Amanda-Users

Re: amrestore does not work "NAK: amindexd: invalid service"

2007-07-11 12:18:28
Subject: Re: amrestore does not work "NAK: amindexd: invalid service"
From: Bjoern B <bb AT ic-marl DOT de>
To: Jean-Louis Martineau <martineau AT zmanda DOT com>
Date: Wed, 11 Jul 2007 18:14:28 +0200
Hi,

you are right i mean amrecover. sorry

Jean-Louis Martineau schrieb:

Your config looks good, are you sure you restarted xinetd?

I did a /etc/init.d/xinetd restart

To be sure, i have done a server restart and tested it again.
Same message.

amrecover in 2.4.* will use the amandaidx and amandaidx services
amrecover in 2.5.* will only use the amanda services.

Send the amandad.*.debug file

/var/log/amanda/amandad# more amandad.20070711180648.debug
amandad: debug 1 pid 2992 ruid 34 euid 34: start at Wed Jul 11 18:06:48 2007
security_getdriver(name=BSD) returns 0xb7f470e0
amandad: version 2.5.1p1
amandad: build: VERSION="Amanda-2.5.1p1"
amandad:        BUILT_DATE="Wed Nov 29 02:15:07 CET 2006"
amandad: BUILT_MACH="Linux intrepid 2.6.18-1-686 #1 SMP Fri Sep 29 16:25:40 UTC 2006 i686 GNU/Linux"
amandad:        CC="gcc"
amandad: CONFIGURE_COMMAND="'./configure' '--prefix=/usr' '--bindir=/usr/sbin' '--mandir=/usr/share/man ' '--libexecdir=/usr/lib/amanda' '--enable-shared' '--sysconfdir=/etc' '--localstatedir=/var/lib' '--with-gnut ar-listdir=/var/lib/amanda/gnutar-lists' '--with-index-server=localhost' '--with-user=backup' '--with-group=ba ckup' '--with-bsd-security' '--with-amandahosts' '--with-smbclient=/usr/bin/smbclient' '--with-debugging=/var/ log/amanda' '--with-dumperdir=/usr/lib/amanda/dumper.d' '--with-tcpportrange=50000,50100' '--with-udpportrange
=840,860' '--with-maxtapeblocksize=256' '--with-ssh-security'"
amandad: paths: bindir="/usr/sbin" sbindir="/usr/sbin"
amandad:        libexecdir="/usr/lib/amanda" mandir="/usr/share/man"
amandad:        AMANDA_TMPDIR="/tmp/amanda"
amandad:        AMANDA_DBGDIR="/var/log/amanda" CONFIG_DIR="/etc/amanda"
amandad:        DEV_PREFIX="/dev/" RDEV_PREFIX="/dev/" DUMP="/sbin/dump"
amandad:        RESTORE="/sbin/restore" VDUMP=UNDEF VRESTORE=UNDEF
amandad:        XFSDUMP="/sbin/xfsdump" XFSRESTORE="/sbin/xfsrestore"
amandad:        VXDUMP=UNDEF VXRESTORE=UNDEF
amandad:        SAMBA_CLIENT="/usr/bin/smbclient" GNUTAR="/bin/tar"
amandad:        COMPRESS_PATH="/bin/gzip" UNCOMPRESS_PATH="/bin/gzip"
amandad:        LPRCMD="/usr/bin/lpr" MAILER="/usr/bin/mail"
amandad:        listed_incr_dir="/var/lib/amanda/gnutar-lists"
amandad: defs:  DEFAULT_SERVER="localhost" DEFAULT_CONFIG="DailySet1"
amandad:        DEFAULT_TAPE_SERVER="localhost" HAVE_MMAP HAVE_SYSVSHM
amandad:        LOCKING=POSIX_FCNTL SETPGRP_VOID DEBUG_CODE
amandad: AMANDA_DEBUG_DAYS=4 BSD_SECURITY RSH_SECURITY USE_AMANDAHOSTS
amandad:        CLIENT_LOGIN="backup" FORCE_USERID HAVE_GZIP
amandad:        COMPRESS_SUFFIX=".gz" COMPRESS_FAST_OPT="--fast"
amandad:        COMPRESS_BEST_OPT="--best" UNCOMPRESS_OPT="-dc"
amandad: time 0.000: dgram_recv(dgram=0xb7f48084, timeout=0, fromaddr=0xb7f58070)
amandad: time 0.000: (sockaddr_in *)0xb7f58070 = { 2, 849, 192.168.129.133 }
security_handleinit(handle=0x804f5d8, driver=0xb7f470e0 (BSD))
amandad: time 0.000: accept recv REQ pkt:
<<<<<
SERVICE amindexd
OPTIONS features=fffffeff9ffeffffff7f;auth=bsd;
>>>>>
amandad: time 0.000: amindexd: invalid service
amandad: time 0.000: sending NAK pkt:
<<<<<
ERROR amindexd: invalid service
>>>>>
amandad: dgram_send_addr(addr=0xbffbeef0, dgram=0xb7f48084)
amandad: time 0.000: (sockaddr_in *)0xbffbeef0 = { 2, 849, 192.168.129.133 }
amandad: dgram_send_addr: 0xb7f48084->socket = 0
security_close(handle=0x804f5d8, driver=0xb7f470e0 (BSD))
amandad: time 29.996: pid 2992 finish time Wed Jul 11 18:07:18 2007

What else could i do?

