Mark,

Bacula is not involved in hardware (tape drive) encryption.

The encryption dialog is an exchange of key information between the drive
and the encryption key manager, in your case stenc.  If your tapes were
initially written to prior to using the encryption capability, the tapes
can never be hardware encrypted.  The opposite is also true, if you write
to the tapes the very first time using encryption, they can never be
written to unencrypted.

What testing did you perform prior to getting bacula involved?  I'm not
familiar with stenc, are you sure that it is conversing properly with your
hardware?

Patti Clark
Linux System Administrator
R&D Systems Support Oak Ridge National Laboratory


On 10/19/15, 6:47 PM, "Mark D. Strohm" <mstrohm AT ucla DOT edu> wrote:

>Hello-
>
>Is there a trick to using Bacula with LTO hardware encryption enabled?
>
>With drive encryption turned on, verify jobs are hitting an I/O error
>reading the first record of a tape file.
>
>On a test job that went to files 78, 79 and 80, the error looks like this:
>
>19-Oct 14:03 ccnback-sd JobId 988: Ready to read from volume "CCNB12" on
>tape device "Magnum-224-LTO4"
>(/dev/tape/by-id/scsi-1IBM_ULTRIUM-TD4_1310025811-nst).
>19-Oct 14:03 ccnback-sd JobId 988: Forward spacing Volume "CCNB12" to
>file:block 78:0.
>19-Oct 14:19 ccnback-sd JobId 988: Error: block.c:429 Read error on fd=5
>at file:blk 79:0 on device "Magnum-224-LTO4"
>(/dev/tape/by-id/scsi-1IBM_ULTRIUM-TD4_1310025811-nst). ERR=Input/output
>error.
>19-Oct 14:19 ccnback-sd JobId 988: End of Volume at file 79 on device
>"Magnum-224-LTO4" (/dev/tape/by-id/scsi-1IBM_ULTRIUM-TD4_1310025811-nst),
>Volume ³CCNB12"
>
>dd can read the data from both files.  The boundary is on the phrase
>"varius sed feugiat².  The end of file 78, and the start of 79 are:
>
>    "varius sed "
>    
>"~\274\301\214^@^@\374^@^@^A.\300BB02^@^@^@^AV%X\226^@^@^@3\377\377\377\37
>6^@^@\313\233feugiat²
>
>I¹m using Bacula 7.0.5 with an LTO-4 drive and stenc 1.0.7 to control
>encryption.
>
>Any advice would be appreciated.
>
>Thank you very much.
>Mark
>
>
>--------------------------------------------------------------------------
>----
>_______________________________________________
>Bacula-users mailing list
>Bacula-users AT lists.sourceforge DOT net
>https://lists.sourceforge.net/lists/listinfo/bacula-users


------------------------------------------------------------------------------
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users