-users@lists.sourceforge.net
Subject: [Bacula-users] Encryption
** This is an external e-mail. Please treat attachments and links as
potentially dangerous. **
Anyone who has enabled data encryption for bacula backup:
Can you please explain how to set it up with AES256, looks like the default is
Anyone who has enabled data encryption for bacula backup:
Can you please explain how to set it up with AES256, looks like the default
is 128?
Thanks for your help.
___
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge
Hi,
I have been trying to set up encryption together with deduplication
(using base jobs), but I have not managed to get it working. Has anyone
managed to do it? Is there a reason it should fail if the different
clients using the same base job use the same encryption keys?
Our systems are run
Hi,
we are interested in setting up encryption together with deduplication
(using base jobs), but I was wondering whether this is possible at all.
Would it work if the different clients using the same base job use the
same encryption keys?
Our systems are running bacula 5.2.13.
Best regards,
You can try to run dsemon in debig mode. For exmaple
C:\Program Files\Bacula\bacula-fd.exe -d100 -c C:\Program
Files\Bacula\bacula-fd.conf
Then check trace file stored in C:\Program
Files\Bacula\temp\.trace
On 12/11/2013 05:34 PM, Pete Howell wrote:
> Unfortunately, this resulted in no change. T
Unfortunately, this resulted in no change. The service just crashes
without outputting anything in the event log. I would expect more from
commercial grade software. Even if the options are not valid, the
software should log an error in the application event log and shutdown
gracefully -- no
Try to use double backslash
PKI Keypair = "C:\\keys\\it2.pem"# Public and Private Keys
PKI Master Key = "C:\\keys\\master.cert"# ONLY the Public Key
and check permissions on these two files
On 12/09/2013 09:54 PM, Pete Howell wrote:
> We utilize v5.2.5 on all of our Unix server and
We utilize v5.2.5 on all of our Unix server and have purchased licenses
for the Enterprise (v6) software to run on our Windows clients; however,
these binaries came with no instructions. We use the following
encryption options on all our Unix clients without problems:
PKI Signatures = Yes
Zitat von Phil Stracchino :
> On 08/22/12 11:18, lst_ho...@kwsoft.de wrote:
>> Zitat von lst_ho...@kwsoft.de:
>>> according to the manual client based software compression is not
>>> useful when using tape drives with builtin compression like LTO. Is
>>> this still true when using data encryption
On 08/22/12 11:18, lst_ho...@kwsoft.de wrote:
> Zitat von lst_ho...@kwsoft.de:
>> according to the manual client based software compression is not
>> useful when using tape drives with builtin compression like LTO. Is
>> this still true when using data encryption? With this the encrypted
>> data ar
Zitat von lst_ho...@kwsoft.de:
> Hello
>
> according to the manual client based software compression is not
> useful when using tape drives with builtin compression like LTO. Is
> this still true when using data encryption? With this the encrypted
> data are normally not really compresable anymor
Hello
according to the manual client based software compression is not
useful when using tape drives with builtin compression like LTO. Is
this still true when using data encryption? With this the encrypted
data are normally not really compresable anymore but a compression on
the client be
Got it figured out. I'll post what I did just in case anyone goes looking for
it.
On my windows client I added the bold part to c:\Program
Files\Bacula\bacula-fd.conf
#
# Default Bacula File Daemon Configuration file
#
# For Bacula release 5.2.3 (12/16/11) -- Windows MinGW32
#
# There is no
I was following
http://www.bacula.org/en/dev-manual/main/main/Data_Encryption.html and am a
little confused.
I am a Linux noob. I have got Bacula up and running, everything tweaked and
going smooth. I am now being told that we need to encrypt one of my client
machine's data during the backup.
Hi Jon,
2011/10/11 Jon Schewe
> Is there any reason (besides good security) that I can't use the same
> private key for all bacula clients? Can I use the same pem file as well?
>
> Jon
>
>
Works fine for me here... I'm not trying to protect my machines' data from
each other, only to ensure it's
Is there any reason (besides good security) that I can't use the same
private key for all bacula clients? Can I use the same pem file as well?
