Re: [Bacula-users] Remote FD cannot authenticate to local LAN SD

2022-02-16 Thread Jose Alberto 
Show  your version   Dir, Sd  and  fd remote.

On Mon, Feb 14, 2022 at 1:16 PM JD Atkinson  wrote:

> I have a SD system on a local LAN, that can back itself up, and backup
> another server on the LAN no problem.
>
> Across a routed network, is an FD that tests fine for "bconsole status
> client".
> In none of my configurations will you find "localhost", and IP addresses
> are used for all Address entries.
>
> When I "console status network" for the problem FD, I get the debug
> below.  I have an extremely similar configuration for the working local LAN
> FD and the remote FD, but the local one works fine and the remote routed
> one does not.
>
> There are no firewalls, no hosts.allow/deny, and network port connections
> are possible and properly connect according to hand tests and the debug.
>
> The debug shows both the SD and the problem remote FD when tested.
> Why does the SD say "Recv caps from Client failed"?
> Why does the FD say "Recv caps from SD failed."?
>
> Bacula 11.0.0 all around, no inconsistencies there.
> The working local FD runs Debian 10
> The problem remote FD runs Amazon EC2 (connection via VPN, but no
> firewalls, filters, etc blocking network access as you can see from the
> debug)
>
> ---
> SD debug
> ---
>
> atkinsonsvr-sd: dircmd.c:248-0 Do command: JobId=
>
> atkinsonsvr-sd: job.c:78-0  job=-Console-.2022-02-14_15.58.20_03 job_name=Backup_atkinsonsvr
> client_name=jdatkinson-fd type=85 level=32 FileSet=atkinsonsvrFullSet
> NoAttr=0 SpoolAttr=1 FileSetMD5=**Dummy** SpoolData=0 WritePartAfterJob=1
> PreferMountedVols=1 SpoolSize=0 rerunning=0 VolSessionId=1
> VolSessionTime=1644854291 sd_client=0 Authorization=
>
> atkinsonsvr-sd: job.c:100-0 rerunning=0 VolSesId=1 VolSesTime=1644854291
>
> atkinsonsvr-sd: job.c:112-0 Start JobId=0 7fe5c800b098
>
> atkinsonsvr-sd: job.c:158-0 >dird jid=0: 3000 OK Job SDid=2
> SDtime=1644854291 Authorization=CDCG-GGMK-IKNJ-APMJ-GLME-OPAI-CCIL-DNEE
>
> atkinsonsvr-sd: sd_plugins.c:285-0 === enter new_plugins ===
>
> atkinsonsvr-sd: sd_plugins.c:287-0 No sd plugin list!
>
> atkinsonsvr-sd: sd_plugins.c:104-0 No b_plugin_list: generate_plugin_event
> ignored.
>
> atkinsonsvr-sd: mem_pool.c:617-0 max_size=512
>
> atkinsonsvr-sd: events.c:48-0 Events: code=SJ0001 daemon=atkinsonsvr-sd
> ref=0x7fe5c800b098 type=job source=atkinsonsvr-dir text=Job Start jobid=0
> job=-Console-.2022-02-14_15.58.20_03
>
