Bacula-users

Re: [Bacula-users] Can't run bacula any more.

2017-03-06 07:53:39
Subject: Re: [Bacula-users] Can't run bacula any more.
From: Francisco Javier Funes Nieto <esencia AT gmail DOT com>
To: "Erik P. Olsen" <epodata AT gmail DOT com>
Date: Mon, 6 Mar 2017 13:52:53 +0100
To delimite the problem:

Check MySQL/MariaDB it's running in the host. 

ps axu|grep mysql
 ps axu|grep mysql
root     12832  0.0  0.0  23068  3456 ?        S    mar01   0:00 /bin/bash /usr/bin/mysqld_safe
mysql    12967  0.1  0.9 613220 76684 ?        Sl   mar01  10:49 /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib/mysql/plugin --user=mysql --skip-log-error --pid-file=/var/run/mysqld/mysqld.pid --socket=/var/run/mysqld/mysqld.sock --port=3306


Check the username Bacula exists in the Catalog Server (on mysql prompt = use mysql; select * from user where User='bacula';)

Check the username Bacula has the right permissions to access the bacula database. 

If you run the make_bacula_database, make_bacula_tables and grant_bacula_privileges scripts maybe would be safe to set a password to the user bacula and configure it into the bacula-dir.conf too. 

J.
 

2017-03-06 13:13 GMT+01:00 Erik P. Olsen <epodata AT gmail DOT com>:
On 2017-03-06 at 12:59:11 Francisco Javier Funes Nieto wrote:
Hi Francisco,

This is my catalogue definition:

#
# Generic catalog service
#
Catalog {
  Name = MyCatalog
  dbname = "bacula"; dbuser = "bacula"; dbpassword = ""
}

I don't think there is any dbpassword. I tried to copy as much as
possible from my old machine which does not use dbpassword and my tests
for mysql connect seems to indicate that dbpassword is not needed.

It's definitely not a selinux problem.

--
Regards,
Erik P. Olsen, M.Sc. EE
Solsortvej 30
DK-2000 Frederiksberg
Denmark

> Hi Erik,
>
> Can you post the Catalog definition in your bacula-dir.conf ?
> Or check:
>
> dbname = bacula
> dbuser = bacula
> dbpassword = the password for user bacula in MySQL server
>
> The error you show above makes me think about the username it's not
> configured in your bacula-dir.conf, and Bacula it's trying to connect
> to the Catalog without username.
>
> Maybe it's a simple question not related with SELinux.
>
> Best Regards,
>
> J.
>
>
>
> 2017-03-06 12:42 GMT+01:00 Erik P. Olsen <epodata AT gmail DOT com>:
>
> > On 2017-03-06 at 11:27:20 Josip Deanovic wrote:
> >
> > > On Monday 2017-03-06 10:57:03 Erik P. Olsen wrote:
> > > > On 2017-03-06 at 09:48:40 Kern Sibbald wrote:
> > > > > Yes, the manual assumes you did a standard rpm or deb install
> > > > > without Selinux.  If you did anything else, either you are on
> > > > > your own, or you must come back to a standard install.
> > > >
> > > >
> > > > And if I happen to install without selinux what advice do I get
> > > > from this message?
> > >
> > > Are you using selinux?
> > >
> > > If you do, I would suggest to turn it off (not just because of
> > > bacula). It's unreliable, too complex and almost certainly will
> > > make more harm than good. It will also make you think that your
> > > system substantially more secure.
> > >
> > > If you really need security enhanced system there are other
> > > solutions that have proven themselves to actually make system
> > > more secure and they are often less complex and easier to
> > > maintain but I don't want to go into it because it would leave
> > > the scope of this mailing list.
> > >
> > >
> > > Anyways, if you want to continue with selinux you will have to
> > > learn how it works, how to manage it and how to debug it in order
> > > to understand how your bacula processes relate to different files
> > > and then you have to setup a proper selinux context for that
> > > files. I believe it's possible to find many articles on this
> > > subject on the internet.
> > >
> > >
> >
> > This was something Kern brought up out of the blue. I need no
> > advice on selinux. Read my previous messages about my bacula
> > problems. If you can offer advice on these problems I would be more
> > than happy. And contrary to what Kern thinks I do read manuals.
> >
> > --
> > Venlig hilsen,
> > Erik P. Olsen
> > Solsortvej 30
> > 2000 Frederiksberg
> >
> > ------------------------------------------------------------
> > ------------------
> > Check out the vibrant tech community on one of the world's most
> > engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> > _______________________________________________
> > Bacula-users mailing list
> > Bacula-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/bacula-users
> >
>
>
>





--
_____________________________________________

Francisco Javier Funes Nieto [esencia AT gmail DOT com]
CANONIGOS
Servicios Informáticos para PYMES.
Cl. Cruz 2, 1º Oficina 7
Tlf: 958.536759 / 661134556
Fax: 958.521354
GRANADA - 18002
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users