of splitting each table out into a set of files is only applicable with MyISAM tables. Any InnoDB tables will all be stored in the InnoDB table space, which may be multiple files, but will not be split on any simple boundaries like tables. set innodb_file_per_table in /etc/my.cnf - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] New Infrastructure Implementation
hey, - - shut down MySQL - - initialize LVM snapshot - - bring up MySQL again - - back up from the snapshot - - release snapshot when backup is complete no need to shut the db down, just issue: --- echo About to lock tables time (echo FLUSH TABLES WITH READ LOCK |mysql) echo About to get master status time (echo SHOW MASTER STATUS|mysql master-status-`date +'%Y-%m-%d'`) echo About to create snapshot time lvcreate --size 5G --snapshot --name snap --permission r --verbose /dev/mysql/mysqldata echo About to unlock tables time (echo UNLOCK TABLES|mysql) --- this locks the tables for read/write for a very short period and records the master log positions at the time of the freeze, you can now use this for a backup and/or use the backup to build replication slaves and you'll know what log positions to give your slaves. you also want to read: http://www.mysqlperformanceblog.com/2006/08/21/using-lvm-for-mysql-backup-and-replication-setup/ http://mike.kruckenberg.com/archives/2006/05/mysql_backups_u.html and some general LVM docs: http://www.howtoforge.com/linux_lvm http://www.howtoforge.com/linux_lvm_snapshots - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Run before job = permission denied
It seems something in your command_service stop has problems running without a terminal - when a program invokes it rather than a human from a working terminal, it's not a permissions problem On 19/09/06, Diego [EMAIL PROTECTED] wrote: Hi, I need to run a script to stop a service before do the backup. Only one user can stop this service, this user not need password for run the stop command. In my bacula-dir.config I have: run before job = /opt/bacula/script_stop_service In the script_stop_service I have: su - service_user -c command_service stop And the error is RunBefore: standard in must be a tty The script_stop_service permissions are: - rwx r-x r-- 1 root bacula script_stop_service Any suggestion? -- By Diego... 8-P - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users -- R.I.Pienaar http://www.devco.net - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Run before job = permission denied
hello, Now using sudo: sudo -u zimbra -p '(withoutpassword)' '/opt/zimbra/bin/zmcontrol' stop; 19-sep 11:49 ZimbraBK-dir: RunBefore: 19-sep 11:49 ZimbraBK-dir: CopiaPrueba.2006-09-19_11.49.13 Fatal error: RunBeforeJob error: ERR=Child exited with code 1 Where can I see a log of the failure? It's a fedora installation. Why not just use the zimbra init script that lives in /etc/init.d/zimbra to stop and start the service? it should take care of all of this for you. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Please help me getting TLS!
I don't think the windows version of bacula has TLS compiled in. anyway, the problem you have there is that your host address in the client config is 192... while your certificate has a hostname as its CN, the host address in your director config must match the CN of the certificate. I wrote some TLS documentation that may help you: http://www.devco.net/pubwiki/Bacula/TLS On 18/09/06, Yanik Doucet [EMAIL PROTECTED] wrote: Hi everone, I'm trying to get TLS working. I'm new at Bacula but I'm already backing up several Windows server and it works quite well. I'd like to throw in some encryption. In fact I need to throw in some encryption, because some people here aren't too crazy for open source software and encrypting everything would just shut their mouth. Ok, where do I begin… I don't know jack about TLS. Just to mention, I used the RPMs to install bacula. So here's the steps I took so far. As stated in the documentation, I made a certificate that way: openssl req -new -x509 -nodes -out bacula.pem -keyout bacula.pem -days 3650 Now I was in my /etc/bacula directory on my CentOS 4.4 server when I issued the openssl command, so the path to bacula.pem is /etc/bacula/bacula.pem Now I have to add some lines to to my config files. I started the simpliest way possible, I add these lines: TLS Enable = yes TLS Require = yes TLS Certificate = /etc/bacula/bacula.pem TLS Key = /etc/bacula/bacula.pem TLS CA Certificate File = /etc/bacula/bacula.pem To the director part of bconsole.conf, to the director and storage part of bacula-dir.conf, and to the