Jon
--
All the data continuously generated in your IT infrastructure contains a
2011/6/9 Ansgar Konermann
> Am 09.06.2011 19:57, schrieb Steve Ellis:
>
> I do know that encryption runs on the client and, I believe, is
> single-threaded
>
> Not sure if it's actually "single-threaded", but I can say for sure that it
> does not make full use of all cores of a multi-core proces
Am 09.06.2011 19:57, schrieb Steve Ellis:
> I do know that encryption runs on the client and, I believe, is
> single-threaded
Not sure if it's actually "single-threaded", but I can say for sure that
it does not make full use of all cores of a multi-core processor.
Regards
Ansgar
Alan-
I've actually not used encryption, but certainly encryption will mean
that you will get no benefit from whatever compression your tape
hardware may be capable of--possibly doubling backup time right there,
if you were able to keep your tape drive writing at full speed. I do
know that e
UNCLASSIFIED
Hi Everybody,
I've just setup encryption on our bacula backup using the explaination
in chapter 39 of the Bacula manual - it has blown out our backup time
from overnight to 3 days ? Is this normal ? Is there any way to get the
time down? It is only backing up 1.5Tb onto a tape lib
Does anybody know what happens if the generated encryption key pair expires?
Will I be able to restore encrypted backups?
openssl genrsa -out master.key 2048
openssl req -new -key master.key -x509 -out master.cert -days 1
openssl genrsa -out fd-test.key 2048
openssl req -new -key fd-test.key -
On 03/31/10 10:39, Josh Fisher wrote:
> On 3/30/2010 5:44 PM, William Taylor wrote:
>
>> Before enabling encryption we were getting 118 - 120 MBs throughput to our
>> LTO-4 tape drive.
>> With encryption turned on we get 38-39MBs throughput. bacula process is at
>> 98 - 100 % cpu while runnin
On 3/30/2010 5:44 PM, William Taylor wrote:
> Before enabling encryption we were getting 118 - 120 MBs throughput to our
> LTO-4 tape drive.
> With encryption turned on we get 38-39MBs throughput. bacula process is at 98
> - 100 % cpu while running.
> I tried cutting the key size down to 472bits
Before enabling encryption we were getting 118 - 120 MBs throughput to our
LTO-4 tape drive.
With encryption turned on we get 38-39MBs throughput. bacula process is at 98 -
100 % cpu while running.
I tried cutting the key size down to 472bits from 2048bits but it didn't make a
difference.
The ma
why does an unencrypted backup set
> restore fine on a live system when an encrypted one does not?
>
> Regards,
>
> James
>
> -Original Message-
> From: Martin Simmons [mailto:mar...@lispworks.com]
> Sent: 16 February 2010 19:38
> To: bacula-users@lists
To: bacula-users@lists.sourceforge.net
Subject: Re: [Bacula-users] Encryption Problems
See http://www.bacula.org/en/?page=bugs
>>>>> On Tue, 16 Feb 2010 15:37:20 -, Beck J Mr said:
>
> How do I go about submitting a bug?
>
> -Original Message-
> F
ary 2010 11:56
> To: bacula-users@lists.sourceforge.net
> Subject: Re: [Bacula-users] Encryption Problems
>
> After some extra testing I am able to restore the encrypted backup if I
> restore to a different location (i.e. C:/restore). I have also
> successfully restored a single folder - Program Fi
How do I go about submitting a bug?
-Original Message-
From: Beck J Mr [mailto:james.b...@shunsley.eril.net]
Sent: 16 February 2010 11:56
To: bacula-users@lists.sourceforge.net
Subject: Re: [Bacula-users] Encryption Problems
After some extra testing I am able to restore the encrypted
in Simmons [mailto:mar...@lispworks.com]
Sent: 15 February 2010 21:54
To: bacula-users@lists.sourceforge.net
Subject: Re: [Bacula-users] Encryption Problems
>>>>> On Mon, 15 Feb 2010 13:04:25 -, Beck J Mr said:
>
> Hi,
>
> I am currently in the process of testi
> On Mon, 15 Feb 2010 13:04:25 -, Beck J Mr said:
>
> Hi,
>
> I am currently in the process of testing bacula and I have come across a
> stumbling block when restoring an encrypted backup.
