|
Re: [Bacula-users] Encryption errors
2010-01-26 13:28:09
>>>>> On Tue, 26 Jan 2010 09:25:27 +0000, Conor O'Callaghan said:
>
> Sorry by master I meant the bacula director, when I look at the files there,
> they seem encrypted, I can see other files from systems which don't use PKI.
>
>
> Right, now that I do a stop/start on the bacula-fd ( client ) rather than a
> restart, I see the error when trying to recover the file, which is good.
>
> JobId 866: Error: No private decryption keys have been defined to
> decrypt encrypted backup data.
>
>
> Here is the further output for the streams:
>
> Stream=19
>
> Date written : 23-Jan-2010 22:41
> bscan: bscan.c:521 SOS_LABEL: Found Job record for JobId: 850
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=1 Stream=1
> len=79
> bscan JobId 0: drwxr-xr-x 2 root root 4096 2009-11-11
> 11:10:53 /usr/local/bin/
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=2 Stream=1
> len=73
> bscan JobId 0: -rw-r--r-- 1 root root 187 2009-11-11
> 11:15:58 /etc/hosts
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=2
> Stream=22 len=640
> bscan: bscan.c:771 Got signed digest record
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=2
> Stream=20 len=176
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=2
> Stream=20 len=16
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=2
> Stream=19 len=322
> bscan: bscan.c:778 Got signed digest record
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=2 Stream=3
> len=16
> bscan: bscan.c:739 Got MD5 record: P2vF/aw3NH4saRMllHCunA
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=3 Stream=1
> len=75
> bscan JobId 0: -rw-r--r-- 1 root root 1184 2009-12-03
> 15:38:15 /etc/profile
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=3
> Stream=22 len=640
> bscan: bscan.c:771 Got signed digest record
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=3
> Stream=20 len=1184
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=3
> Stream=20 len=16
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=3
> Stream=19 len=322
> bscan: bscan.c:778 Got signed digest record
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=3 Stream=3
> len=16
>
> Stream=22
>
> Date written : 23-Jan-2010 22:41
> bscan: bscan.c:521 SOS_LABEL: Found Job record for JobId: 850
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=1 Stream=1
> len=79
> bscan JobId 0: drwxr-xr-x 2 root root 4096 2009-11-11
> 11:10:53 /usr/local/bin/
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=2 Stream=1
> len=73
> bscan JobId 0: -rw-r--r-- 1 root root 187 2009-11-11
> 11:15:58 /etc/hosts
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=2
> Stream=22 len=640
> bscan: bscan.c:771 Got signed digest record
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=2
> Stream=20 len=176
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=2
> Stream=20 len=16
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=2
> Stream=19 len=322
> bscan: bscan.c:778 Got signed digest record
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=2 Stream=3
> len=16
> bscan: bscan.c:739 Got MD5 record: P2vF/aw3NH4saRMllHCunA
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=3 Stream=1
> len=75
> bscan JobId 0: -rw-r--r-- 1 root root 1184 2009-12-03
> 15:38:15 /etc/profile
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=3
> Stream=22 len=640
> bscan: bscan.c:771 Got signed digest record
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=3
> Stream=20 len=1184
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=3
> Stream=20 len=16
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=3
> Stream=19 len=322
> bscan: bscan.c:778 Got signed digest record
> bscan: bscan.c:425 Record: SessId=30 SessTim=1264090948 FileIndex=3 Stream=3
> len=16
>
>
> So it looks like the files have been encrypted correctly right?
Yes, that looks good.
> Ok, so here
> is what I did.
>
> Change configuration on director once more ( to point to new recovery box ).
> Stop / Start bacula ( fd/sd/dir )
>
> Stop/Start bacula-fd on the new recovery box
>
> Try once more to recover with bconsole from the director
>
> Now it recovers without the errors! So it seems that my restart on the
> director, was causing some confusion. That's the only conclusion I can draw
> from this. Thanks for your help Martin.
Great, I'm glad it was resolved.
__Martin
------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users
|
|
|