director and storage part of bacula-sd.conf. Now the way I see it, I could connect to the director thru bconsole in an encrypted manner and with 'status storage' see the status of the storage deamon, in an encrypted manner too. Now as soon as I try to connect with bconsole, I get this: [EMAIL PROTECTED] bacula]# bconsole Connecting to Director 192.168.100.6:9101 18-Sep 14:06 bconsole: Fatal error: bnet.c:502 TLS host certificate verification failed. Host 192.168.100.6 did not match presented certificate TLS negotiation failed Director authorization problem. Most likely the passwords do not agree. If you are using TLS, there may have been a certificate validation error during the TLS handshake. Please see http://www.bacula.org/rel-manual/faq.html#AuthorizationErrors for help. And this is where I'M lost. What's wrong with my TLS setting? Thanks Yanik - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users -- R.I.Pienaar http://www.devco.net - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] WOW
hello, I think its safe to say that there is no canned solution to make Bacula talk directly to Zabbix you'd need to write something to do it. There are many posts in the archives here that lists ways to monitor nagios, some lets nagios email the central monitoring, some puts down files on a webserver with success/fail statuses and some query the MySQL database of the Bacula director, any of these will work with Zabbix but you'll need to script something to make the two work and I suspect that is dependant on your local Zabbix installtion etc. On 11/09/06, Janco van der Merwe [EMAIL PROTECTED] wrote: Yes but now you have to have a 3rd party app and requires subscription but Vodacom still has the e-mail to SMS but that is limited to 6 a day which will work but we are currently using the MTN network with our Zabbix which is on another machine and I hoped that there was a possibility that I could some how configure Bacula to use Zabbix which will solve this but I mean this is not a necessary thing just a nice to have, at least when jobs fail I have prior notice so that when my boss corners me I at least know and give him that all wonderful IT answer of I know and I'm busy working on it Janco v.d Merwe Network Administrator Dunns Stores (PTY) Ltd Switchboard: 011 541 3000 Direct: 011 541 3007 Fax: 086 632 1708 -Original Message- From: Alan Brown [mailto:[EMAIL PROTECTED] Sent: 11 September, 2006 11:42 To: Matt Cowger Cc: Janco van der Merwe;Bacula-users@lists.sourceforge.net Subject: Re: [Bacula-users] WOW On Sat, 9 Sep 2006, Matt Cowger wrote: My apologies - your email address was .co.za, so i assumed Zaire. .za = south africa Didn't realize your SMSs were so limited - indeed a script to attach to a GSM phone might be your best route, but I can't give you any guidance on that :(. Many years ago MTN networks used to run a email-SMS gateway (which promptly got overrun by spammers and switched to subscription mode about 1999-2000). Is that still going? AB This communication and any attachments are confidential and intended for the sole use of the intended recipient. Any form of copying or disclosure of this communication to any third parties without permission is prohibited. The contents of this communication and its attachments are not intended to be relied upon in law without subsequent written confirmation. As such, Dunns Stores (Pty) Ltd accept no responsibility or liability (including negligence) for the consequences of anyone acting, or not acting, on information contained therein. If you have received this communication in error please notify us immediately and destroy or delete it. - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users -- R.I.Pienaar http://www.devco.net - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Filesystem change prohibited. why?
From the bacula manual:
onefs=yes|no
If set to yes (the default), Bacula will remain on a single file
system. That is it will not backup file systems that are mounted on a
subdirectory. If you are using a *nix system, you may not even be
aware that there are several different filesystems as they are often
automatically mounted by the OS (e.g. /dev, /net, /sys, /proc, ...).
With Bacula 1.38.0 or later, it will inform you when it decides not to
traverse into another filesystem. This can be very useful if you
forgot to backup a particular partition. An example of the
informational message in the job report is:
so add to your FileSet's onefs=no
On 08/08/06, Marco Strullato [EMAIL PROTECTED] wrote:
hi all,
do you know why I get Filesystem change prohibited when I run bacula?