Thanks

B²
Jean-Louis

Bjoern B wrote:
Hi,

here i go again.

Backup works now, but i can´t recover.

Seems to be a problem, because of the bsd/bsdudp/bsdtcp authentication.

We have 3 Amandaserver running.
And a couple of clients.

Amandaserver1 = Version 2.4.2p2
Amandaserver2 = Version 2.4.4p3

Amandaserver3 = Version 2.5.1p1

There is no Problem with Backup to and restore from Amandaserver1 and 2 and the long time ago configured clients.

With Amandaserver3 i could backup different clients, mostly Linux and one Windows.

Amcheck and amdump are successfull.

We could make a successfully amrestore from Amandaserver3 OS CENTOS with AMRECOVER Version 2.4.4p3.

But we can´t do an amrestore from Debian boxes with AMRECOVER Version 2.5.1p1 to Amandaserver3.

I have read about changings in 2.5.1.

For example here http://wiki.zmanda.com/index.php/Configuring_bsd/bsdudp/bsdtcp_authentication

I get the following message when trying:

"amrecover -s Amandaserver3.fqdn"

Error Message:

"AMRECOVER Version 2.5.1p1. Contacting server on localhost ...
NAK: amindexd: invalid service"

Yes i would like to recover from and to localhost.

Because of the successfully amrestore from the Centos with 2.4.4p3 i think that there is no
bsd/bsdudp/bsdtcp authentication configured.

Right?

So i´m looking for a solution of my Problem.

Have tried the indicated solution from http://wiki.zmanda.com/index.php/Configuring_bsd/bsdudp/bsdtcp_authentication
but it does not work.

I will put The configfiles to the end.

I think there are 2 possible ways for solving this Problem:

1. Get bsd/bsdudp/bsdtcp authentication working
- with the problem, that the Centos Client cant´t recover the data himself(old amrestore version)

2. Tell amrestore 2.5.1p1 not to use bsd/bsdudp/bsdtcp authentication

right?

The debian amanda package is configured with "--with-bsd-seurity"


Configfiles:

more /etc/xinetd.d/amanda
service amanda
{
       socket_type     = dgram
       protocol        = udp
       wait            = yes
       user            = backup
       group           = backup
       groups          = yes
       server          = /usr/lib/amanda/amandad
       server_args     = -auth=bsd amdump amindexd amidxtaped
       disable         = no
}


--

more /etc/xinetd.d/amandaidx
#default: on
# description: The amanda index service
service amandaidx
{
        disable         = no
        socket_type     = stream
        protocol        = tcp
        wait            = no
        user            = backup
        group           = backup
        server          = /usr/lib/amanda/amindexd
}

--

more /etc/xinetd.d/amidxtape
#default: on
# description: The amanda tape service
service amidxtape
{
        disable         = no
        socket_type     = stream
        protocol        = tcp
        wait            = no
        user            = backup
        group           = backup
        server          = /usr/lib/amanda/amidxtaped
}

--

:~# grep -v '#' /etc/inetd.conf








amandaidx stream tcp nowait backup /usr/sbin/tcpd /usr/lib/amanda/amindexd amidxtape stream tcp nowait backup /usr/sbin/tcpd /usr/lib/amanda/amidxtaped amanda dgram udp wait backup /usr/sbin/tcpd /usr/lib/amanda/amandad -auth=bsd amdump amindexd amidxtaped

--

Configure Options

./configure --prefix=/usr --bindir=/usr/sbin --mandir=/usr/share/man \
                --libexecdir=/usr/lib/amanda --enable-shared\
                --sysconfdir=/etc --localstatedir=/var/lib \
                --with-gnutar-listdir=/var/lib/amanda/gnutar-lists \
                --with-index-server=localhost \
                --with-user=backup --with-group=backup  \
                --with-bsd-security --with-amandahosts \
                --with-smbclient=/usr/bin/smbclient \
                --with-debugging=/var/log/amanda \
                --with-dumperdir=/usr/lib/amanda/dumper.d \
--with-tcpportrange=50000,50100 --with-udpportrange=840,860 \
                --with-maxtapeblocksize=256 \
                --with-ssh-security

--

snapits from netstat -tupln:

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:10082 0.0.0.0:* LISTEN 2246/inetd tcp 0 0 0.0.0.0:10083 0.0.0.0:* LISTEN 2246/inetd
udp        0      0 0.0.0.0:10080           0.0.0.0:*        2358/xinetd
udp        0      0 0.0.0.0:10080           0.0.0.0:*        2358/xinetd
udp        0      0 0.0.0.0:10080           0.0.0.0:*        2246/inetd

--




Hope that someone could help me.

bye

B²