Point 1 would be much better fixed by not touching RunBeforeJob definition, and instead creating ~bacula/.my.cnf file (with permissions only for user bacula to read it) and putting into it following text:
[client] user = bacula password = some_l33t_p455wd Otherwise (if original idea is followed) anybody doing "ps auxw" on the system while catalog backup is running will know the password (which kind of defeats the idea of having the password in the first place) -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