08-Aug 16:40 DirectorServer: Start Backup JobId 95,
Job=BackupShannon.2006-08-08_16.39.58
08-Aug 16:40 StorageServer: Volume centroservizi previously written,
moving to end of data.
Shannon: Filesystem change prohibited. Will not descend into /sys
Shannon: Filesystem change prohibited. Will not descend into /boot
Shannon: Filesystem change prohibited. Will not descend into /statistiche
Shannon: Filesystem change prohibited. Will not descend into /package
Shannon: Filesystem change prohibited. Will not descend into /dev
Shannon: Filesystem change prohibited. Will not descend into /mnt/backup
definitions are:
Job {
Name = BackupShannon
Client = Shannon
JobDefs = BackupLinux
Level= Full
Storage = StorageServer
FileSet = LinuxFileSet
Schedule = WeeklyCycle
Priority = 10
Type = Backup
Messages = Standard
}
Job {
Name = RestoreShannon
Type = Restore
Client = Shannon
FileSet = LinuxFileSet
Storage = StorageServer
Pool = BackupPool
Messages = Standard
Where= /tmp/bacula-restores
}
JobDefs {
Name = BackupLinux
Type = Backup
Storage = StorageServer
Level= Incremental
Schedule = WeeklyCycle
Messages = Standard
Pool = BackupPool
Priority = 10
}
FileSet {
Name = LinuxFileSet
Include {
Options {
signature = MD5
compression = GZIP
}
File = /
}
Exclude {
File = /proc
File = /tmp
File = /.journal
File = /.fsck
}
}
Client {
Name = Shannon
Address = shannon
FDPort = 9102
Catalog = MyCatalog
Password = password
}
-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
--
R.I.Pienaar http://www.devco.net
-
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] These messages from Bacula are useless
hello, it's not optimal but you can get each FD to write a log on its own box by adding an append directive to its messages settings. On 02/08/06, Alan Brown [EMAIL PROTECTED] wrote: On Wed, 2 Aug 2006, Kern Sibbald wrote: Kern, is this fixed in a newer version? I believe more information is printed in 1.39.x, but there are so many changes that I cannot remember the exact case that was enhanced. Can we get it fixed? If it isn't already fixed, then it will be some time unless someone sends a patch since it is not on the top of my priority list which is already too long. Generally one knows exactly which daemon you are dealing with from the context unless you are driving the console with a script. In the case of mismatched file daemons it's easy enough to work out which one is playing up by running status client on each one. In other cases (spooling/unspooling or client unreachable, etc) run out of schedules then more information about which client has trouble and which job has just started spooling/unspooling would be useful. AB - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users -- R.I.Pienaar http://www.devco.net - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Need help to mail messages.