> atkinsonsvr-sd: message.c:1534-0 Enter Jmsg type=17
>
> atkinsonsvr-sd: dircmd.c:234-0 
> atkinsonsvr-sd: dircmd.c:248-0 Do command: run
>
> atkinsonsvr-sd: job.c:182-0 Run_cmd: run
>
> atkinsonsvr-sd: jcr.c:936-0 set_jcr_job_status(0, F)
>
> atkinsonsvr-sd: jcr.c:945-0 OnEntry JobStatus=C newJobstatus=F
>
> atkinsonsvr-sd: jcr.c:956-0 Set new stat. old: C,0 new: F,0
>
> atkinsonsvr-sd: jcr.c:961-0 leave setJobStatus old=C new=F
>
> atkinsonsvr-sd: job.c:192-0 sd_calls_client=0 sd_client=0
>
> atkinsonsvr-sd: job.c:214-0 -Console-.2022-02-14_15.58.20_03 waiting 1800
> sec for FD to contact SD key=CDCG-GGMK-IKNJ-APMJ-GLME-OPAI-CCIL-DNEE
>
> atkinsonsvr-sd: job.c:216-0 === Block Job=-Console-.2022-02-14_15.58.20_03
> jid=0 7fe5c800b098
>
> atkinsonsvr-sd: bsock.c:861-0 socket=6 who=client host=10.120.0.1 port=9103
>
> atkinsonsvr-sd: bnet_server.c:235-0 Accept
> socket=10.0.2.10.9103:10.120.0.1.56060 s=0x563e9764ced8
>
> atkinsonsvr-sd: hello.c:161-0 authenticate: Hello Bacula SD: Start Job
> -Console-.2022-02-14_15.58.20_03 14 tlspsk=0
>
> atkinsonsvr-sd: hello.c:188-0 Found Client Job
> -Console-.2022-02-14_15.58.20_03
>
> atkinsonsvr-sd: hello.c:199-0 fd_version=14 sd_version=0
>
> atkinsonsvr-sd: hello.c:431-0 >Send sdcaps: dedup=0 hash=1
> dedup_block=65536 min_dedup_block=1024 max_dedup_block=66556
>
> atkinsonsvr-sd: hello.c:452-0 Recv caps from Client failed. ERR=Connection
> reset by peer
>
> atkinsonsvr-sd: message.c:1534-0 Enter Jmsg type=3
>
> atkinsonsvr-sd: hello.c:453-0 Recv caps from Client failed. ERR=Connection
> reset by peer
>
> atkinsonsvr-sd: bsockcore.c:1112-0 BSOCKCORE::destroy()
>
> atkinsonsvr-sd: bsockcore.c:1125-0 BSOCKCORE::destroy():delete(this)
>
> atkinsonsvr-sd: bsock.c:90-0 BSOCK::~BSOCK()
>
> atkinsonsvr-sd: bsock.c:110-0 BSOCK::_destroy()
>
> atkinsonsvr-sd: bsockcore.c:200-0 BSOCKCORE::~BSOCKCORE()
>
> atkinsonsvr-sd: bsockcore.c:1079-0 BSOCKCORE::_destroy()
>
> atkinsonsvr-sd: bsockcore.c:1043-0 BSOCKCORE::close()
>
> atkinsonsvr-sd: job.c:229-0 === Auth cond errstat=0
>
> ---
> FD Debug
> ---
>
> jdatkinson-fd: job.c:375-0 Executing Dir storage address=10.0.2.10
> port=9103 ssl=0
>
>  command.
>
> jdatkinson-fd: job.c:2670-0 StorageCmd: storage address=10.0.2.10
> port=9103 ssl=0
>
> jdatkinson-fd: job.c:2697-0 Connect to storage: 10.0.2.10:9103 ssl=0
>
> jdatkinson-fd: watchdog.c:197-0 Registered watchdog 7f8c6400c138, interval
> 1800 one shot
>
> jdatkinson-fd: btimers.c:145-0 Start thread timer 7f8c6400cb68 tid
> 7f8c6d25e700 for 1800 secs.
>
> jdatkinson-fd:

