Changesets: bareos2015

bareos-13.2 f91b67fb

2013-05-04 22:52

daniel


Committer: mvwieringen

Ported: N/A

Details Diff
opsi files for the opsi package management tool

Signed-off-by: Marco van Wieringen <marco.van.wieringen@bareos.com>
add - platforms/opsi/CLIENT_DATA/delsub3264.ins Diff File
add - platforms/opsi/CLIENT_DATA/logo.png Diff File
add - platforms/opsi/CLIENT_DATA/readme.txt Diff File
add - platforms/opsi/CLIENT_DATA/setup3264.ins Diff File
add - platforms/opsi/CLIENT_DATA/uninstall3264.ins Diff File
add - platforms/opsi/OPSI/control Diff File
add - platforms/opsi/OPSI/postinst Diff File
add - platforms/opsi/OPSI/preinst Diff File

bareos-13.2 3df2e10f

2013-05-04 22:52

mvwieringen

Ported: N/A

Details Diff
Add pretty print function for unsupported compression.
mod - src/filed/compression.c Diff File

bareos-13.2 39a6bc61

2013-05-04 22:52

mvwieringen

Ported: N/A

Details Diff
Fix windows compile problem.
mod - src/findlib/bfile.c Diff File

bareos-13.2 65ef5e14

2013-05-04 22:52

mvwieringen

Ported: N/A

Details Diff
Fix windows build.
mod - src/win32/lib/Makefile Diff File

bareos-13.2 87c19af5

2013-05-04 22:52

pstorz


Committer: mvwieringen

Ported: N/A

Details Diff
show OK instead of Yes/No if reinstalling

The messagebox for the "is already installed, please
reinstall first" shows now OK instead of YesNo.

Also added copyright header.

Fixes #70: Dialog of windows installer, if software is already installed should show "OK" instead of "yes/no"

Signed-off-by: Marco van Wieringen <marco.van.wieringen@bareos.com>
mod - platforms/win32/winbareos.nsi Diff File

bareos-13.2 05fdfc81

2013-05-04 22:52

mvwieringen

Ported: N/A

Details Diff
Tweak fix when no compression is enabled.
mod - src/filed/compression.c Diff File

bareos-13.2 34bead1c

2013-05-04 22:52

mvwieringen

Ported: N/A

Details Diff
Tweak fix compiler warning.
mod - src/stored/mac.c Diff File

bareos-13.2 6d0556b7

2013-05-04 22:52

mvwieringen

Ported: N/A

Details Diff
Tweak fix compiler warning.
mod - src/stored/dircmd.c Diff File

bareos-13.2 f0abdb86

2013-05-04 22:52

mvwieringen

Ported: N/A

Details Diff
Fix compile problem when no lzo2 enabled.
mod - src/filed/backup.c Diff File

bareos-13.2 aa205c5a

2013-05-04 22:52

mvwieringen

Ported: N/A

Details Diff
Tweak copyright.
mod - src/stored/sd_cmds.c Diff File

bareos-13.2 1c533386

2013-05-04 22:52

mvwieringen

Ported: N/A

Details Diff
Tweak fix compile error.
mod - src/qt-console/tray-monitor/authenticate.cpp Diff File

bareos-13.2 96a585f9

2013-05-04 22:52

joergs


Committer: mvwieringen

Ported: N/A

Details Diff
add missing directories

Signed-off-by: Marco van Wieringen <marco.van.wieringen@bareos.com>
mod - Makefile.in Diff File
mod - platforms/rpms/bareos.spec Diff File

bareos-13.2 f268ab8e

2013-05-04 22:52

mvwieringen

Ported: N/A

Details Diff
Rebuild configure and config.h.in
mod - autoconf/config.h.in Diff File
mod - configure Diff File

bareos-13.2 83c6f962

2013-05-04 22:51

mvwieringen

Ported: N/A

Details Diff
Allow BAREOS to interface to multiple crypto libs.

