>I'm new to bacula and would appreciate some advice on securing mysql with
>bacula. I have installed bacula-3.0.3 on Centos 5.4 with MySQL and all
>seems to be working well. My only concern is how to add password
>protection to the mysql database and not cause any of the bacula scripts
>to stop working.
In your director conf, there is a config section:
Catalog {
Name = MyCatalog
dbname = "bacula"; dbuser = "bacula"; dbpassword = ""
}
Add a password, and set that user in mysql with that password. You might
also limit the accessibility of the mysql database to "local" only.
Check mysql's docs for these procedures.
Now, you can add a user/pass prompt in the shell scripts that create
db's but I presume that's done.
Notice the catalogue job definition? It points to a Script:
RunScript {
RunsWhen = Before
# RunsOnClient = No
FailJobOnError = Yes
Command = "/usr/lib64/bacula/make_catalog_backup bacula bacula"
}
If you open this script, you'll see the input argument expectations.
Add your password at the end for example. Note the blurb on arg 3 as
it pertains to doing this a better way. The mysql End User Guidelines
for Password Security detail better approaches. The above should get
you going and allow you to test before you complicate it even more.
Document what you change.
hth,
jlc
------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
