Amanda-Users

amanda & ssh security

2008-07-18 09:11:38
Subject: amanda & ssh security
From: Mister Olli <mister.olli AT googlemail DOT com>
To: AMANDA users <amanda-users AT amanda DOT org>
Date: Fri, 18 Jul 2008 13:05:00 +0000
hi...

I compiled amanda on freebsd 7.0 with SSH security activated...

since the port had some bug, after fixing, the configure output starts
like this:

This file contains any messages produced by compilers while
running configure, to aid debugging if configure makes a mistake.

It was created by configure, which was
generated by GNU Autoconf 2.61.  Invocation command line was

  $ ./configure --libexecdir=/usr/local/libexec/amanda
--with-amandahosts --with-fqdn --with-dump-honor-nodump
--with-buffered-dump --dis
able-libtool --prefix=/usr/local --with-user=amanda --with-group=backup
--with-index-server=hdb-bak-001.DOMAIN --with-tape-server=hdb-ba
k-001.DOMAIN --with-gnutar-listdir=/usr/local/var/amanda/gnutar-lists
--with-gnutar=/usr/local/bin/gtar --without-client --with-ssh-secu
rity --prefix=/usr/local --mandir=/usr/local/man
--infodir=/usr/local/info/ --build=i386-portbld-freebsd6.2

## --------- ##
## Platform. ##
## --------- ##

[...SNIP...]


so to me it looks like SSH security is activated, and there are no
problems during compilation.


however, with this configuration

[...SNIP...]
define dumptype tar {
        comment         "Default backup method, using GNU-tar and no holding 
disk"
        compress        none
        exclude list    "/etc/amanda/daily-exclude"
        holdingdisk     auto
        index           yes
        program         "GNUTAR"
        record          yes
        index           yes
        tape_splitsize  20 GB   # split dumps, to reduce disc usage;
size=tapesize/10
}

define dumptype ssh-tar {
        tar
        auth "ssh"
        ssh_keys "/home/amanda/.ssh/id_rsa"
        client_username "amanda"

}
[...SNIP...]

amcheck on this job always fails with this messages:

# sudo -u amanda amcheck daily
Amanda Tape Server Host Check
-----------------------------
Holding disk /holding/daily: 424871 MB disk space available, using
424871 MB
slot 3: read label `Tape03', date `20080704'
NOTE: skipping tape-writable test
Tape Tape03 label ok
NOTE: host info dir /home/amanda/daily/curinfo/172.31.1.11 does not
exist
NOTE: it will be created on the next run.
NOTE: index dir /home/amanda/daily/index/172.31.1.11 does not exist
NOTE: it will be created on the next run.
Server check took 0.037 seconds
amcheck-clients: could not find security driver 'ssh' for host
'172.31.1.11'

Amanda Backup Client Hosts Check
--------------------------------

(brought to you by Amanda 2.5.1p3)


I followed the instructions from the wiki
(http://wiki.zmanda.com/index.php/How_To:Set_up_transport_encryption_with_SSH), 
but no success to get SSH authentication to work.

any hints, on what is going wrong?
are there any package requirements when using SSH authentication?

greetz
olli


<Prev in Thread] Current Thread [Next in Thread>