Re: [Bacula-users] Remote FD cannot authenticate to local LAN SD

2022-02-14 Thread Josh Fisher 


On 2/14/22 11:24, JD Atkinson wrote:
I have a SD system on a local LAN, that can back itself up, and backup 
another server on the LAN no problem.


Across a routed network, is an FD that tests fine for "bconsole status 
client".
In none of my configurations will you find "localhost", and IP 
addresses are used for all Address entries.


When I "console status network" for the problem FD, I get the debug 
below.  I have an extremely similar configuration for the working 
local LAN FD and the remote FD, but the local one works fine and the 
remote routed one does not.



Is the remote FD running a newer version of Bacula than the SD? The SD 
and DIR demons are backward-compatible, but not forward-compatible.





There are no firewalls, no hosts.allow/deny, and network port 
connections are possible and properly connect according to hand tests 
and the debug.


The debug shows both the SD and the problem remote FD when tested.
Why does the SD say "Recv caps from Client failed"?
Why does the FD say "Recv caps from SD failed."?

Bacula 11.0.0 all around, no inconsistencies there.
The working local FD runs Debian 10
The problem remote FD runs Amazon EC2 (connection via VPN, but no 
firewalls, filters, etc blocking network access as you can see from 
the debug)


---
SD debug
---

atkinsonsvr-sd: dircmd.c:248-0 Do command: JobId=

atkinsonsvr-sd: job.c:78-0 job=-Console-.2022-02-14_15.58.20_03 job_name=Backup_atkinsonsvr 
client_name=jdatkinson-fd type=85 level=32 FileSet=atkinsonsvrFullSet 
NoAttr=0 SpoolAttr=1 FileSetMD5=**Dummy** SpoolData=0 
WritePartAfterJob=1 PreferMountedVols=1 SpoolSize=0 rerunning=0 
VolSessionId=1 VolSessionTime=1644854291 sd_client=0 Authorization=


atkinsonsvr-sd: job.c:100-0 rerunning=0 VolSesId=1 VolSesTime=1644854291

atkinsonsvr-sd: job.c:112-0 Start JobId=0 7fe5c800b098

atkinsonsvr-sd: job.c:158-0 >dird jid=0: 3000 OK Job SDid=2 
SDtime=1644854291 Authorization=CDCG-GGMK-IKNJ-APMJ-GLME-OPAI-CCIL-DNEE


atkinsonsvr-sd: sd_plugins.c:285-0 === enter new_plugins ===

atkinsonsvr-sd: sd_plugins.c:287-0 No sd plugin list!

atkinsonsvr-sd: sd_plugins.c:104-0 No b_plugin_list: 
generate_plugin_event ignored.


atkinsonsvr-sd: mem_pool.c:617-0 max_size=512

atkinsonsvr-sd: events.c:48-0 Events: code=SJ0001 
daemon=atkinsonsvr-sd ref=0x7fe5c800b098 type=job 
source=atkinsonsvr-dir text=Job Start jobid=0 
job=-Console-.2022-02-14_15.58.20_03


atkinsonsvr-sd: message.c:1534-0 Enter Jmsg type=17

atkinsonsvr-sd: dircmd.c:234-0 atkinsonsvr-sd: job.c:214-0 -Console-.2022-02-14_15.58.20_03 waiting 
1800 sec for FD to contact SD key=CDCG-GGMK-IKNJ-APMJ-GLME-OPAI-CCIL-DNEE


atkinsonsvr-sd: job.c:216-0 === Block 
Job=-Console-.2022-02-14_15.58.20_03 jid=0 7fe5c800b098


atkinsonsvr-sd: bsock.c:861-0 socket=6 who=client host=10.120.0.1 
port=9103


atkinsonsvr-sd: bnet_server.c:235-0 Accept 
socket=10.0.2.10.9103:10.120.0.1.56060 s=0x563e9764ced8


atkinsonsvr-sd: hello.c:161-0 authenticate: Hello Bacula SD: Start Job 
-Console-.2022-02-14_15.58.20_03 14 tlspsk=0


atkinsonsvr-sd: hello.c:188-0 Found Client Job 
-Console-.2022-02-14_15.58.20_03


atkinsonsvr-sd: hello.c:199-0 fd_version=14 sd_version=0

atkinsonsvr-sd: hello.c:431-0 >Send sdcaps: dedup=0 hash=1 
dedup_block=65536 min_dedup_block=1024 max_dedup_block=66556


atkinsonsvr-sd: hello.c:452-0 Recv caps from Client failed. 
ERR=Connection reset by peer


atkinsonsvr-sd: message.c:1534-0 Enter Jmsg type=3

atkinsonsvr-sd: hello.c:453-0 Recv caps from Client failed. 
ERR=Connection reset by peer


atkinsonsvr-sd: bsockcore.c:1112-0 BSOCKCORE::destroy()

atkinsonsvr-sd: bsockcore.c:1125-0 BSOCKCORE::destroy():delete(this)

atkinsonsvr-sd: bsock.c:90-0 BSOCK::~BSOCK()

atkinsonsvr-sd: bsock.c:110-0 BSOCK::_destroy()

atkinsonsvr-sd: bsockcore.c:200-0 BSOCKCORE::~BSOCKCORE()

atkinsonsvr-sd: bsockcore.c:1079-0 BSOCKCORE::_destroy()

atkinsonsvr-sd: bsockcore.c:1043-0 BSOCKCORE::close()

atkinsonsvr-sd: job.c:229-0 === Auth cond errstat=0


---
FD Debug
---

jdatkinson-fd: job.c:375-0 Executing Dir storage address=10.0.2.10 
port=9103 ssl=0


 command.

