Re: new debian buster install, missing /etc/amanda-security.conf file

[Gene Heskett]

On Friday 05 February 2021 00:02:15 Gene Heskett wrote:

> On Thursday 04 February 2021 21:43:38 Charles Curley wrote:
> > On Thu, 4 Feb 2021 15:36:21 -0500
> >
> > Gene Heskett  wrote:
> > > Updating both to newer hardware for machines and installing debian
> > > buster, but amcheck says that the /etc/amanda-security.conf file
> > > won't let me run tar as root, but the real problem is that
> > > the /etc/amanda-security.conf file does not exist.
> >
> > If you used the packages that come with buster, you should have
> > gotten /etc/amanda-security.conf from the amanda-client package. Did
> > you install from the debian packages, or did you only install the
> > server on that machine?
>
> Both Charles. And I am about 2.5 hours from finding out if a normal
> backup works.
>
And it worked normally. Whoopee.

Copyright 2019 by Maurice E. Heskett
Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: new debian buster install, missing /etc/amanda-security.conf file

[Gene Heskett]

On Thursday 04 February 2021 21:43:38 Charles Curley wrote:

> On Thu, 4 Feb 2021 15:36:21 -0500
>
> Gene Heskett  wrote:
> > Updating both to newer hardware for machines and installing debian
> > buster, but amcheck says that the /etc/amanda-security.conf file
> > won't let me run tar as root, but the real problem is that
> > the /etc/amanda-security.conf file does not exist.
>
> If you used the packages that come with buster, you should have
> gotten /etc/amanda-security.conf from the amanda-client package. Did
> you install from the debian packages, or did you only install the
> server on that machine?

Both Charles. And I am about 2.5 hours from finding out if a normal 
backup works.


Copyright 2019 by Maurice E. Heskett
Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: new debian buster install, missing /etc/amanda-security.conf file

[Charles Curley]

On Thu, 4 Feb 2021 15:36:21 -0500
Gene Heskett  wrote:

> Updating both to newer hardware for machines and installing debian 
> buster, but amcheck says that the /etc/amanda-security.conf file
> won't let me run tar as root, but the real problem is that 
> the /etc/amanda-security.conf file does not exist.

If you used the packages that come with buster, you should have
gotten /etc/amanda-security.conf from the amanda-client package. Did
you install from the debian packages, or did you only install the
server on that machine?

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: new debian buster install, missing /etc/amanda-security.conf file

[Gene Heskett]

On Thursday 04 February 2021 16:28:14 Debra S Baddorf wrote:

> > On Feb 4, 2021, at 2:49 PM, Alan Hodgson 
> > wrote:
> >
> > On Thu, 2021-02-04 at 15:36 -0500, Gene Heskett wrote:
> >> Greetings all;
> >>
> >> Updating both to newer hardware for machines and installing debian
> >> buster, but amcheck says that the /etc/amanda-security.conf file
> >> won't let me run tar as root, but the real problem is that
> >> the /etc/amanda-security.conf file does not exist.
> >>
> >> Who owns it, I assume its 0600 for perms, and whats it supposed to
> >> say?
> >>
> >> Thanks everybody.
> >>
> >> Cheers, Gene Heskett
> >
> > Not a Debian system, but:
> >
> > hades ~ # ls -l /etc/amanda-security.conf
> > -rw-r--r-- 1 root amanda 56 Sep 20  2016 /etc/amanda-security.conf
> >
> > hades ~ # cat /etc/amanda-security.conf
> > amgtar:gnutar_path:/bin/tar
> > runtar:gnutar_path:/bin/tar
> >
> > There's also a manpage for it on my systems.
>
> Contents on my machines:  (can be entirely commented out; that’s how
> it starts)

edited for buster below.

>   amanda-security.conf  
> 
> # /etc/amanda-security.conf#
> #  #
> # See: man amanda-security.conf#
> #  #
> # This file must be installed at /etc/amanda-security.conf #
> #  #
> # It list all executables amanda can execute as root.  #
> # This file must contains realpath to executable, with #
> # all symbolic links resolved. #
> # You can use the 'realpath' command to find them. #
> #  #
> # It list program and a symbolic name for the program  #
> # Followed by the realpath of the binary   #
> #  #
> # Uncomment and edit the following lines to let Amanda to  #
> # use customized system commands.  If multiple PATH is #
> # necessary, please put them in different lines.   #
> # e.g.:#
> # amgtar:GNUTAR_PATH=/usr/bin/tar  #
> # amgtar:GNUTAR_PATH=/usr/bin/tar-1.28 #
> #  #
> # If a program and symbolic name is not listed, then the   #
> # configured binary is allowed to be run as root.  #
> # You can find the configured binary with amgetconf#
> # amgetconf build.gnutar_path  #
> # amgetconf build.star_path#
> # amgetconf build.bsdtar_path  #
> #  #
> 
> #runtar:gnutar_path=/bin/tar
amgtar:gnutar_path=/usr/bin/tar
> #amstar:star_path=/usr/bin/star
> #ambsdtar:bsdtar_path=/usr/bin/bsdtar
>
> #restore_by_amanda_user=no

Thanks Deb.