Seems the problem is: Fatal gethostbyname for myself failed epohost: ERR=Success it thinks your local hostname is 'epohost' but that isnt in DNS, you can try adding epohost to /etc/hosts and see if that helps On 02/08/06, Erik P. Olsen [EMAIL PROTECTED] wrote: I don't understand how the bsmtp works. I thought I had found the correct syntax, but I keep getting errors I don't understand. The following is the error messages that I find in the console: 02-Aug 002:51 epo-dir: message.c:454 Mail prog: bsmtp: bsmtp.c:230 Fatal gethostbyname for myself failed epohost: ERR=Success 02-Aug 02:51 epo-dir: BackupCatalog.2006-08-02_02.15.00 Error: message.c:465 Mail program terminated in error. CMD=/etc/bacula/bin/bsmtp -h mail.tele.dk -f (Bacula) [EMAIL PROTECTED] -s Bacula: Backup OK of epohost-fd Full [EMAIL PROTECTED] What can possibly be wrong? mail.tele.dk is the normal smtp server I use with all mail and should be correct. Why does bsmtp issue gethostbyname for epohost? I see no need for that. -- Erik P. Olsen, Civilingeniør, MSc Solsortvej 30, DK-2000 Frederiksberg, Denmark Phone: +45 38346480, Fax: +45 38346470, Mobil: +45 40765300 - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users -- R.I.Pienaar http://www.devco.net - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Error e-mails caused by Nagios monitoring
hello, I wrote something up about monitoring with Nagios, I prefer monitoring each server being backed up for backup status, this means that even if I accidently delete/disable a host from bacula configs I'd still pick it up with my nagios: http://www.devco.net/pubwiki/Bacula/MonitoringWithNagios You can also create a hourly job that does a watchdog type thing for your nagios: http://www.bacula.org/rel-manual/Tips_Suggestions.html#SECTION000355000 That way you can be sure your backups are working end to end without connecting to the daemon ports and confusing them. On 31/07/06, Peter Sjoberg [EMAIL PROTECTED] wrote: On Fri, 2006-07-28 at 15:04 +0200, Bartosz Piec wrote: Hello, I'm using Nagios to monitor Bacula server. To do this, I'm connecting on the TCP 9101 port to see if connection can be established. Every time Nagios connects, I'm getting an e-mail saying: 28-Jul 14:57 my-director: ERROR in authenticate.c:269 UA Hello from client:my.nagios.host.ip:36131 is invalid. Len=0 How to get rid of this? I want do disable _only_ this type of e-mails. Don't know how to get rid of that without possible loosing other mails also (besides using something like procmail) What you could do is to do a little more complete check by doing something like echo status client=sisko-fd|./bconsole and parse the output. Then you can also check for hung jobs and stuff. You could also check the other parts by echo status client=remote-fd|./bconsole echo status storage=File|./bconsole echo status dir|./bconsole If you write a nagios plugin, please post it. I just started playing with nagios and wouldn't mind checking bacula also but haven't looked around for any existing plugin. -- --- Techwiz, Peter SjobergPGP key (12F506C8) on keyserver homepage Key fingerprint = 3DC2 CEBA 1590 B41A 3780 955A DB42 02BB 12F5 06C8 mailto:peters AT techwiz.ca http://www.techwiz.ca/~peters - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users -- R.I.Pienaar http://www.devco.net - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Bacula-web
check your webserver error log, most PHPs thesedays default to only showing errors in the error_log and not to the browser On 01/08/06, Duarte Santos [EMAIL PROTECTED] wrote: Hello All! I isntaller bacula-web, i run the test.php and its all ok. But when i access the address only show a white page, no errors. DB is well configured, because i used to get an error complaining about the DB, but i fixed that. Any tips? Duarte Santos Netcall -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. Mailscanner thanks transtec Computers for their support. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users -- R.I.Pienaar http://www.devco.net - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Bacula-web
