Menu
▾
▴
Re: [Bacula-devel] [Bacula-users] Restoring with Encryption
|
From: Robert N. <ro...@th...> - 2007-04-28 05:26:27
|
Below > -----Original Message----- > From: bac...@li... [mailto:bacula-devel- > bo...@li...] On Behalf Of Kern Sibbald > Sent: Tuesday, April 24, 2007 6:13 PM > To: Vladimir Doisan > Cc: Robert Nelson; bac...@li...; Landon Fuller; > sys...@me... > Subject: Re: [Bacula-devel] [Bacula-users] Restoring with Encryption > > On Tuesday 24 April 2007 23:09, Vladimir Doisan wrote: > > Was this problem resolved? > > To the best of my knowledge this is not resolved. There is a bug report > (807) > open on it, and I have requested some additional information from the > submitter(s). > > The current situation as I see it is: > > - There was a bug opened on this problem the 20th of March. > > - I am not sure that Landon was aware of that bug report (he is now). > > - The submitter assigned the bug to Robert Nelson. > > - Robert responded to the bug report requesting more information, so I was > under the impression he was working on fixing it. > > - A few days ago, he informed me (and I paraphrase it) "I'm not working on > it because it is a core code bug not a Windows bug". > This is not paraphrasing what I said, this is outright misrepresenting it. The discussion at the time was in reference to your deciding not to include the Windows Server in the next release. You cited this bug as one of the reasons for not including the Server version. I said it was a client bug and probably not platform specific, so it made no sense to use it as a reason for cancelling the Windows server version. As for why I didn't fix it, I said that I thought there were other folks working on the encryption issues namely Landon. I did not know he was too busy to work on them. I am not the "best" person to be working on this, I know very little about the encryption code, I did not contribute the code and the change I made was an obvious one without knowing any of the encryption specifics. I have no idea why you should be holding me "responsible" for fix this bug. > - I am not very happy with this situation (nothing being done), and I > would > like to see Robert and Landon put their heads together and get this bug > fixed as soon as possible. > Since the user has also reported the problem occurring on Linux clients I've assigned the bug to Landon. > - If it isn't fixed (or at least seriously worked on) in the next two > weeks, > I will work on it. I won't be very happy that this is not resolved by > the two Bacula developers who are most capable to fix it, so there > will be some important fall-out. > I'm not sure what you are threatening here but it certainly doesn't seem to be the method most likely to succeed when working with volunteers. Perhaps this is why you've had problems keeping "permanent" developers in the past? > Best regards, > > Kern > > PS: In order to try to isolate the conditions that create this problem, > please > take a look at the bug report and possibly attempt to answer some of the > questions I asked in a bugnote. Also, please try 2048 bit keys, and > indicate > on the bug report whether or not any non-Intel or any 64 bit machines are > involved. > > PPS: Please make *absolutely* sure your client is a 2.0.3 version. A > similar, > if not the same problem existed in an earlier 2.0.0 version. > > > > When restoring some file (tried 3 different files in 3 different > > folders) I get same error, however the file gets restored without > problems. > > Bacula 2.0.3 Linux Dir and Win2k client. > > I am also using 4096 bit keys (bacula doc had example as 2048) > > > > Thanks. > > > > 24-Apr 16:48 backup-dir: Start Restore Job RestoreFiles.2007-04- > 24_16.48.41 > > 24-Apr 16:48 backup-sd: Ready to read from volume > > "RanoTuesdayVolume0001" on device "FileStorage" (/backups). > > 24-Apr 16:48 backup-sd: Forward spacing Volume "RanoTuesdayVolume0001" > > to file:block 0:213. > > 24-Apr 15:49 erind-fd: RestoreFiles.2007-04-24_16.48.41 Error: > > ../../filed/restore.c:815 Signature validation failed for c:/Documents > > and Settings/ErinD/Desktop/Monthly Trans Summary.xls: Signature is > invalid > > 24-Apr 16:48 backup-dir: RestoreFiles.2007-04-24_16.48.41 Error: Bacula > > 2.0.3 (06Mar07): 24-Apr-2007 16:48:47 > > JobId: 4 > > Job: RestoreFiles.2007-04-24_16.48.41 > > Client: erind-fd > > Start time: 24-Apr-2007 16:48:43 > > End time: 24-Apr-2007 16:48:47 > > Files Expected: 1 > > Files Restored: 1 > > Bytes Restored: 64,788 > > Rate: 16.2 KB/s > > FD Errors: 1 > > FD termination status: Error > > SD termination status: OK > > Termination: *** Restore Error *** > > > > 24-Apr 16:48 backup-dir: Begin pruning Jobs. > > 24-Apr 16:48 backup-dir: No Jobs found to prune. > > 24-Apr 16:48 backup-dir: Begin pruning Files. > > 24-Apr 16:48 backup-dir: No Files found to prune. > > 24-Apr 16:48 backup-dir: End auto prune. > > > > > > > > > > Kern Sibbald wrote: > > > Hello, > > > > > > At this point, you should isolate the problem to a single file if > possible > > > that is causing the problem. Do a backup of that file only, then a > restore. > > > If you can isolate the error in that way, please open a bug report, > giving > > > the appropriate output error messages, uploading your bacula-dir.conf > and > > > bacula-sd.conf files (stripped of passwords), and the file in > question. > > > > > > It seems to me that there is already a bug report open on Win32 for > this > > > problem, so you might want to check it as well -- possibly adding your > > > information to it if it is identical to what you are seeing. > > > > > > Best regards, > > > > > > Kern > > > > > > On Saturday 31 March 2007 03:15, Michael Havas wrote: > > >>> Hello, > > >>> > > >>> There was a bug in the restore code that was fixed in 2.0.3. Please > > >>> update > > >>> (at least the client FD), test again, and let us know if it resolves > the > > >>> problem. > > >>> > > >>> Best regards, > > >>> > > >>> Kern > > >> Hi Kern. Thanks for getting back to me. I upgraded the client to > version > > >> 2.0.3 but I'm experiencing the same problem indicated in the original > > >> message below. I have verified that the client is now indeed 2.0.3 as > well > > >> as the server. You may find the revised errors below: > > >> > > >> === + > > >> 30-Mar 20:05 el4_32_build-dir: Start Restore Job > > >> RestoreFiles.2007-03-30_20.05.43 > > >> 30-Mar 20:05 el4_32_build-sd: 3301 Issuing autochanger "loaded? drive > 0" > > >> command. > > >> 30-Mar 20:05 el4_32_build-sd: 3302 Autochanger "loaded? drive 0", > result > > >> is Slot 4. > > >> 30-Mar 20:06 el4_32_build-sd: Ready to read from volume "AHP562L3" on > device > > >> "Drive-1" (/dev/nst0). > > >> 30-Mar 20:06 el4_32_build-sd: Forward spacing Volume "AHP562L3" to > > >> file:block 1:0. > > >> 30-Mar 20:07 staff-vaughn: RestoreFiles.2007-03-30_20.05.43 Fatal > error: > > >> ../../filed/restore.c:1056 Decryption error for > > >> c:\temp/c/I386/ASMS/1/default/ > > >> 30-Mar 20:07 staff-vaughn: RestoreFiles.2007-03-30_20.05.43 Error: > > >> ../../filed/restore.c:310 Missing cryptographic signature for > > >> c:\temp/c/I386/ASMS/1/default/ > > >> 30-Mar 20:07 staff-vaughn: RestoreFiles.2007-03-30_20.05.43 Error: > > >> ../../filed/restore.c:672 Missing cryptographic signature for > > >> c:\temp/c/I386/ASMS/1/ > > >> 30-Mar 20:07 el4_32_build-sd: RestoreFiles.2007-03-30_20.05.43 Fatal > error: > > >> read.c:139 Error sending to File daemon. ERR=Connection reset by peer > > >> 30-Mar 20:07 el4_32_build-sd: RestoreFiles.2007-03-30_20.05.43 Error: > > >> bnet.c:439 > > >> Write error sending 65536 bytes to client:132.206.43.204:36643: > > >> ERR=Connection reset > > >> by peer > > >> === - > > >> > > >> As you can see, this is precisely the same error I was receiving with > > >> Bacula Client version 2.0.2. > > >> > > >> Any help is much appreciated, > > >> > > >> Michael > > >> > > >>> On Friday 30 March 2007 21:24, Michael Havas wrote: > > >>>> Hi everyone, > > >>>> > > >>>> I'm using bacula with encryption with Windows Client version 2.02 > and > > >>>> Director/Storage daemons on CentOS 4.4. The client both the PKI > Keypair > > >>>> and Master certificate for encryption. > > >>>> > > >>>> I've been testing out restores with bacula and encryption. I've > found > > >>>> some disturbing results. Certain files and directories report > decryption > > >>>> errors while others do not. > > >>>> > > >>>> Here are examples of the errors I receive when trying to restore > > >>>> "c:\I386" (a backup of the winXP cd): > > >>>> > > >>>> === + > > >>>> 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Fatal > error: > > >>>> ../../filed/restore.c:1056 Decryption error for > > >>>> c:\temp/c/I386/ASMS/1/default/ > > >>>> 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Error: > > >>>> ../../filed/restore.c:310 Missing cryptographic signature for > > >>>> c:\temp/c/I386/ASMS/1/default/ > > >>>> 30-Mar 14:52 el4_32_build-sd: RestoreFiles.2007-03-30_14.48.49 > Fatal > > >>>> error: read.c:139 Error sending to File daemon. ERR=Connection > reset by > > >>>> peer > > >>>> 30-Mar 14:52 el4_32_build-sd: RestoreFiles.2007-03-30_14.48.49 > Error: > > >>>> bnet.c:439 Write error sending 65536 bytes to > > >>>> client:132.206.43.204:36643: ERR=Connection reset by peer > > >>>> 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Error: > > >>>> ../../filed/restore.c:672 Missing cryptographic signature for > > >>>> c:\temp/c/I386/ASMS/1/ > > >>>> 30-Mar 14:52 el4_32_build-dir: RestoreFiles.2007-03-30_14.48.49 > Error: > > >>>> Bacula 2.0.3 (06Mar07): 30-Mar-2007 14:52:21 > > >>>> > > >>>> === - > > >>>> > > >>>> I also receive the same errors when trying specifically to restore > > >>>> "c:\I386\ASMS\1\default": > > >>>> > > >>>> === + > > >>>> 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Fatal > error: > > >>>> ../../filed/restore.c:1056 Decryption error for > > >>>> c:\temp/c/I386/ASMS/1/default/ > > >>>> 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Error: > > >>>> ../../filed/restore.c:310 Missing cryptographic signature for > > >>>> c:\temp/c/I386/ASMS/1/default/ > > >>>> 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Error: > > >>>> ../../filed/restore.c:672 Missing cryptographic signature for > > >>>> c:\temp/c/I386/ASMS/1/ > > >>>> 30-Mar 15:04 el4_32_build-sd: RestoreFiles.2007-03-30_15.01.11 > Fatal > > >>>> error: read.c:124 Error sending to File daemon. ERR=Connection > reset by > > >>>> peer > > >>>> 30-Mar 15:04 el4_32_build-sd: RestoreFiles.2007-03-30_15.01.11 > Error: > > >>>> bnet.c:406 Write error sending len to client:132.206.43.204:36643: > > >>>> ERR=Connection reset by peer > > >>>> === - > > >>>> > > >>>> Yet I am able to restore a single file "c:\pagefile.sys" from the > same > > >>>> system without any problems. > > >>>> > > >>>> I am using both a PKI Keypair and a master cert to do the > encryption > and > > >>>> just the PKI Keypair to do the decryption. > > >>>> > > >>>> Thank you very much for your help with this, > > >>>> > > >>>> Michael > > >>>> > > > >>>> --------------------------------------------------------------------- > ---- > > >>>> Take Surveys. Earn Cash. Influence the Future of IT > > >>>> Join SourceForge.net's Techsay panel and you'll get the chance to > share > > >>>> your > > >>>> opinions on IT & business topics through brief surveys-and earn > cash > > >>>> > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > > >>>> _______________________________________________ > > >>>> Bacula-users mailing list > > >>>> Bac...@li... > > >>>> https://lists.sourceforge.net/lists/listinfo/bacula-users > > >>>> > > >> > > >> --------------------------------------------------------------------- > ---- > > >> Take Surveys. Earn Cash. Influence the Future of IT > > >> Join SourceForge.net's Techsay panel and you'll get the chance to > share > your > > >> opinions on IT & business topics through brief surveys-and earn cash > > >> > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > > >> _______________________________________________ > > >> Bacula-users mailing list > > >> Bac...@li... > > >> https://lists.sourceforge.net/lists/listinfo/bacula-users > > >> > > > > > > ---------------------------------------------------------------------- > --- > > > Take Surveys. Earn Cash. Influence the Future of IT > > > Join SourceForge.net's Techsay panel and you'll get the chance to > share > your > > > opinions on IT & business topics through brief surveys-and earn cash > > > > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > > > _______________________________________________ > > > Bacula-users mailing list > > > Bac...@li... > > > https://lists.sourceforge.net/lists/listinfo/bacula-users > > > > > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > _______________________________________________ > Bacula-devel mailing list > Bac...@li... > https://lists.sourceforge.net/lists/listinfo/bacula-devel |