jdatkinson-fd: job.c:2670-0 StorageCmd: storage address=10.0.2.10 
port=9103 ssl=0


jdatkinson-fd: job.c:2697-0 Connect to storage:10.0.2.10:9103 
ssl=0


jdatkinson-fd: watchdog.c:197-0 Registered watchdog 7f8c6400c138, 
interval 1800 one shot


jdatkinson-fd: btimers.c:145-0 Start thread timer 7f8c6400cb68 tid 
7f8c6d25e700 for 1800 secs.


jdatkinson-fd: bsockcore.c:356-0 Current10.0.2.10:9103 
All10.0.2.10:9103 


jdatkinson-fd: bsockcore.c:285-0 who=Storage daemon host=10.0.2.10 
port=9103


jdatkinson-fd: bsockcore.c:473-0 OK connected to server Storage 
daemon10.0.2.10:9103 . 
socket=10.120.0.1.56060:10.0.2.10.9103 s=0x7f8c6400f4e8


jdatkinson-fd: btimers.c:225-0 Stop thread timer 7f8c6400cb68 
tid=7f8c6d25e700.


jdatkinson-fd:

[Bacula-users] Remote FD cannot authenticate to local LAN SD

2022-02-14 Thread JD Atkinson 
I have a SD system on a local LAN, that can back itself up, and backup
another server on the LAN no problem.

Across a routed network, is an FD that tests fine for "bconsole status
client".
In none of my configurations will you find "localhost", and IP addresses
are used for all Address entries.

When I "console status network" for the problem FD, I get the debug below.
I have an extremely similar configuration for the working local LAN FD and
the remote FD, but the local one works fine and the remote routed one does
not.

There are no firewalls, no hosts.allow/deny, and network port connections
are possible and properly connect according to hand tests and the debug.

The debug shows both the SD and the problem remote FD when tested.
Why does the SD say "Recv caps from Client failed"?
Why does the FD say "Recv caps from SD failed."?

Bacula 11.0.0 all around, no inconsistencies there.
The working local FD runs Debian 10
The problem remote FD runs Amazon EC2 (connection via VPN, but no
firewalls, filters, etc blocking network access as you can see from the
debug)

---
SD debug
---

atkinsonsvr-sd: dircmd.c:248-0 Do command: JobId=

atkinsonsvr-sd: job.c:78-0 dird jid=0: 3000 OK Job SDid=2
SDtime=1644854291 Authorization=CDCG-GGMK-IKNJ-APMJ-GLME-OPAI-CCIL-DNEE

atkinsonsvr-sd: sd_plugins.c:285-0 === enter new_plugins ===

atkinsonsvr-sd: sd_plugins.c:287-0 No sd plugin list!

atkinsonsvr-sd: sd_plugins.c:104-0 No b_plugin_list: generate_plugin_event
ignored.

atkinsonsvr-sd: mem_pool.c:617-0 max_size=512

atkinsonsvr-sd: events.c:48-0 Events: code=SJ0001 daemon=atkinsonsvr-sd
ref=0x7fe5c800b098 type=job source=atkinsonsvr-dir text=Job Start jobid=0
job=-Console-.2022-02-14_15.58.20_03

atkinsonsvr-sd: message.c:1534-0 Enter Jmsg type=17

atkinsonsvr-sd: dircmd.c:234-0 Send sdcaps: dedup=0 hash=1
dedup_block=65536 min_dedup_block=1024 max_dedup_block=66556

atkinsonsvr-sd: hello.c:452-0 Recv caps from Client failed. ERR=Connection
reset by peer

atkinsonsvr-sd: message.c:1534-0 Enter Jmsg type=3

atkinsonsvr-sd: hello.c:453-0 Recv caps from Client failed. ERR=Connection
reset by peer

