Re: [Bacula-users] Copy SD to SD with data encryption

2014-06-09 Thread Josip Deanovic
Quoting message written on Monday 2014-06-09 09:04:42 by Josh Fisher: > These are two different things. If you only want to encrypt the data > transmission on the wire, then a tunnel can be used and there is no > need to use Bacula's PKI encryption. If you want the data encrypted on > the storage

[Bacula-users] encryption and deduplication?

2014-06-09 Thread Gonçal Badenes
Hi, I have been trying to set up encryption together with deduplication (using base jobs), but I have not managed to get it working. Has anyone managed to do it? Is there a reason it should fail if the different clients using the same base job use the same encryption keys? Our systems are run

Re: [Bacula-users] Copy SD to SD with data encryption

2014-06-09 Thread Josh Fisher
On 6/9/2014 6:53 AM, Josip Deanovic wrote: > Quoting message written on Monday 2014-06-09 12:26:45: >> Hello Josip, >> >> I am not sure it is possible to implement what you want. The PKI >> encryption is Client based, thus unless the real (or original) Client >> (FD) is involved, it is impossible

Re: [Bacula-users] Copy SD to SD with data encryption

2014-06-09 Thread Josip Deanovic
Quoting message written on Monday 2014-06-09 12:26:45: > Hello Josip, > > I am not sure it is possible to implement what you want. The PKI > encryption is Client based, thus unless the real (or original) Client > (FD) is involved, it is impossible to perform or change data encryption > in any way

Re: [Bacula-users] Copy SD to SD with data encryption

2014-06-09 Thread Kern Sibbald
Hello Josip, I am not sure it is possible to implement what you want. The PKI encryption is Client based, thus unless the real (or original) Client (FD) is involved, it is impossible to perform or change data encryption in any way. SD->SD transfers are only Copy and Migration jobs and not origin

Re: [Bacula-users] Question on - How to open old Volumes

2014-06-09 Thread Josip Deanovic
Quoting message written on Monday 2014-06-09 11:57:24 by Carlo Filippetto: > Hi to all, > I have several volumes made to save logs. I burn then on a BluRay to > archive it for more time than retention period. > > Now I have to open one of this volumes only to list the files inside > and see the da

[Bacula-users] Question on - How to open old Volumes

2014-06-09 Thread Carlo Filippetto
Hi to all, I have several volumes made to save logs. I burn then on a BluRay to archive it for more time than retention period. Now I have to open one of this volumes only to list the files inside and see the data of a specific file, to do it I have to recretare the volume in the DB or I can scan

Re: [Bacula-users] Starting again with my bacula config...

2014-06-09 Thread Steven Haigh
On 09/06/14 18:38, Kern Sibbald wrote: > > Hello, > > On 06/08/2014 12:09 PM, Steven Haigh wrote: >> I do believe this is one of the biggest shortcomings of Bacula... The >> fact it is job based vs file based removes a lot of flexibility. > > This difference with TSM, is in fact one of the great

Re: [Bacula-users] Starting again with my bacula config...

2014-06-09 Thread Kern Sibbald
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, On 06/08/2014 12:09 PM, Steven Haigh wrote: > I do believe this is one of the biggest shortcomings of Bacula... The > fact it is job based vs file based removes a lot of flexibility. This difference with TSM, is in fact one of the great accide

Re: [Bacula-users] Copy SD to SD with data encryption

2014-06-09 Thread Josip Deanovic
Quoting message written on Monday 2014-06-09 10:23:39 by Kern: > It is two independent jobs on the SD side: 1. A SD restore job sending > the data to what it thinks is a "FD" via a comm line. 2. A SD job > receiving the restore data by simulating a FD but instead of restoring > the data, it also a

Re: [Bacula-users] Copy SD to SD with data encryption

2014-06-09 Thread Kern Sibbald
Hello Josip, I answer below in-line ... On 06/08/2014 10:13 PM, Josip Deanovic wrote: > Quoting message written on Saturday 2014-06-07 13:22:33: >> Hello Josip, >> >> At the current time, only File daemon does encryption. So the answer to >> your question is: no we cannot do data encryption on S