>
> I get the following error for most - but not all - files:
> Error:/home/kern/bacula/k/src
Hi,
I am currently in the process of testing bacula and I have come across a
stumbling block when restoring an encrypted backup.
I get the following error for most - but not all - files:
Error:/home/kern/bacula/k/src/filed/restore.c:433 Unexpected
cryptographic session data stream.
Resto
> On Tue, 26 Jan 2010 09:25:27 +, Conor O'Callaghan said:
>
> Sorry by master I meant the bacula director, when I look at the files there,
> they seem encrypted, I can see other files from systems which don't use PKI.
>
>
> Right, now that I do a stop/start on the bacula-fd ( client ) ra
Sorry by master I meant the bacula director, when I look at the files there,
they seem encrypted, I can see other files from systems which don't use PKI.
Right, now that I do a stop/start on the bacula-fd ( client ) rather than a
restart, I see the error when trying to recover the file, which is
> On Mon, 25 Jan 2010 09:26:53 +, Conor O'Callaghan said:
>
> 2010/1/22 Martin Simmons
>
> > > On Fri, 22 Jan 2010 10:31:39 +, Conor O'Callaghan said:
> > >
> > > 2010/1/21 Martin Simmons
> > >
> > > > > On Wed, 20 Jan 2010 17:23:34 +, Conor O'Callaghan said:
> > > > >
>
2010/1/22 Martin Simmons
> > On Fri, 22 Jan 2010 10:31:39 +, Conor O'Callaghan said:
> >
> > 2010/1/21 Martin Simmons
> >
> > > > On Wed, 20 Jan 2010 17:23:34 +, Conor O'Callaghan said:
> > > >
> > > > Hi everyone,
> > > >
> > > > Client/Server both 3.02 on linux x64
> > > >
> >
2010/1/21 Martin Simmons
> > On Wed, 20 Jan 2010 17:23:34 +, Conor O'Callaghan said:
> >
> > Hi everyone,
> >
> > Client/Server both 3.02 on linux x64
> >
> > I have made some encrypted backups from my client, I can successfully
> > recover from the backup using bconsole. When I try to si
> On Fri, 22 Jan 2010 10:31:39 +, Conor O'Callaghan said:
>
> 2010/1/21 Martin Simmons
>
> > > On Wed, 20 Jan 2010 17:23:34 +, Conor O'Callaghan said:
> > >
> > > Hi everyone,
> > >
> > > Client/Server both 3.02 on linux x64
> > >
> > > I have made some encrypted backups from my
> On Wed, 20 Jan 2010 17:23:34 +, Conor O'Callaghan said:
>
> Hi everyone,
>
> Client/Server both 3.02 on linux x64
>
> I have made some encrypted backups from my client, I can successfully
> recover from the backup using bconsole. When I try to simulate a machine
> crash, by using anoth
Hi everyone,
Client/Server both 3.02 on linux x64
I have made some encrypted backups from my client, I can successfully
recover from the backup using bconsole. When I try to simulate a machine
crash, by using another machine with the keys and config from the original
client, I get the following e
Matt Richards wrote:
> I currently have bacula setup to backup to disk volumes that reside on
> encrypted file systems.
>
> I have just added a tape drive on another SD and would like the data
> on the tapes to be encrypted.
>
> Is this possible without using encryption from the FD?
>
>
My solu
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello,
I currently have bacula setup to backup to disk volumes that reside on
encrypted file systems.
I have just added a tape drive on another SD and would like the data
on the tapes to be encrypted.
Is this possible without using encryption from
Cedric Tefft wrote:
> Markus Falb wrote:
>> Eric Böse-Wolf wrote:
>>
>>
>>> Vladimir Doisan writes:
>>>
>>>
If you turn TLS and file encryption - the data will be double
encrypted
>>> If I only turn on file encryption, then the data goes encrypted over
>>> the
>>> wir
Markus Falb wrote:
> Eric Böse-Wolf wrote:
>
>
>> Vladimir Doisan writes:
>>
>>
>>> If you turn TLS and file encryption - the data will be double encrypted
>>>
>> If I only turn on file encryption, then the data goes encrypted over the
>> wire or the air, but what is not encrypted?
