In response to Mike <[EMAIL PROTECTED]>: > I have a possible situation at work where one user (I'll not > go into the details) needs to have all files from that > workstation encrypted before they get on the network and on > tape. Has there been a discussion, plan, or option I've overlooked > such that the bacula-fd.conf can contain a passphrase for > each file and when the files are read for sending to the > director and sd the files are encrypted and when files are > sent from the sd they are decrypted. > > What I'm thinking is the fd is the gateway to everything > else in bacula and that when a file goes out through the fd > the file is encrypted and when the file comes in through fd to > the workstation fd decrypts the file. The user on the workstation > always sees unencrypted files, regular data as if nothing > is different. Anybody sniffing on the network or finding > a random tape is able to see the files, but since the files > are encrypted the files and tape and anything on the network > is useless. > > If not discussed previously I'd like to see a parameter > for what encryption program to use (pgp, gpg, enigma, etc) > and a parameter for either a pass phrase, chat script, > or something similiar to be given. Maybe the program needs > two parameters, one for encryption and one for decryption.
Encryption is on the TODO list, but not available yet. I suggest you look at the larger problem, however. If the data on this machine needs to be encrypted before going to tape, shouldn't the data on the computer be protected from theft? If someone breaks in and steals that computer, you won't care about whether or not your backups are encrypted. Here, we have the critical stuff encrypted on-disk with pgp. The pgp encrypted folders show up as one big file, which can be backed up normally with Bacula. This protects against both situations. -- Bill Moran Collaborative Fusion Inc. ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
