Amanda-Users

amrestore: NAK: user root from localhost is not allowed to execute the service amindexd

2009-03-01 11:27:43
Subject: amrestore: NAK: user root from localhost is not allowed to execute the service amindexd
From: Charles Curley <charlescurley AT charlescurley DOT com>
To: amanda-users AT amanda DOT org
Date: Sun, 1 Mar 2009 08:29:08 -0700
Running amanda-client-1:2.5.2p1-3--i386 on the client, Ubuntu 8.10,
and amanda-server-1:2.5.2p1-1--i386 on the server, Ubuntu
8.04. Everything is, as much as possible, stock.

I have never tried to restore from this client before. Backups appear
to be sucessful.

root@dragon:/home/ccurley/projects/ror# echo $AMANDA_SERVER 
chaffee.localdomain
root@dragon:/home/ccurley/projects/ror# echo $AMANDA_TAPE_SERVER 
chaffee.localdomain
root@dragon:/home/ccurley/projects/ror# amrecover -C /etc/amanda/DailySet1
AMRECOVER Version 2.5.2p1. Contacting server on localhost ...
NAK: user root from localhost is not allowed to execute the service amindexd: 
Please add "amindexd amidxtaped" to the line in /var/backups/.amandahosts on 
the client
root@dragon:/home/ccurley/projects/ror# 

However, I have already added the quoted text to the .amandahosts
file, on both client and server, like so:

chaffee.localdomain backup amindexd amidxtaped

(If I then run amcheck on the server, it complains "ERROR: NAK
dragon.localdomain: user backup from chaffee.localdomain is not
allowed to execute the service noop: Please add "amdump" to the line
in /var/backups/.amandahosts on the client". So I added "amdump", and
amcheck is once more satisfied.)

If I try to run amrecover as the backup user, it refuses to run:

backup@dragon:~$ amrecover
amrecover: amrecover must be run by root
backup@dragon:~$ 

On the server, chaffee, amanda is run by xinetd. All three of amanda,
amandaidx, and amidxtape have "disable = no" and "server_args =
-auth=bsd amdump amindexd amidxtaped".

-- 

Charles Curley                  /"\    ASCII Ribbon Campaign
Looking for fine software       \ /    Respect for open standards
and/or writing?                  X     No HTML/RTF in email
http://www.charlescurley.com    / \    No M$ Word docs in email

Key fingerprint = CE5C 6645 A45A 64E4 94C0  809C FFF6 4C48 4ECD DFDB

Attachment: signature.asc
Description: Digital signature