edit the root variable in the bacula.conf in the configs dir to be something like http://domain/ On 01/08/06, Duarte Santos [EMAIL PROTECTED] wrote: Ok, i got it. templates_c wasn't writable. Now the images dont appear on browser. like... http://images/s_ok.gif but i don't know why he is not putting http://domain/images/s_ok.gif. Theres a variable *root* on the report template... any tips? On Tue, 2006-08-01 at 16:40 +0100, R.I. Pienaar wrote: check your webserver error log, most PHPs thesedays default to only showing errors in the error_log and not to the browser On 01/08/06, Duarte Santos [EMAIL PROTECTED] wrote: Hello All! I isntaller bacula-web, i run the test.php and its all ok. But when i access the address only show a white page, no errors. DB is well configured, because i used to get an error complaining about the DB, but i fixed that. Any tips? Duarte Santos Netcall -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. Mailscanner thanks transtec Computers for their support. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users -- R.I.Pienaar http://www.devco.net -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. Mailscanner thanks transtec Computers for their support. -- R.I.Pienaar http://www.devco.net - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Self Signed certificate
Anyway to use TLS whith self signed ceriticates? Not for all of the components, no. You can't use a self signed certificate for anything that listens for TCP connections. The reasoning is that since you can't validate a self signed cert, it's impossible to know if you're connected to a legitimate server or a malicious man in the middle attacker. I'd reccomend using TinyCA to set up your own mini CA instead. you can use self signed certs for all components, I do, just use your own CA to sign them and be sure to distribute the CA root cert to all the clients and directors. -- R.I.Pienaar http://www.devco.net - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Building SRPM on Centos
hello, So I had another go at this, the bacula-dir on CentOS 4.3 just does not like OpenSSL, even with your build instructions, these are mine, only very slightly modified - change email addresses and removed python: CFLAGS=-g -Wall -O0 -I/usr/lib/mysql \ LDFLAGS=-L/usr/lib/mysql -L/lib -L/usr/lib \ ./configure \ --sbindir=/usr/local/bin/bacula \ --sysconfdir=/etc/bacula \ --with-scriptdir=/etc/bacula \ --enable-smartalloc \ --with-pid-dir=/var/run/bacula \ --with-subsys-dir=/var/run/subsys/bacula \ --enable-conio \ --with-openssl \ --with-mysql \ --with-working-dir=/usr/local/bin/bacula/working \ [EMAIL PROTECTED] \ [EMAIL PROTECTED] \ --with-dir-user=bacula \ --with-dir-group=bacula \ --with-sd-user=bacula \ --with-sd-group=bacula \ --with-fd-user=root \ --with-fd-group=root it builds, it installs, it seems happy, then i fire it up against a config file with SSL directives and I get: /usr/local/bin/bacula/bacula-dir -c /etc/bacula/bacula-dir.conf 21-Jul 18:59 bacula-dir: ERROR in tls.c:224 Error setting cipher list, no valid ciphers available *** glibc detected *** free(): invalid pointer: 0x00134d00 *** # rpm -qa|grep openssl openssl-0.9.7a-43.8 xmlsec1-openssl-1.2.6-3 openssl-devel-0.9.7a-43.8 On 20/07/06, Scott Ruckh [EMAIL PROTECTED] wrote: This is what you said R.I. Pienaar hello, So further to my previous mails about TLS, I've now moved on to try make my CentOS 4.3 machines, the closest RPM I could find was the one for el3 ones on the bacula download list. So I saw on this list someone suggest doing --with-openssl=/ in the spec, I did this now the configure output says yes for the above. However mid-build I get a lot of problem, I'll show some here: - /usr/bin/g++ -static -L../lib -L../findlib -o static-bacula-fd filed.o authenticate.o acl.o backup.o chksum.o estimate.o filed_conf.o heartbeat.o job.o pythonfd.o restore.o status.o verify.o verify_vol.o \ -lz-lfind -lbac -lm -lpthread -ldl \ -L/usr/lib -lssl -lcrypto snip /usr/lib/libssl.a(kssl.o)(.text+0x195): In function `populate_cksumlens': : undefined reference to `valid_cksumtype' /usr/lib/libssl.a(kssl.o)(.text+0x1ad): In function `populate_cksumlens': : undefined reference to `krb5_checksum_size' /usr/lib/libssl.a(kssl.o)(.text+0x1d5): In function `populate_cksumlens': : undefined reference to `krb5_checksum_size' snip - I have posted this before, but here it goes again. Obviously this is not for the RPM build, but this is what I use for compiling sources on CentOS 4.3 x86_64 system. CFLAGS=-g -Wall -O0 -I/usr/lib64/mysql \ LDFLAGS=-L/usr/lib64/mysql -L/lib64 -L/usr/lib64 \ ./configure \ --sbindir=/usr/local/bin/bacula \ --sysconfdir=/etc/bacula \ --with-scriptdir=/etc/bacula \ --enable-smartalloc \ --with-pid-dir=/var/run/bacula \ --with-subsys-dir=/var/run/subsys/bacula \ --enable-conio \ --with-openssl \ --with-mysql \ --with-working-dir=/usr/local/bin/bacula/working \ --with-dump-email=appropriate-email-address \ --with-job-email=appropriate-email-address \ --with-dir-user=bacula \ --with-dir-group=bacula \ --with-sd-user=bacula \ --with-sd-group=bacula \ --with-fd-user=root \ --with-fd-group=root \ --with-python Then run a make, and make install. Note: make install by itself did not work. Separate steps were required. -- R.I.Pienaar http://www.devco.net - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Guides to TLS and Nagios Monitoring
hi, This is great. I'd be interested to know where you got stuck, and if you had any suggestions for improving the TLS code at all (error messages, configuration settings, etc). the main problem was the docs, the TLS example is difficult to follow because the hostnames and so forth being used isnt clear, so you arent always sure what is connecting to what and what cert to use. As for error messages, I know there were one really confusing one, don't remember the actual error message but it was when I had a client connecting where the hostname and the CN in the cert didnt match. In the example in the docs the cert CN's have things like [EMAIL PROTECTED] in the CN, but I found if CN != hostname it just wont work, so that was a bit missleading as well. The docs also doesn't show that you need to put any TLS stuff in the Client resources, I think mine covers all of the above you're welcome to take it and use it in the official documentation or whatever. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] Building SRPM on Centos
hello, So further to my previous mails about TLS, I've now moved on to try make my CentOS 4.3 machines, the closest RPM I could find was the one for el3 ones on the bacula download list. These while ldd show them linked against OpenSSL does not seem to support TLS: # ldd `which bconsole` libtermcap.so.2 = /lib/libtermcap.so.2 (0x0062e000) libpthread.so.0 = /lib/tls/libpthread.so.0 (0x006a7000) libssl.so.4 = /lib/libssl.so.4 (0x00846000) libcrypto.so.4 = /lib/libcrypto.so.4 (0x00722000) libstdc++.so.5 = /usr/lib/libstdc++.so.5 (0x00a7f000) libm.so.6 = /lib/tls/libm.so.6 (0x005f9000) libgcc_s.so.1 = /lib/libgcc_s.so.1 (0x0061e000) libc.so.6 = /lib/tls/libc.so.6 (0x004c7000) /lib/ld-linux.so.2 (0x004ae000) libgssapi_krb5.so.2 = /usr/lib/libgssapi_krb5.so.2 (0x0080d000) libkrb5.so.3 = /usr/lib/libkrb5.so.3 (0x006bb000) libcom_err.so.2 = /lib/libcom_err.so.2 (0x00111000) libk5crypto.so.3 = /usr/lib/libk5crypto.so.3 (0x00823000) libresolv.so.2 = /lib/libresolv.so.2 (0x0067) libdl.so.2 = /lib/libdl.so.2 (0x005f3000) libz.so.1 = /usr/lib/libz.so.1 (0x00114000) The moment you try and configure TLS into the config files you get: 20-Jul 20:18 bconsole: Fatal error: TLS required but not configured in Bacula. Which in my experience seem to indicate that TLS is not enabled. I then tried to compile the SRPM on my machine, installed all the RPM requires etc, when I installed the default spec file I stopped it through the configure phase and it confirmed: TLS support:no So I saw on this list someone suggest doing --with-openssl=/ in the spec, I did this now the configure output says yes for the above. However mid-build I get a lot of problem, I'll show some here: - /usr/bin/g++ -static -L../lib -L../findlib -o static-bacula-fd filed.o authenticate.o acl.o backup.o chksum.o estimate.o filed_conf.o heartbeat.o job.o pythonfd.o restore.o status.o verify.o verify_vol.o \ -lz-lfind -lbac -lm -lpthread -ldl \ -L/usr/lib -lssl -lcrypto snip /usr/lib/libssl.a(kssl.o)(.text+0x195): In function `populate_cksumlens': : undefined reference to `valid_cksumtype' /usr/lib/libssl.a(kssl.o)(.text+0x1ad): In function `populate_cksumlens': : undefined reference to `krb5_checksum_size' /usr/lib/libssl.a(kssl.o)(.text+0x1d5): In function `populate_cksumlens': : undefined reference to `krb5_checksum_size' snip - this seems related to krb5 not being linked in, but even if I change the command being run at that point - manually - to include -lkrb5 I get no joy out of it. RedHat does weird stuff with their OpenSSL and KerberosIV. I have: openssl-devel-0.9.7a-43.8 krb5-devel-1.3.4-27 Does anyone have any suggestions for getting this to work? - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Building SRPM on Centos
hey, yeah I could get a manual build going, but manual builds wont work, we have policies here about only RPM based apps going onto production. I got the FC4 rpm going on a test box complete with SSL, but it required some symlinking of libs etc, will need to get the SRPM to build and link correctlym On 20/07/06, Scott Ruckh [EMAIL PROTECTED] wrote: This is what you said R.I. Pienaar hello, So further to my previous mails about TLS, I've now moved on to try make my CentOS 4.3 machines, the closest RPM I could find was the one for el3 ones on the bacula download list. So I saw on this list someone suggest doing --with-openssl=/ in the spec, I did this now the configure output says yes for the above. However mid-build I get a lot of problem, I'll show some here: - /usr/bin/g++ -static -L../lib -L../findlib -o static-bacula-fd filed.o authenticate.o acl.o backup.o chksum.o estimate.o filed_conf.o heartbeat.o job.o pythonfd.o restore.o status.o verify.o verify_vol.o \ -lz-lfind -lbac -lm -lpthread -ldl \ -L/usr/lib -lssl -lcrypto snip /usr/lib/libssl.a(kssl.o)(.text+0x195): In function `populate_cksumlens': : undefined reference to `valid_cksumtype' /usr/lib/libssl.a(kssl.o)(.text+0x1ad): In function `populate_cksumlens': : undefined reference to `krb5_checksum_size' /usr/lib/libssl.a(kssl.o)(.text+0x1d5): In function `populate_cksumlens': : undefined reference to `krb5_checksum_size' snip - I have posted this before, but here it goes again. Obviously this is not for the RPM build, but this is what I use for compiling sources on CentOS 4.3 x86_64 system. CFLAGS=-g -Wall -O0 -I/usr/lib64/mysql \ LDFLAGS=-L/usr/lib64/mysql -L/lib64 -L/usr/lib64 \ ./configure \ --sbindir=/usr/local/bin/bacula \ --sysconfdir=/etc/bacula \ --with-scriptdir=/etc/bacula \ --enable-smartalloc \ --with-pid-dir=/var/run/bacula \ --with-subsys-dir=/var/run/subsys/bacula \ --enable-conio \ --with-openssl \ --with-mysql \ --with-working-dir=/usr/local/bin/bacula/working \ --with-dump-email=appropriate-email-address \ --with-job-email=appropriate-email-address \ --with-dir-user=bacula \ --with-dir-group=bacula \ --with-sd-user=bacula \ --with-sd-group=bacula \ --with-fd-user=root \ --with-fd-group=root \ --with-python Then run a make, and make install. Note: make install by itself did not work. Separate steps were required. -- R.I.Pienaar http://www.devco.net - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] Guides to TLS and Nagios Monitoring
hello, I am in the process of deploying Bacula for my own use and that of some people I contract to, I had a need for TLS between the various connections and found the documentation were very misleading and incomplete so after much list searching and trial and error I got it going, I've documented my efforts here: http://www.devco.net/pubwiki/Bacula/TLS I hope this will be of use to newcomers or anyone wanting to configure SSL/TLS in Bacula, but of course as with all new documentation it is useless till someone else has tested it so I welcome any feedback from list members. I also wanted to use Nagios to monitor my Bacula on a per-job basis, I've integrated this into my setup and again documented the process here: http://www.devco.net/pubwiki/Bacula/MonitoringWithNagios Would love any feedback. thanks. -- R.I.Pienaar http://www.devco.net - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
