Re: Debian Buster, bsdtcp, systemd

Andreas Haumer <[email protected]>
Newsgroups gmane.comp.archivers.amanda.user
Organization xS+S
Message-ID <[email protected]>
Hi!

Am 22.07.21 um 13:31 schrieb Stefan G. Weichinger:
> 
> Trying to tune my new 10G NICs with amanda.
> 
> So I want to switch from "auth ssh" to "auth bsdtcp" and get stuck ...
> 
> Debian Buster doesn't bring systemd-units for amanda, right?
> 

Right.
Amanda client services are started by inetd on Debian Buster.
(One could probably write a systemd amanda-client unit quite easily, but so what...)

> I applied my own files now.
> 
> Edited hosts.allow
> 
> amservice succeeds.
> 
> amcheck not:
> 
> ERROR: backup: selfcheck request failed: ambind: bind failed A: Permission denied
> 
> what ...
> 
> 
> Does someone use current Debian w/ amanda and bsdtcp?
> 

Yes, some of our Amanda clients are Debian Buster based and they seem to behave fine.

On the backup server ("hegel") we have disklist entries like this (example for client "kant"):

kant.intern.xss.co.at / {
  user-tar
  auth "bsdtcp"
} -1 eth0


As mentioned above on the client ("kant") the amanda services are started via inetd.

So in /etc/inetd.conf we have the line:

amanda stream tcp nowait backup /usr/lib/amanda/amandad amandad -auth=bsdtcp amdump amindexd amidxtaped

(we don't use tcpd)


In /etc/amanda-security.conf we have the following lines uncommented:

runtar:gnutar_path=/usr/bin/tar
tcp_port_range=512,1024
udp_port_range=840,860

Permissions might be important:

root@kant:~# ll /etc/amanda-security.conf
-rw-r--r-- 1 root root 2036 Jan  3  2021 /etc/amanda-security.conf


Then there is /etc/amandahosts:

root@kant:~# ll /etc/amandahosts
-rw------- 1 backup backup 55 Jan  3  2021 /etc/amandahosts

In /etc/amandahosts we have:

localhost backup
hegel.intern.xss.co.at amanda amdump


Finally open up the relevant port on the firewall, if any.


That seems to be all we had to do to get the amanda client
up and running on Debian clients (I hope I didn't forget
something important...)

HTH

- andreas

-- 
Andreas Haumer
*x Software + Systeme              | mailto:[email protected]
Karmarschgasse 51/2/20             | http://www.xss.co.at/
A-1100 Vienna, Austria             | Tel: +43-1-6060114-0
OpenPGP_signature (application/pgp-signature, 203 B) - not displayed
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.