Amanda-Users

Re: Amanda encryption

2008-01-07 14:32:08
Subject: Re: Amanda encryption
From: "Dustin J. Mitchell" <dustin AT zmanda DOT com>
To: "Paul Crittenden" <paul.crittenden AT simpson DOT edu>
Date: Mon, 7 Jan 2008 14:24:16 -0500
I assume that the '18' in the amdump logfile is coming from this line:

  seedstr=`head 18 /dev/urandom | uuencode - | head -n 2 | tail -1`

and that this is probably a result of non-portable shell (or, in this
case, 'head') syntax.

You can replace all of those 'head NN' with 'sed' invocations, using
the sed expression 'NNq'.  Getting only a specific line is a bit more
complicated, involving deleting everything up to that line.  So that
line would look like
  seedstr=`sed -e '18q' /dev/urandom | uuencode - | sed -e '2q;1d'`

If you get this working, I would love to include the result in the
next release.  Thanks for persevering!

Dustin

On Jan 7, 2008 12:54 PM, Paul Crittenden <paul.crittenden AT simpson DOT edu> 
wrote:
> I have run some more tests and now I am getting a different error
> message altogether in my logs. I am attaching the amdump log and the
> script amaespipe, which is used to encrypt. The amaespipe is complaining
> about improper usage.
>
> I had to make some changes to the script because Solaris does not have
> the head, tail and uuencode options the original script wanted.
>
> Here is the original line for the amaespipe script for the seedstring:
> seedstr=`head -c 18 /dev/urandom | uuencode -m - | head -n 2 | tail -n
> 1`
>
> Solaris does not like the -c in head, the -m in uuencode and the way the
> tail command is setup.
>
> Also, I was told that amanda installs aespipe, I checked what was
> installed and it looks like it installs amaespipe not aespipe. Amaespipe
> calls aespipe, however.
>
> Paul Crittenden
> Computer Systems Manager
> Simpson College
> Phone: 515-961-1680
> Email: paul.crittenden AT simpson DOT edu
>
> -----Original Message-----
> From: djmitche AT gmail DOT com [mailto:djmitche AT gmail DOT com] On Behalf 
> Of Dustin
> J. Mitchell
> Sent: Friday, January 04, 2008 4:03 PM
> To: Paul Crittenden
> Cc: amanda-users AT amanda DOT org
> Subject: Re: Amanda encryption
>
>
> On Jan 4, 2008 3:39 PM, Paul Crittenden <paul.crittenden AT simpson DOT edu>
> wrote:
> > Well, since I have received no response on my enquiry, I am assuming
> > that either no one is using the encryption feature of amanda or I am
> the
> > only one to have this issue.
> >
> > Because of the data I am trying to backup I have been charged with
> > making encrypted backups. I was hoping that Amanda would do the trick
> > since it is free but apparently not.
> >
> > I will have to look elsewhere I guess.
>
> Sorry there was no response.  For my part, I don't know much about
> encryption, beyond how it fits into Amanda.  The page you link to is
> quite out of date, unfortunately -- amaespipe included in Amanda now,
> for one thing.
>
> From the error, it sounds like GPG isn't finding its keys.  Are things
> set up as described here:
>   http://wiki.zmanda.com/index.php/Amcrypt
> Perhaps someone with a more modern encryption implementation jump in?
>
> Dustin
>
> --
> Storage Software Engineer
> http://www.zmanda.com
>
>
>
> --
> BEGIN-ANTISPAM-VOTING-LINKS
> ------------------------------------------------------
>
> NOTE: This message was trained as non-spam.  If this is wrong,
> please correct the training as soon as possible.
>
> Teach CanIt if this mail (ID 17495477) is spam:
> Spam:
> https://storm.simpson.edu/canit/b.php?i=17495477&m=b3ce44fce420&c=s
> Not spam:
> https://storm.simpson.edu/canit/b.php?i=17495477&m=b3ce44fce420&c=n
> Forget vote:
> https://storm.simpson.edu/canit/b.php?i=17495477&m=b3ce44fce420&c=f
> ------------------------------------------------------
> END-ANTISPAM-VOTING-LINKS
>
>



-- 
Storage Software Engineer
http://www.zmanda.com

<Prev in Thread] Current Thread [Next in Thread>