Eric Böse-Wolf wrote:
> Vladimir Doisan writes:
>
>> If you turn TLS and file encryption - the data will be double encrypted
>
> If I only turn on file encryption, then the data goes encrypted over the
> wire or the air, but what is not encrypted?
>
> For example what's with the connection coo
Andrey Dmitriev wrote:
> Dear list,
>
> 1)
> It was shared with me that bacula encrypts 'per client' not 'per job'.
> We first backup data to disk, and then to tape. We don't really need to
> encrypt to disk, but would like to do so to tape, is there a workaround?
> 2) do any HW crypto acceleratoi
Dear list,
1)
It was shared with me that bacula encrypts 'per client' not 'per job'.
We first backup data to disk, and then to tape. We don't really need to
encrypt to disk, but would like to do so to tape, is there a workaround?
2) do any HW crypto acceleratoin PCI cards work with Bacula, and ca
> Currently I do gpg encryption and upload it to amazon s3 but only on
> the files that are "Static archives" aka after x amount of time they
> do not change but we need a copy of them.
>
> http://lucasmanual.com/mywiki/Bacula#head-53a198d817eca824a1d8ecb3f86c5662303fd668
>
> I would be intereste
On Mon, Mar 16, 2009 at 10:41 AM, Kevin Keane wrote:
> First, a word of caution: I did this when I still used tar for backups.
> Eventually I had to revert to unencrypted backups because the backup was
> horrendously slow. Eliminating the GPG encryption sped up a full backup
> of my server from 3
GPG directly to Bacula tapes? - Can't do.
Default encryption module that is already included with Bacula using
OpenSSL with certificates works just fine.
If using GPG is a requirement:
1. Backup to a file based volume
2. Encrypt backup volume with GPG
3. Write backup.gpg to the tape (tar or bacula
First, a word of caution: I did this when I still used tar for backups.
Eventually I had to revert to unencrypted backups because the backup was
horrendously slow. Eliminating the GPG encryption sped up a full backup
of my server from 3 days to an hour or two. BTW, part of the slowdown is
due t
Hi All,
Has anyone tried GPG encrypted backup on tapes?
If yes, can you please point me to some documentation.
GPG encryption works fine on my server, just want to embed it in bacula,
and encrypt the files for offisite storage,
Kind regards,
Prashant
-
Landon Fuller wrote:
>
> On Dec 12, 2007, at 02:58, Dimitrios wrote:
>
>> When a job ends, it sends me a report via email and in that report it
>> contains:
>> Encryption: no
>>
>> I'm using TLS encryption in all places (DIR, FD, SD, etc), but the
>> above suggests that nothing is encrypted.
>>
Daniel Haas wrote:
> Hi,
>
> I am working with Bacula 2.2.5 on Debian Etch.
>
> At the moment I test the "Worst Case":
> I archive all data (Full Backup) to an usb-disk every month.
> If I want to make a restore from this archive, I use the bacula utility
> bextract. This is working fine
> But
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Daniel Haas wrote:
> Hi,
>
> I am working with Bacula 2.2.5 on Debian Etch.
>
> At the moment I test the "Worst Case":
> I archive all data (Full Backup) to an usb-disk every month.
> If I want to make a restore from this archive, I use the bacula u
Hi,
I am working with Bacula 2.2.5 on Debian Etch.
At the moment I test the "Worst Case":
I archive all data (Full Backup) to an usb-disk every month.
If I want to make a restore from this archive, I use the bacula utility
bextract. This is working fine
But now I want to encrypt the usb-disk. T
Hi,
I am new to bacula. I am able to create a backup on tape of a specified
File path, and I can restore it.
I dropped all tables and re-created them, and now I want to encrypt the
data in the backup. For this, I did the following:
in bacula-fd.conf:
FileDaemon {
Name = host11-fd
FDport = 9
On Wed, 12 Dec 2007 11:34:16 -0800 Landon Fuller <[EMAIL PROTECTED]> wrote:
> Right -- the transport is encrypted, but the storage is not. It would
> be clearer if it read "Storage Encryption".
aaah ok, good to know
thank you!
