It worked, thank you Marcin.

On 09/03/2023 19:13, Marcin Haba wrote:
Hello Adam,

Thanks for your detailed report.

Described behavior is not dangerous but I agree that it is not too natural. It will be fixed in the next release.

For now if you want you can try a patch. I am sending it in attachment. It should help for this problem.

Best regards,
Marcin Haba (gani)

On Tue, 7 Mar 2023 at 14:36, Adam Weremczuk <ad...@matrixscience.com <mailto:ad...@matrixscience.com>> wrote:

    Hi all,

    Bacula 9.6.7
    Baculum 9.6.6
    Debian 11.6

    It installed and configured fine:

    - Catalog API
    - Console API
    - Config API
    - Actions (start, stop restart Bacula services): skipped
    - Custom SSL cert added for ports 9095 and 9096

    Bacula and Bacula Web seem to be working fine (backups, restores, tape
    management, listings etc.).

    I've noticed though bursts of 8 x 401 errors
    /var/log/apache2/baculum-api-access.log happening every minute, e.g:

    192.168.x.x - - [06/Mar/2023:16:35:09 +0000] "GET
    /api/v1/pools?director=bacula-dir HTTP/1.1" 401 3597 "-" "-"
    192.168.x.x - - [06/Mar/2023:16:35:09 +0000] "GET
    /api/v1/jobs/totals?director=bacula-dir HTTP/1.1" 401 3597 "-" "-"
    192.168.x.x - - [06/Mar/2023:16:35:09 +0000] "GET
    /api/v1/dbsize?director=bacula-dir HTTP/1.1" 401 3597 "-" "-"
    192.168.x.x - - [06/Mar/2023:16:36:09 +0000] "GET
    /api/v1/jobs?director=bacula-dir HTTP/1.1" 401 3597 "-" "-"
    192.168.x.x - - [06/Mar/2023:16:36:09 +0000] "GET
    /api/v1/jobs/?jobstatus=CR&director=bacula-dir HTTP/1.1" 401 3597
    "-" "-"
    192.168.x.x - - [06/Mar/2023:16:36:09 +0000] "GET
    /api/v1/clients?director=bacula-dir HTTP/1.1" 401 3597 "-" "-"
    192.168.x.x - - [06/Mar/2023:16:36:09 +0000] "GET
    /api/v1/pools?director=bacula-dir HTTP/1.1" 401 3597 "-" "-"

    192.168.x.x is the IP of Bacula director.

    No clues in error logs from the same day:

    cat /var/log/apache2/error.log.1
    [Mon Mar 06 00:00:01.618268 2023] [mpm_prefork:notice] [pid 1881723]
    AH00163: Apache/2.4.54 (Debian) OpenSSL/1.1.1n configured -- resuming
    normal operations
    [Mon Mar 06 00:00:01.618291 2023] [core:notice] [pid 1881723] AH00094:
    Command line: '/usr/sbin/apache2'
    [Tue Mar 07 00:00:02.124967 2023] [mpm_prefork:notice] [pid 1881723]
    AH00171: Graceful restart requested, doing restart

    cat /var/log/apache2/baculum-api-error.log.1
    [Mon Mar 06 00:00:01.618032 2023] [ssl:warn] [pid 1881723] AH01909:
    localhost:443:0 server certificate does NOT include an ID which matches
    the server name

    cat /var/log/apache2/baculum-web-error.log.1
    [Mon Mar 06 00:00:01.617261 2023] [ssl:warn] [pid 1881723] AH01909:
    localhost:443:0 server certificate does NOT include an ID which matches
    the server name


    Daily AIDE log digest gives me this:

       --------------------- httpd Begin ------------------------

       64.55 MB transferred in 12133 responses  (1xx 0, 2xx 6639, 3xx 6,
    4xx
    5488, 5xx 0)
              7 Images (0.03 MB),
           3553 Content pages (15.71 MB),
           8573 Other (48.81 MB)

       Requests with error response codes
          400 Bad Request
             /: 2 Time(s)
          401 Unauthorized
             /api/v1/jobs/?jobstatus=CR&director=bacula-dir: 869 Time(s)
             /api/v1/clients?director=bacula-dir: 823 Time(s)
             /api/v1/jobs?director=bacula-dir: 817 Time(s)
             /api/v1/dbsize?director=bacula-dir: 812 Time(s)
             /api/v1/jobs/totals?director=bacula-dir: 812 Time(s)
             /api/v1/pools?director=bacula-dir: 812 Time(s)
             /api/v1/status/client/?name=client1-fd&type= ...
    ector=bacula-dir: 148 Time(s)
             /api/v1/clients/4?director=bacula-dir: 74 Time(s)
             /api/v1/jobs/?name=restore&limit=15000&director=bacula-dir: 50
    Time(s)
             /api/v1/joblog/64/?show_time=0&director=bacula-dir: 43 Time(s)
             /api/v1/jobs/64?director=bacula-dir: 42 Time(s)
             /api/v1/config?director=bacula-dir: 19 Time(s)
    (...)

    What authorization is missing and how to fix it?

    Regards,
    Adam


    _______________________________________________
    Bacula-users mailing list
    Bacula-users@lists.sourceforge.net
    <mailto:Bacula-users@lists.sourceforge.net>
    https://lists.sourceforge.net/lists/listinfo/bacula-users
    <https://lists.sourceforge.net/lists/listinfo/bacula-users>



--
"Greater love hath no man than this, that a man lay down his life for his friends." Jesus Christ

"Większej miłości nikt nie ma nad tę, jak gdy kto życie swoje kładzie za przyjaciół swoich." Jezus Chrystus


_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to