Bacula-users

Re: [Bacula-users] Bnet receive challenge response error ? Authentication errors...

2010-01-13 11:59:14
Subject: Re: [Bacula-users] Bnet receive challenge response error ? Authentication errors...
From: Moray Henderson <Moray.Henderson AT ict-software DOT org>
To: <bacula-users AT lists.sourceforge DOT net>
Date: Wed, 13 Jan 2010 16:56:07 +0000
Simon Spring wrote:
>Hi all
>
>I do have a quite misterious and headacking problem with one of my
>fresh hosts, which
>i'd like to integrate with bacula.
>
>Whatever i try or do, i cannot connect to the bacula-fd on my client,
>i allways get the message below:
>
>*****
>13-Jan 16:57 godzilla-dir JobId 0: Fatal error: Unable to authenticate
>with File daemon at "theclient.dom.local:9102". Possible causes:
>Passwords or names not the same or
>Maximum Concurrent Jobs exceeded on the FD or
>FD networking messed up (restart daemon).
>Please see http://www.bacula.org/rel-manual/
>faq.html#AuthorizationErrors for help.
>******
>What i am able: telnet to the host (by ip and fqdn) on the respective
>port 9102 without problems.
>
>I ensured at least 5 times (and let it countercheck by collegue), that
>passwords do match on both hosts/sides (yes, they do).
>
>There is no firewall active on both sides, hosts.allow allows
>anything, host and ip resolve (ping etc.) vicecersa correctly.
>
>Here is what i get from debug on the client:
>
>$> bacula-fd -c /etc/bacula/bacula-fd.conf -v -s -d350 -f
>bacula-fd: filed_conf.c:438-0 Inserting director res: godzilla-mon
>gnadmin-fd: message.c:259-0 Copy message resource 809be78 to 8099a70
>gnadmin-fd: jcr.c:135-0 read_last_jobs seek to 188
>gnadmin-fd: jcr.c:142-0 Read num_items=0
>gnadmin-fd: pythonlib.c:113-0 No script dir. prog=FDStartUp
>gnadmin-fd: filed.c:225-0 filed: listening on port 9102
>gnadmin-fd: bnet_server.c:96-0 Addresses host[ipv4:192.168.99.24:9102]
>gnadmin-fd: bnet.c:667-0 who=client host=192.168.99.10 port=36387
>gnadmin-fd: jcr.c:617-0 OnEntry JobStatus=gnadmin-fd: jcr.c:637-0
>OnExit JobStatus=C set=C
>gnadmin-fd: find.c:81-0 init_find_files ff=809c488
>gnadmin-fd: job.c:233-0 <dird: Hello Director godzilla-dir calling
>gnadmin-fd: job.c:249-0 Executing Hello command.
>gnadmin-fd: job.c:359-0 Calling Authenticate
>gnadmin-fd: cram-md5.c:73-0 send: auth cram-md5
><696202879.1263398054@gnadmin-fd> ssl=0
>gnadmin-fd: cram-md5.c:89-0 Bnet receive challenge response error.
>gnadmin-fd: authenticate.c:131-0 cram_auth failed for 192.168.3.10
>gnadmin-fd: job.c:252-0 Quit command loop. Canceled=0
>gnadmin-fd: runscript.c:103-0 runscript: running all RUNSCRIPT object
>(ClientAfterJob) JobStatus=C
>gnadmin-fd: pythonlib.c:237-0 No startup module.
>gnadmin-fd: job.c:343-0 Calling term_find_files
>gnadmin-fd: job.c:346-0 Done with term_find_files
>gnadmin-fd: mem_pool.c:377-0 garbage collect memory pool
>gnadmin-fd: job.c:348-0 Done with free_jcr
>
>192.168.99.10 is bacula server deamon
>192.168.99.24 is the client
>
>bacula is on 2.4.2 on both sides, i tried with 2.4.4 on the client,
>with identical/same results.
>I'm using 2.6.18-6-686 / Debian GNU/Linux 4.0 underneath.
>
>With identical configfiles (except adresses of course) on other
>clients with identical/same releases, everything works, as expected.
>
>I tried reinstalling the client bacula-fd, with the same result.
>
>Any hint is very appreciated.
>
>Rgds

Does the password contain any characters outside the ASCII range 32-127?
If so, it might be a codepage conversion problem.

Monitor the authentication conversation with tcpdump or wireshark, and
compare between a working connection and the non-working one?

Set SELinux to permissive mode and try again?


Moray.
"To err is human.  To purr, feline"





------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users