Re: [Bacula-users] Unable to authenticate with File daemon

[<jor...@de...>]

Dan Langille escribi=F3:
> On 11 Jan 2007 at 15:15, Jorge Gonz=E1lez wrote:
>
>  =20
>> hi all!
>>
>> I have a server with Bacula Director. There are two clients A and B.=20
>> Client A works pretty well but B has an authentication problem.=20
>> Communications between director and B is ok, both are responding to=20
>> ping.  Telnet to B 9103 OK from director and telnet from B to director=
=20
>> 910X OK. iptraf shows connections. A and B has almost the same config.=
=20
>> The only difference is A has bacula-fd binary is a copy from director,=
=20
>> bacula-fd binary in B had been compiled in B because of different OS=20
>> with only-client directive
>>    =20
>
> What version of Director/Client are you running?
>  =20
hi Dan!!
2.0.0 in all machines
>  =20
>> 11-Jan 14:10 bacula-server-dir: *Console*.2007-01-11_14.09.47 Fatal er=
ror: Unable to authenticate with File daemon on "10.15.xxx.xxx:9102". Pos=
sible causes:
>>
>> Passwords or names not the same or
>>
>> Maximum Concurrent Jobs exceeded on the FD or
>>
>> FD networking messed up (restart daemon).
>>
>> Please see http://www.bacula.org/rel-manual/faq.html#AuthorizationErro=
rs for help.
>>
>>
>> any idea?
>>    =20
>
> When you telnet from the director box to the 10.15.x.x box, port=20
> 9102, you don't get told "you are not welcome..." or something like=20
> that?  What you should get is something like this:
>
>  $ telnet dfc 9102
> Trying 10.55.0.98...
> Connected to dfc.unixathome.org.
> Escape character is '^]'.
> [press enter]
> [press enter again]
> Connection closed by foreign host.
> $
>
> Is that what you get?
>
>  =20

Yep, telnet is working. I said telnet to 9103 previously but it was a=20
mistake, I did telnet to B 9102. Then
$ telnet 10.15.xxx.xxx 9102
Trying 10.15.xxx.xxx...
Connected to thor (10.15.xxx.xxx).
Escape character is '^]'.
Connection closed by foreign host.
$
>> -------- Configs --------
>>
>> ** B fd conf**
>> Director {
>>   Name =3D bacula-server-dir
>>   Address =3D 10.10.xxx.xxx
>>    =20
>
> Eh?  Address?  I don't see that documented.  But I don't think that=20
> is the cause of the problem
>  =20
Well, A is working with Address because bacula-server-dir is not in DNS.=20
I'll see later but I'm sure is not the problem.
>  =20
>>   Password =3D "password"
>>    =20
>
> Is this password the same as the one I point out below?
>  =20
yep, of course ;-). In fact, I copy&paste bacula-fd.conf from A client=20
to B client and modify only the name of server
>  =20
>> }
>>
>> FileDaemon {                          # this is me
>>   Name =3D thor
>>   FDport =3D 9102                  # where we listen for the director
>>   WorkingDirectory =3D /var/bacula
>>   Pid Directory =3D /var/run
>>   Maximum Concurrent Jobs =3D 20
>> }
>>
>>
>> ** A fd conf**
>> Director {
>>   Name =3D bacula-server-dir
>>   Address =3D 10.10.xxx.xxx
>>   Password =3D "password"
>> }
>>
>> FileDaemon {                          # this is me
>>   Name =3D pollux
>>   FDport =3D 9102                  # where we listen for the director
>>   WorkingDirectory =3D /var/bacula
>>   Pid Directory =3D /var/run
>>   Maximum Concurrent Jobs =3D 20
>> }
>>
>> ** Director conf**
>>
>> Director {                            # define myself
>>   Name =3D bacula-server-dir
>>   DIRport =3D 9101                # where we listen for UA connections
>>   QueryFile =3D "/etc/bacula/query.sql"
>>   WorkingDirectory =3D "/var/bacula"
>>   PidDirectory =3D "/var/run"
>>   Maximum Concurrent Jobs =3D 1
>>   Password =3D "password"         # Console password
>>   Messages =3D Daemon
>> }
>> Client {
>>   Name =3D thor
>>   Address =3D 10.15.xxx.xxx
>>    =20
>
> This is the client you are having trouble talking to.
>  =20
Yep, B client (thor) is my headache of the day
>  =20
>>   FDPort =3D 9102
>>   Catalog =3D MyCatalog
>>   Password =3D "password"          # password for FileDaemon
>>    =20
>
> Is this password the same as the one I pointed out above?
>  =20
The same, all passwords (DIR,SDs,monitors, FDs...) have the same=20
password by now.
>  =20
>>   File Retention =3D 30 days            # 30 days
>>   Job Retention =3D 6 months            # six months
>>   AutoPrune =3D yes                     # Prune expired Jobs/Files
>> }
>>
>> Client {
>>   Name =3D pollux
>>   Address =3D 10.20.xxx.xxx
>>   FDPort =3D 9102
>>   Catalog =3D MyCatalog
>>   Password =3D "password"          # password for FileDaemon
>>   File Retention =3D 30 days            # 30 days
>>   Job Retention =3D 6 months            # six months
>>   AutoPrune =3D yes                     # Prune expired Jobs/Files
>> }
>>    =20
>
>  =20