--
On Dec 12, 2007, at 02:58, Dimitrios wrote:
When a job ends, it sends me a report via email and in that report
it contains:
Encryption: no
I'm using TLS encryption in all places (DIR, FD, SD, etc), but the
above suggests that nothing is encrypted.
Or am i wrong, and my transportation/com
When a job ends, it sends me a report via email and in that report it contains:
Encryption: no
I'm using TLS encryption in all places (DIR, FD, SD, etc), but the above
suggests that nothing is encrypted.
Or am i wrong, and my transportation/communication is indeed encrypted, but not
the actual
If you turn on FILE encryption - the data will be encrypted on the tape
and on the network.
If you turn on TLS encryption - the data will be encrypted on the
network but NOT on the tape.
If you turn both options "on" the essentially data will be encrypted
twice on the "network" and once on the tape
On 2007.10.30. 13:21, Eric Böse-Wolf wrote:
> I did a few test and maybe someone is interested in the results.
>
> I did a backup of the linux kernel documentation, quite a lot of
> text ("du -sh ." gives 22M in the directory), under different
> conditions, each of those backups I wrote to a new f
I did a few test and maybe someone is interested in the results.
I did a backup of the linux kernel documentation, quite a lot of
text ("du -sh ." gives 22M in the directory), under different
conditions, each of those backups I wrote to a new file volume and
here are the sizes of the file volumes:
Vladimir Doisan <[EMAIL PROTECTED]> writes:
> If you turn TLS and file encryption - the data will be double encrypted
If I only turn on file encryption, then the data goes encrypted over the
wire or the air, but what is not encrypted?
For example what's with the connection cookie the director pr
If you turn TLS and file encryption - the data will be double encrypted
Arno Lehmann wrote:
> Hi,
>
> 26.10.2007 10:52,, Eric Böse-Wolf wrote::
>> Hello Bacula Users,
>>
>> I want to do encrypted backups and asked myself wether it
>> makes sense to turn off the hardware compression of the
>> ta
Hi,
26.10.2007 10:52,, Eric Böse-Wolf wrote::
> Hello Bacula Users,
>
> I want to do encrypted backups and asked myself wether it
> makes sense to turn off the hardware compression of the
> tape drive.
>
> AFAIK does encryption do some kind of compression (the entropy
> of the messages is sig
Hello Bacula Users,
I want to do encrypted backups and asked myself wether it
makes sense to turn off the hardware compression of the
tape drive.
AFAIK does encryption do some kind of compression (the entropy
of the messages is significantly reduced) and so an additional
hardware compression c
PROTECTED]; 'Landon Fuller';
bacula-users@lists.sourceforge.net
Subject: Re: [Bacula-users] Encryption/Compression Conflict in CVS
> Landon,
>
> I've changed the code so that the encryption code prefixes the data block
> with a block length prior to encryption.
>
>
that is also used
for sparse file length.
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Landon
> Fuller
> Sent: Wednesday, November 01, 2006 7:08 PM
> To: Michael Brennen
> Cc: bacula-users@lists.sourceforge.net
> Subje
On Nov 1, 2006, at 23:25, Michael Brennen wrote:
On Wed, 1 Nov 2006, Robert Nelson wrote:
On top of the issue with the reversed processing during restore
that I
previously mentioned, there is a fundamental flaw in the
processing of
compressed+gzipped data. The problem is that boundaries a
On Nov 2, 2006, at 13:22, Robert Nelson wrote:
The problem is that currently there are three filters defined:
compression,
encryption, and sparse file handling. The current implementation of
compression and sparse file handling both require block boundary
preservation. Even if zlib streamin
On Nov 2, 2006, at 08:30, Robert Nelson wrote:
Landon,
I've changed the code so that the encryption code prefixes the data
block
with a block length prior to encryption.
The decryption code accumulates data until a full data block is
decrypted
before passing it along to the decompressio
eforge.net
Subject: Re: [Bacula-users] Encryption/Compression Conflict in CVS
On Nov 2, 2006, at 13:22, Robert Nelson wrote:
> The problem is that currently there are three filters defined:
> compression,
> encryption, and sparse file handling. The current implementation of
> compr
explore a whole section of the
Bacula code I hadn't played with before. :-).
