On 24 Oct 2007 at 14:39, Simon Barrett wrote:

> On Tuesday 23 October 2007 14:52:21 Mateus Interciso wrote:
> > On Tue, 23 Oct 2007 14:44:15 +0100, Chris Howells wrote:
> > > Mateus Interciso wrote:
> > >> But on the bacula-dir.conf file, I do have setted up the bacula
> > >> password on the Catalog configuration, so why is he not even trying to
> > >> use it? The other backups run absolutly normal.
> > >
> > > You are running make_catalog_backup with the wrong arguments. This is
> > > configured via the RunBeforeJob line, not the catalog resource.
> > >
> > >  From 'make_catalog_backup' (which is a shell script).
> > >
> > > #  $1 is the name of the database to be backed up and the name #     of
> > > the output file (default = bacula). #  $2 is the user name with which to
> > > access the database #     (default = bacula).
> > > #  $3 is the password with which to access the database or "" if no
> > > password #     (default "")
> > >
> > >
> > > So you need a third argument which is the db password. Modify the
> > >
> > > RunBeforeJob = "make_catalog_backup bacula bacula" to read
> > >
> > > to read
> > >
> > > RunBeforeJob = "make_catalog_backup bacula bacula <dbpassword>"
> >
> > -------------------------------------------------------------------------
> >
> > Now it worked, thanks :D
> > I just wonder why it was working before, since the configuration files
> > are exactly the same, and the env is the same as well....
> 
> 
> On this matter; adding the password to the RunBeforeJob line causes my 
> database password to appear on the status emails:
> 
> 24-Oct 13:09 fs01-dir: BeforeJob: run command 
> "/etc/bacula/make_catalog_backup 
> bacula bacula MyPasswordHere"
> 
> Status emails are sent in clear text across our network.  Is there a 
> recommended solution to include sensitive variables in the config files 
> without exposing them like this?  

http://www.bacula.org/dev-manual/Catalog_Maintenance.html

Click on Security considerations


-- 
Dan Langille - http://www.langille.org/
Available for hire: http://www.freebsddiary.org/dan_langille.php



-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to