>>>>> On Wed, 4 Apr 2012 16:59:58 +0200, Hugo Letemplier said: > > Hello, I have tested encryption/decryption on many bacula backups but > one job is tricky > > I have Linux, MacOSX and Windows 2003 servers > I have master.cert and one fd.pem for encryption on each client. > fd.pem is specific for each client > master.cert is on every client and allow to decrypt with the "secret" > master.pem in the case we loose the specific backup key. > > My bacula server is unable to restore 1 of my three Windows servers > using the master.pem keypair
Saying "unable to restore" is too vague -- what is the error message? > With bacula, I used an SQLQuery to check all the master.pem certificates. > > SELECT DISTINCT > path.path, > file.md5, > job.starttime, > client.name > FROM > public.client, > public.file, > public.filename, > public.path, > public.job > WHERE > client.clientid = job.clientid AND > file.jobid = job.jobid AND > file.filenameid = filename.filenameid AND > file.pathid = path.pathid AND > filename.name = 'master.cert' > ORDER BY file.md5,client.name,path.path,job.starttime > > Result shows me that md5 hash are different on different OS > ex 1 hash on all osx server, one hash on all linux server > > But on windows md5 are always different whatever is the machine ! That is probably OK. The backup on Windows will include various other data about the file which could vary between machines (assuming you didn't set portable=yes in the fileset). > 2 of my three windows machines uses the same bacula 5.0.3 binaries > downloaded from the bacula Repo Where did the third binary come from? Which one fails to restore? Is it definitely using the correct bacula-fd.conf? E.g. try temporarily deleting the master.pem file and see if the bacula-fd fails to start. __Martin ------------------------------------------------------------------------------ Better than sec? Nothing is better than sec when it comes to monitoring Big Data applications. Try Boundary one-second resolution app monitoring today. Free. http://p.sf.net/sfu/Boundary-dev2dev _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