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Landon
Fuller
Sent: Wednesday, November 01, 2006 7:08 PM
To: Michael Brennen
Cc: bacula-users@lists.sourceforge.net
Subjec
Hi,
On 11/2/2006 12:20 PM, Alan Brown wrote:
> On Wed, 1 Nov 2006, Arno Lehmann wrote:
>
>
>>>Not if compression happens prior to encryption. :)
>>
>>Theoretically - yes, but I'm quite sure that encryption usually also
>>compresses data.
>
>
> If the encryption routines also contain compressio
file handling would be broken.
-Original Message-
From: Landon Fuller [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 02, 2006 11:06 AM
To: Robert Nelson
Cc: 'Michael Brennen'; [EMAIL PROTECTED];
bacula-users@lists.sourceforge.net
Subject: Re: [Bacula-users] Encryption/C
On Thursday 02 November 2006 10:30, Robert Nelson wrote:
> The code now works for all four scenarios with encryption and compression:
> none, encryption, compression, and encryption + compression. Unfortunately
> the code is no longer compatible for previously encrypted backups.
Excellent. Is t
app itself)?
-Original Message-
From: Robert Nelson <[EMAIL PROTECTED]>
Subj: Re: [Bacula-users] Encryption/Compression Conflict in CVS
Date: Thu Nov 2, 2006 11:30 am
Size: 2K
To: 'Landon Fuller' <[EMAIL PROTECTED]>, 'Michael Brennen' <[EMAIL PRO
eforge.net
Subject: Re: [Bacula-users] Encryption/Compression Conflict in CVS
On Nov 1, 2006, at 2:20 PM, Michael Brennen wrote:
> On Wednesday 01 November 2006 15:33, Arno Lehmann wrote:
>
>>>> This sounds like compression should be automatically disabled when
>>>> encryp
On Wed, 1 Nov 2006, Arno Lehmann wrote:
>> Not if compression happens prior to encryption. :)
>
> Theoretically - yes, but I'm quite sure that encryption usually also
> compresses data.
If the encryption routines also contain compression routines.
> This is completely unverified and refers to en
On Wed, 1 Nov 2006, Robert Nelson wrote:
> On top of the issue with the reversed processing during restore that I
> previously mentioned, there is a fundamental flaw in the processing of
> compressed+gzipped data. The problem is that boundaries aren't preserved
> across encrypt/decrypt.
>
> What
ailto:[EMAIL PROTECTED] On Behalf Of Landon
Fuller
Sent: Wednesday, November 01, 2006 7:08 PM
To: Michael Brennen
Cc: bacula-users@lists.sourceforge.net
Subject: Re: [Bacula-users] Encryption/Compression Conflict in CVS
On Nov 1, 2006, at 2:20 PM, Michael Brennen wrote:
> On Wednesday 01 Novem
On Nov 1, 2006, at 2:20 PM, Michael Brennen wrote:
On Wednesday 01 November 2006 15:33, Arno Lehmann wrote:
This sounds like compression should be automatically disabled when
encrypton is enabled. Should be useless anyway as encrypted data
should
no longer be compressible.
Not if compres
On Wed, 1 Nov 2006, Landon Fuller wrote:
>> Landon, what is your take on this? Since you wrote the code you
>> seem to be the best source on whether the openssl functions you
>> are using compress data.
>
> The encryption does not include compression -- It made more sense
> to piggyback on the
On Wednesday 01 November 2006 15:33, Arno Lehmann wrote:
> >>This sounds like compression should be automatically disabled when
> >>encrypton is enabled. Should be useless anyway as encrypted data should
> >>no longer be compressible.