atkinsonsvr-sd: bsockcore.c:1112-0 BSOCKCORE::destroy()

atkinsonsvr-sd: bsockcore.c:1125-0 BSOCKCORE::destroy():delete(this)

atkinsonsvr-sd: bsock.c:90-0 BSOCK::~BSOCK()

atkinsonsvr-sd: bsock.c:110-0 BSOCK::_destroy()

atkinsonsvr-sd: bsockcore.c:200-0 BSOCKCORE::~BSOCKCORE()

atkinsonsvr-sd: bsockcore.c:1079-0 BSOCKCORE::_destroy()

atkinsonsvr-sd: bsockcore.c:1043-0 BSOCKCORE::close()

atkinsonsvr-sd: job.c:229-0 === Auth cond errstat=0

---
FD Debug
---

jdatkinson-fd: job.c:375-0 Executing Dir storage address=10.0.2.10
port=9103 ssl=0

 command.

jdatkinson-fd: job.c:2670-0 StorageCmd: storage address=10.0.2.10 port=9103
ssl=0

jdatkinson-fd: job.c:2697-0 Connect to storage: 10.0.2.10:9103 ssl=0

jdatkinson-fd: watchdog.c:197-0 Registered watchdog 7f8c6400c138, interval
1800 one shot

jdatkinson-fd: btimers.c:145-0 Start thread timer 7f8c6400cb68 tid
7f8c6d25e700 for 1800 secs.

jdatkinson-fd: bsockcore.c:356-0 Current 10.0.2.10:9103 All 10.0.2.10:9103

jdatkinson-fd: bsockcore.c:285-0 who=Storage daemon host=10.0.2.10 port=9103

jdatkinson-fd: bsockcore.c:473-0 OK connected to server  Storage daemon
10.0.2.10:9103. socket=10.120.0.1.56060:10.0.2.10.9103 s=0x7f8c6400f4e8

jdatkinson-fd: btimers.c:225-0 Stop thread timer 7f8c6400cb68
tid=7f8c6d25e700.

jdatkinson-fd: watchdog.c:217-0 Unregistered watchdog 7f8c6400c138

jdatkinson-fd: job.c:2714-0 Connection OK to SD.

jdatkinson-fd: authenticatebase.cc:335-0 TLSPSK Local need 0

jdatkinson-fd: hello.c:141-0 Send to SD: Hello Bacula SD: Start Job
-Console-.2022-02-14_15.58.20_03 14 tlspsk=0


jdatkinson-fd: hello.c:179-0 Recv caps from SD.

jdatkinson-fd: hello.c:184-0 Recv caps from SD failed. ERR=Connection reset
by peer

jdatkinson-fd: message.c:1534-0 Enter Jmsg type=3

jdatkinson-fd: hello.c:185-0 Recv caps from SD failed. ERR=Connection reset
by peer

jdatkinson-fd: job.c:378-0 Quit command loop. Canceled=0 fct=15

jdatkinson-fd: runscript.c:99-0 runscript: running all RUNSCRIPT object
(ClientAfterJob) JobStatus=C

jdatkinson-fd: fd_plugins.c:250-0 plugin_ctx=1832c78 JobId=0

jdatkinson-fd: fd_plugins.c:143-0 name= len=0 plugin=bpipe-fd.so
plen=5

jdatkinson-fd: mem_pool.c:617-0 max_size=512

jdatkinson-fd: events.c:48-0 Events: code=FC0001 daemon=jdatkinson-fd
ref=0x7f8c6400b098 type=connection source=atkinsonsvr-dir text=Director
disconnection

jdatkinson-fd: message.c:1534-0 Enter Jmsg type=17

jdatkinson-fd: job.c:507-0 Calling term_find_files

jdatkinson-fd: job.c:510-0 Done with term_find_files

jdatkinson-fd: message.c:608-0 Close_msg jcr=7f8c6400b098

jdatkinson-fd: bsockcore.c:1112-0 BSOCKCORE::destroy()

jdatkinson-fd: bsockcore.c:1125-0 BSOCKCORE::destroy():delete(this)
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net