Amanda-Users

Re: using Netcat as a wrapper on solaris

2002-08-08 14:45:30
Subject: Re: using Netcat as a wrapper on solaris
From: Gene Heskett <gene_heskett AT iolinc DOT net>
To: aread AT localnet DOT com, amanda-users <amanda-users AT amanda DOT org>
Date: Thu, 8 Aug 2002 14:32:01 -0400
On Thursday 08 August 2002 14:07, Adam D. Read wrote:
>Inetd, Xinetd are not options for me to use on my solaris boxen. 

Sorry, I missed that solaris thing.

> The linux box has no problems running through netcat,and I use it
> for a testing box for my installs.  My question is about getting
> amandad to run through netcat or something similiar, but not
> (x)inetd.  I am pretty sure that netcat works fine, as it runs
> well under linux and works in conjunction w/ a shell on solaris. 
> I am looking to test amandad [sudo -u amanda(has root group perm
> to devices)] and be verbal about it.  Here is my amandad log:
>
>amandad: debug 1 pid 27042 ruid 742 euid 742 start time Thu Aug  8
>13:42:35 2002
>amandad: version 2.4.2p2
>amandad: build: VERSION="Amanda-2.4.2p2"
>amandad:        BUILT_DATE="Wed Aug 7 16:26:37 EDT 2002"
>amandad:        BUILT_MACH="SunOS grinch 5.8 Generic_108528-09
> sun4u sparc SUNW,
>UltraAX-i2"
>amandad:        CC="gcc"
>amandad: paths: bindir="/usr/local/bin" sbindir="/usr/local/sbin"
>amandad:        libexecdir="/usr/local/libexec"
> mandir="/usr/local/man" amandad:       
> AMANDA_TMPDIR="/tmp/amanda" AMANDA_DBGDIR="/tmp/amanda" amandad: 
>       CONFIG_DIR="/usr/local/etc/amanda" DEV_PREFIX="/dev/dsk/"
> amandad:        RDEV_PREFIX="/dev/rdsk/" DUMP="/usr/sbin/ufsdump"
> amandad:        RESTORE="/usr/sbin/ufsrestore"
> GNUTAR="/usr/local/bin/tar" amandad:       
> COMPRESS_PATH="/usr/local/bin/gzip"
>amandad:        UNCOMPRESS_PATH="/usr/local/bin/gzip"
>amandad:        MAILER="/usr/bin/mailx"
>amandad:       
> listed_incr_dir="/usr/local/var/amanda/gnutar-lists" amandad:
> defs:  DEFAULT_SERVER="backup.localnet.sys"
>amandad:        DEFAULT_CONFIG="DailySet1"
>amandad:        DEFAULT_TAPE_SERVER="backup.localnet.sys"
>amandad:        DEFAULT_TAPE_DEVICE="/dev/null" HAVE_MMAP
> HAVE_SYSVSHM amandad:        LOCKING=POSIX_FCNTL SETPGRP_VOID
> DEBUG_CODE amandad:        AMANDA_DEBUG_DAYS=4 BSD_SECURITY
> USE_AMANDAHOSTS amandad:        CLIENT_LOGIN="amanda"
> FORCE_USERID HAVE_GZIP amandad:        COMPRESS_SUFFIX=".gz"
> COMPRESS_FAST_OPT="--fast" amandad:       
> COMPRESS_BEST_OPT="--best" UNCOMPRESS_OPT="-dc" got packet:
>--------
>Amanda 2.4 REQ HANDLE 001-309F0708 SEQ 1028829247
>SECURITY USER amanda
>SERVICE selfcheck
>OPTIONS ;
>GNUTAR c0t0d0s5 0 OPTIONS
>
>|;bsd-auth;index;exclude-list=/usr/local/lib/amanda/ex
>
>clude.gtar;
>--------
>
>sending ack:
>----
>Amanda 2.4 ACK HANDLE 001-309F0708 SEQ 1028829247
>----
>
>amandad: dgram_send_addr: sendto(TAPE_SERVER_IP_REMOVED.522)
> failed: Transport endpoint
>is already connected
>bsd security: remote host "tapeserver FQDN" user amanda local user
> amanda amandahosts security check passed
>amandad: running service "/usr/local/libexec/selfcheck"
>amandad: sending REP packet:
>----
>Amanda 2.4 REP HANDLE 001-309F0708 SEQ 1028829247
>OPTIONS ;
>OK /export/home
>OK /usr/local/libexec/runtar executable
>OK /usr/local/bin/tar executable
>OK /etc/amandates read/writable
>OK /usr/local/var/amanda/gnutar-lists/. read/writable
>OK /dev/null read/writable
>OK /tmp/amanda has more than 64 KB available.
>OK /tmp/amanda has more than 64 KB available.
>OK /etc has more than 64 KB available.
>----
>
>amandad: dgram_send_addr: sendto(TAPE_SERVER_IP_REMOVED.522)
> failed: Transport endpoint
>is already connected
>amandad: got packet:
>----
>Amanda 2.4 REQ HANDLE 001-309F0708 SEQ 1028829247