> >
> > Not if compression happens prior to encryption. :)
>
>
Hi,
On 11/1/2006 6:00 PM, Michael Brennen wrote:
> On Wednesday 01 November 2006 05:43, Arno Lehmann wrote:
>
>
>>>So... in my testing the combination of encryption and compression is
>>>either not writing files correctly to tape (in which case there is a
>>>lot of tape space taken up needlessly
ednesday, November 01, 2006 3:43 AM
> To: bacula-users@lists.sourceforge.net
> Subject: Re: [Bacula-users] Encryption/Compression Conflict in CVS
>
> Hi,
>
> On 11/1/2006 5:43 AM, Michael Brennen wrote:
> > I posted a couple of days ago that restoring files from 1.39
On Wednesday 01 November 2006 05:43, Arno Lehmann wrote:
> > So... in my testing the combination of encryption and compression is
> > either not writing files correctly to tape (in which case there is a
> > lot of tape space taken up needlessly :) or the files are being
> > corrupted in the restor
PROTECTED] On Behalf Of Arno
Lehmann
Sent: Wednesday, November 01, 2006 3:43 AM
To: bacula-users@lists.sourceforge.net
Subject: Re: [Bacula-users] Encryption/Compression Conflict in CVS
Hi,
On 11/1/2006 5:43 AM, Michael Brennen wrote:
> I posted a couple of days ago that restoring files from 1.3
Hi,
On 11/1/2006 5:43 AM, Michael Brennen wrote:
> I posted a couple of days ago that restoring files from 1.39.27
> (current CVS) with both encryption and compression turned on
> resulted in 0 length files being restored.
>
> I was able to test that further tonight by archiving and restoring a
I posted a couple of days ago that restoring files from 1.39.27
(current CVS) with both encryption and compression turned on
resulted in 0 length files being restored.
I was able to test that further tonight by archiving and restoring a
file in the 4 combinations of encryption/compression off/
On Sun, 16 Apr 2006, Kern Sibbald wrote:
I could imagine three good reasons for this:
1. You want *all* data to be encrypted and you don't want to worry about
setting up the encryption in every Client. I.e. it is one point of control
for encryption.
IE: when tapes are taken offsite for stor
* Michel Meyers schrieb am 15.04.06 um 19:44 Uhr:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Francisco Reyes wrote:
> >Reading Bacula's current state I see under heading:
> >
> >Current Implementation Restrictions
> >+ Data encryption of the Volume contents.
> >
> >What does that mean?
On Monday 17 April 2006 00:01, Francisco Reyes wrote:
> Kern Sibbald writes:
> > 1. You want *all* data to be encrypted ...
> >
> >
> > 2. You want to control the encryption key(s) on a single machine (SD
> > encryption)...
>
> When the encryption on the SD is done, does that mean all the processin
Kern Sibbald writes:
1. You want *all* data to be encrypted ...
2. You want to control the encryption key(s) on a single machine (SD
encryption)...
When the encryption on the SD is done, does that mean all the processing
time will be spent on the SD side? couldn't that in theory create a
On Sunday 16 April 2006 21:16, Francisco Reyes wrote:
> Landon Fuller writes:
> > Using the code in CVS it is possible to encrypt data at the FD, prior to
> > being sent to the Storage Daemon.
>
> Thanks much for the info. Just trying to learn as much as I can both about
> the operational side as w
On Sunday 16 April 2006 20:45, Landon Fuller wrote:
> Francisco Reyes wrote:
> > Michel Meyers writes:
> >> Correct: There's encryption of the communication between the File Daemon
> >> and the Storage Daemon but no encryption of the data as it is written to
> >> tape/HDD/CD/DVD. That's still on th
Landon Fuller writes:
Using the code in CVS it is possible to encrypt data at the FD, prior to
being sent to the Storage Daemon.
Thanks much for the info. Just trying to learn as much as I can both about
the operational side as well as the concepts.
This FD encryption will be (as far as I
Francisco Reyes wrote:
> Michel Meyers writes:
>
>> Correct: There's encryption of the communication between the File Daemon
>> and the Storage Daemon but no encryption of the data as it is written to
>> tape/HDD/CD/DVD. That's still on the todo list.
>
> Ok. Thanks for explanation. Perhaps the d
Dominic Marks writes:
Bacula volumes on a encrypted device using the built in capabilities of
GEOM.
For the setup at work this is not much of an option. Specially that there
will be jobs running throughout the night. The encrypted partition will be
up at all times most likely so if the machi
Michel Meyers writes:
Correct: There's encryption of the communication between the File Daemon
and the Storage Daemon but no encryption of the data as it is written to
tape/HDD/CD/DVD. That's still on the todo list.
Ok. Thanks for explanation. Perhaps the doc could be updated to read
somethin
1 - 100 of 104 matches
Mail list logo
