Re: Debian Buster, bsdtcp, systemd

Am 22.07.21 um 14:13 schrieb Andreas Haumer:
> Hi!
> 
> Am 22.07.21 um 13:31 schrieb Stefan G. Weichinger:
>>
>> Trying to tune my new 10G NICs with amanda.
>>
>> So I want to switch from "auth ssh" to "auth bsdtcp" and get stuck ...
>>
>> Debian Buster doesn't bring systemd-units for amanda, right?
>>
> 
> Right.
> Amanda client services are started by inetd on Debian Buster.
> (One could probably write a systemd amanda-client unit quite easily, but so what...)
> 
>> I applied my own files now.
>>
>> Edited hosts.allow
>>
>> amservice succeeds.
>>
>> amcheck not:
>>
>> ERROR: backup: selfcheck request failed: ambind: bind failed A: Permission denied
>>
>> what ...
>>
>>
>> Does someone use current Debian w/ amanda and bsdtcp?
>>
> 
> Yes, some of our Amanda clients are Debian Buster based and they seem to behave fine.
> 
> On the backup server ("hegel") we have disklist entries like this (example for client "kant"):
> 
> kant.intern.xss.co.at / {
>    user-tar
>    auth "bsdtcp"
> } -1 eth0
> 
> 
> As mentioned above on the client ("kant") the amanda services are started via inetd.
> 
> So in /etc/inetd.conf we have the line:
> 
> amanda stream tcp nowait backup /usr/lib/amanda/amandad amandad -auth=bsdtcp amdump amindexd amidxtaped
> 
> (we don't use tcpd)
> 
> 
> In /etc/amanda-security.conf we have the following lines uncommented:
> 
> runtar:gnutar_path=/usr/bin/tar
> tcp_port_range=512,1024
> udp_port_range=840,860
> 
> Permissions might be important:
> 
> root@kant:~# ll /etc/amanda-security.conf
> -rw-r--r-- 1 root root 2036 Jan  3  2021 /etc/amanda-security.conf
> 
> 
> Then there is /etc/amandahosts:
> 
> root@kant:~# ll /etc/amandahosts
> -rw------- 1 backup backup 55 Jan  3  2021 /etc/amandahosts
> 
> In /etc/amandahosts we have:
> 
> localhost backup
> hegel.intern.xss.co.at amanda amdump
> 
> 
> Finally open up the relevant port on the firewall, if any.
> 
> 
> That seems to be all we had to do to get the amanda client
> up and running on Debian clients (I hope I didn't forget
> something important...)

Andreas, ever thought of writing a small howto for the documentation?

A few years ago you could hope that it would be merged into the amanda 
sources ... now that the community project isn't maintained anymore, I 
would consider writing a blog post or so. I even have something in the 
pipeline already.

Jose told me he plans to write instructions for systemd + "auth ssh" for 
the upcoming debian bullseye packages (sorry, spoiler ;-)).

Did anyone ever benchmark bsdtcp against ssh?