>SECURITY USER amanda
>SERVICE selfcheck
>OPTIONS ;
>GNUTAR c0t0d0s5 0 OPTIONS
>
>|;bsd-auth;index;exclude-list=/usr/local/lib/amanda/ex
>
>clude.gtar;
>----
>
>amandad: It's not an ack
>amandad: sending REP packet:
>----
>Amanda 2.4 REP HANDLE 001-309F0708 SEQ 1028829247
>OPTIONS ;
>OK /export/home
>OK /usr/local/libexec/runtar executable
>OK /usr/local/bin/tar executable
>OK /etc/amandates read/writable
>OK /usr/local/var/amanda/gnutar-lists/. read/writable
>OK /dev/null read/writable
>OK /tmp/amanda has more than 64 KB available.
>OK /tmp/amanda has more than 64 KB available.
>OK /etc has more than 64 KB available.
>----
>
>amandad: dgram_send_addr: sendto(TAPE_SERVER_IP_REMOVED.522)
> failed: Transport endpoint
>is already connected
>amandad: got packet:
>----
>Amanda 2.4 REQ HANDLE 001-309F0708 SEQ 1028829247
>SECURITY USER amanda
>SERVICE selfcheck
>OPTIONS ;
>GNUTAR c0t0d0s5 0 OPTIONS
>
>|;bsd-auth;index;exclude-list=/usr/local/lib/amanda/ex
>
>clude.gtar;
>----
>
>amandad: It's not an ack
>amandad: sending REP packet:
>----
>Amanda 2.4 REP HANDLE 001-309F0708 SEQ 1028829247
>OPTIONS ;
>OK /export/home
>OK /usr/local/libexec/runtar executable
>OK /usr/local/bin/tar executable
>OK /etc/amandates read/writable
>OK /usr/local/var/amanda/gnutar-lists/. read/writable
>OK /dev/null read/writable
>OK /tmp/amanda has more than 64 KB available.
>OK /tmp/amanda has more than 64 KB available.
>OK /etc has more than 64 KB available.
>----
>
>amandad: dgram_send_addr: sendto(TAPE_SERVER_IP_REMOVED.522)
> failed: Transport endpoint
>is already connected
>amandad: dgram_recv: timeout after 10 seconds
>amandad: waiting for ack: timeout, retrying
>amandad: dgram_send_addr: sendto(IPREMOVED.522) failed: Transport
> endpoint is already connected
>amandad: dgram_recv: timeout after 10 seconds
>amandad: waiting for ack: timeout, retrying
>amandad: dgram_send_addr: sendto(IPREMOVED.522) failed: Transport
> endpoint is already connected
>amandad: dgram_recv: timeout after 10 seconds
>amandad: waiting for ack: timeout, retrying
>amandad: dgram_send_addr: sendto(IPREMOVED.522) failed: Transport
> endpoint is already connected
>amandad: dgram_recv: timeout after 10 seconds
>amandad: waiting for ack: timeout, retrying
>amandad: dgram_send_addr: sendto(TAPEIPREMOVED.522) failed:
> Transport endpoint
>is already connected
>amandad: dgram_recv: timeout after 10 seconds
>amandad: waiting for ack: timeout, giving up!
>amandad: pid 27042 finish time Thu Aug  8 13:43:45 2002
>
>This is from an amcheck from the tapehost.  Other servers check
> out fine.
>
>I hope that someone can help me out,
>Adam Read
>LocalNet Corp.
>
>Gene Heskett wrote:
>> On Thursday 08 August 2002 11:34, Adam D. Read wrote:
>>>Hello,
>>>In an effort to secure our servers, we do not run inetd at all,
>>>instead using tcpserver as a wrapper for our TCP services. 
>>> Since amandad is a UDP based service, netcat is the option of
>>> choice, having it exec amandad upon connection(run through
>>> daemontools). This works well on a linux box, but my first
>>> solaris box I started on is giving me trouble. I am running 
>>> SunOS 5.8 and have the newest stable amanda and netcat.  I
>>> tested netcat w/ bash and it exec'd the shell perfectly through
>>> the UDP connection.  Is there a way to test amandad to make
>>> sure it is functioning at all?  It exits as soon as anything is
>>> sent to it through netcat.

Now I'll leave it to the real experts, I've no experience with 
solaris at all.

[...my wild advice]

-- 
Cheers, Gene
AMD K6-III@500mhz 320M
Athlon1600XP@1400mhz  512M
99.10% setiathome rank, not too shabby for a WV hillbilly

<Prev in Thread] Current Thread [Next in Thread>