Re: Bacula Backup: "Encryption between Director and PostgreSQL Database Server" Possible?

Hello Stefan,

Am 20.05.2026 um 08:41 schrieb Stefan Harbich:
> Hello,
> is it possible to encrypt the data traffic between the Director and the
> PostgreSQL database server?

that should be possible, but it would only be useful (IMO) if the 
database is on a different host and accessed via network.

In that case, it's a matter of configuring server and client to use TLS 
or GSSAPI. The client would be the Director but as that uses the normal 
PostgreSQL client library, it makes the configuration rely on regular 
postgres client configuration on the DIR side. I would claim that 
everything that works using simple configuration and defaults works 
(which in most cases means you rely on your distro to ship reasonable 
default configurations) but it gets tricky if the Director would need 
interactive help when initializing its catalog connection (for example 
would need a password when using an encrypted client certificate).

As usual, there are many options available and I suspect most Bacula 
users run the catalog besides the DIR on the same host and do not even 
enable Postgresql's network listener, so this is rather rarely a concern.

If you just configure your server to require TLS, for example, you 
should quickly know for sure.


Cheers,

Arno


> Best regards, Stefan Harbich
> 
> 
> _______________________________________________
> Bacula-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/bacula-users

-- 
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



_______________________________________________
Bacula-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-users