I copied it from another install, then had to edit the amgtar path cuz 
buster moved tar from /bin, to /usr/bin.  So that basket of rattlesnakes 
is sorted.  We'll see what happens tonight.

Copyright 2019 by Maurice E. Heskett
Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: new debian buster install, missing /etc/amanda-security.conf file

[Debra S Baddorf]

> On Feb 4, 2021, at 2:49 PM, Alan Hodgson  wrote:
> 
> On Thu, 2021-02-04 at 15:36 -0500, Gene Heskett wrote:
>> Greetings all;
>> 
>> Updating both to newer hardware for machines and installing debian 
>> buster, but amcheck says that the /etc/amanda-security.conf file won't 
>> let me run tar as root, but the real problem is that 
>> the /etc/amanda-security.conf file does not exist.
>> 
>> Who owns it, I assume its 0600 for perms, and whats it supposed to say?
>> 
>> Thanks everybody.
>> 
>> Cheers, Gene Heskett
> 
> Not a Debian system, but:
> 
> hades ~ # ls -l /etc/amanda-security.conf  
> -rw-r--r-- 1 root amanda 56 Sep 20  2016 /etc/amanda-security.conf
> 
> hades ~ # cat /etc/amanda-security.conf  
> amgtar:gnutar_path:/bin/tar 
> runtar:gnutar_path:/bin/tar
> 
> There's also a manpage for it on my systems.


Contents on my machines:  (can be entirely commented out; that’s how it starts)

  amanda-security.conf  

# /etc/amanda-security.conf#
#  #
# See: man amanda-security.conf#
#  #
# This file must be installed at /etc/amanda-security.conf #
#  #
# It list all executables amanda can execute as root.  #
# This file must contains realpath to executable, with #
# all symbolic links resolved. #
# You can use the 'realpath' command to find them. #
#  #
# It list program and a symbolic name for the program  #
# Followed by the realpath of the binary   #
#  #
# Uncomment and edit the following lines to let Amanda to  #
# use customized system commands.  If multiple PATH is #
# necessary, please put them in different lines.   #
# e.g.:#
# amgtar:GNUTAR_PATH=/usr/bin/tar  #
# amgtar:GNUTAR_PATH=/usr/bin/tar-1.28 #
#  #
# If a program and symbolic name is not listed, then the   #
# configured binary is allowed to be run as root.  #
# You can find the configured binary with amgetconf#
# amgetconf build.gnutar_path  #
# amgetconf build.star_path#
# amgetconf build.bsdtar_path  #
#  #

#runtar:gnutar_path=/bin/tar
#amgtar:gnutar_path=/bin/tar
#amstar:star_path=/usr/bin/star
#ambsdtar:bsdtar_path=/usr/bin/bsdtar

#restore_by_amanda_user=no

Re: new debian buster install, missing /etc/amanda-security.conf file

[Gene Heskett]

On Thursday 04 February 2021 15:49:21 Alan Hodgson wrote:

> On Thu, 2021-02-04 at 15:36 -0500, Gene Heskett wrote:
> > Greetings all;
> > Updating both to newer hardware for machines and installing debian
> > buster, but amcheck says that the /etc/amanda-security.conf file
> > won't let me run tar as root, but the real problem is that the
> > /etc/amanda-security.conf file does not exist.
> > Who owns it, I assume its 0600 for perms, and whats it supposed to
> > say? Thanks everybody.
> > Cheers, Gene Heskett
>
> Not a Debian system, but:
>
> hades ~ # ls -l /etc/amanda-security.conf
> -rw-r--r-- 1 root amanda 56 Sep 20  2016 /etc/amanda-security.conf
>
>
>
> hades ~ # cat /etc/amanda-security.conf
> amgtar:gnutar_path:/bin/tar
>
> runtar:gnutar_path:/bin/tar

 Never uncommented this one in years, don't use anything but amgtar.
>
> There's also a manpage for it on my systems.
I got it, copied it from another buster install, then had to edit it cuz 
buster moved tar to /usr/bin. But I just this instant got it down to 
zero errors.

Thanks Alan.

Copyright 2019 by Maurice E. Heskett
Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page 

Re: new debian buster install, missing /etc/amanda-security.conf file

[Alan Hodgson]

On Thu, 2021-02-04 at 15:36 -0500, Gene Heskett wrote:
> Greetings all;
> Updating both to newer hardware for machines and installing debian buster,
> but amcheck says that the /etc/amanda-security.conf file won't let me run
> tar as root, but the real problem is that the /etc/amanda-security.conf file
> does not exist.
> Who owns it, I assume its 0600 for perms, and whats it supposed to say?
> Thanks everybody.
> Cheers, Gene Heskett

Not a Debian system, but:

hades ~ # ls -l /etc/amanda-security.conf  
-rw-r--r-- 1 root amanda 56 Sep 20  2016 /etc/amanda-security.conf



hades ~ # cat /etc/amanda-security.conf  
amgtar:gnutar_path:/bin/tar

runtar:gnutar_path:/bin/tar


There's also a manpage for it on my systems.