OPENSSL gives all kind of headaches as its not compatible to AGPLv3 and
as such you always need a linkage exception in your LICENSE. Allowing
to interface to GNUTLS (LGPL) or Mozilla NSS (MPL/GPL/LGPL) makes this
probem much easier to swallow. This is the first work to allow either
one of the following crypto/TLS frameworks:

- None
- OpenSSL
- GNUTLS
- Mozilla NSS

Also only link and include the crypto specific headers and libs in
the place that actually defines the abstraction layer and not all over
the code.
mod - autoconf/Make.common.in Diff File
mod - autoconf/configure.in Diff File
mod - src/console/Makefile.in Diff File
mod - src/console/console.c Diff File
mod - src/console/console_conf.c Diff File
mod - src/console/console_conf.h Diff File
mod - src/dird/Makefile.in Diff File
mod - src/dird/dird.c Diff File
mod - src/dird/dird_conf.c Diff File
mod - src/dird/dird_conf.h Diff File
mod - src/filed/Makefile.in Diff File
mod - src/filed/filed.c Diff File
mod - src/filed/filed_conf.c Diff File
mod - src/filed/filed_conf.h Diff File
mod - src/lib/Makefile.in Diff File
mod - src/lib/bnet.c Diff File
mod - src/lib/crypto.c Diff File
add - src/lib/crypto_gnutls.c Diff File
add - src/lib/crypto_none.c Diff File
add - src/lib/crypto_nss.c Diff File
add - src/lib/crypto_openssl.c Diff File
mod - src/lib/crypto_wrap.c Diff File
mod - src/lib/lib.h Diff File
rm - src/lib/openssl.c Diff File
rm - src/lib/openssl.h Diff File
mod - src/lib/passphrase.c Diff File
mod - src/lib/protos.h Diff File
add - src/lib/tls_gnutls.c Diff File
add - src/lib/tls_none.c Diff File
add - src/lib/tls_nss.c Diff File
mod - src/plugins/dir/Makefile.in Diff File
mod - src/plugins/fd/Makefile.in Diff File
mod - src/plugins/sd/Makefile.in Diff File
mod - src/qt-console/bat_conf.cpp Diff File
mod - src/qt-console/bat_conf.h Diff File
mod - src/qt-console/bcomm/dircomm.cpp Diff File
mod - src/stored/Makefile.in Diff File
mod - src/stored/stored.c Diff File
mod - src/stored/stored_conf.c Diff File
mod - src/stored/stored_conf.h Diff File
mod - src/tests/Makefile.in Diff File
mod - src/tools/Makefile.in Diff File

bareos-13.2 73927aa1

2013-05-04 22:48

mvwieringen

Ported: N/A

Details Diff
Encryption cipher is hardcoded

The crypto framework support multiple encryption ciphers but the code
hardcodes the cipher to AES128.

The crypto framework support the following ciphers:
- AES128
- AES192
- AES256
- BLOWFISH

openssl (< 1.0) also has support for the following block ciphers.
- CAMELLIA128
- CAMELLIA192
- CAMELLIA256

openssl (> 1.0) also has support for the following block ciphers.
- AES128HMACSHA1
- AES256HMACSHA1

Adding support for these extra block ciphers seems obvious e.g. set the
right NID and entry point to the cipher.

Fixes 0000046: Encryption cipher is hardcoded
Affected Issues
0000046
mod - src/filed/crypto.c Diff File
mod - src/filed/filed_conf.c Diff File
mod - src/filed/filed_conf.h Diff File
mod - src/lib/crypto.c Diff File
mod - src/lib/crypto.h Diff File
mod - src/stored/stored_conf.c Diff File

bareos-13.2 65e55e0a

2013-05-04 22:38

mvwieringen

Ported: N/A

Details Diff
Cleanup of compression framework

As part of the integration of the LZO2 compression a new set of data
streams was introduced. Each compression stream now starts with a
so called compression header which says what compression was used.
We should deprecate the old GZIP datastreams e.g. still allow them to
be restored but not use them from now on and implement GZIP compression
using the same compression header which will cleanup the code enormously
and as we are planning on adding additional compression methods it would
be nice if all compression uses the same coding style and we deprecate
the old and non flexible GZIP datastreams.

Fixes 0000034: Cleanup of compression framework
Affected Issues
0000034
mod - src/filed/backup.c Diff File
mod - src/filed/backup.h Diff File
mod - src/filed/compression.c Diff File
mod - src/findlib/attribs.c Diff File
mod - src/findlib/bfile.c Diff File
mod - src/findlib/protos.h Diff File
mod - src/include/jcr.h Diff File
mod - src/include/streams.h Diff File
mod - src/stored/bextract.c Diff File

bareos-13.2 edaf72d8

2013-05-04 22:37

mvwieringen

Ported: N/A

Details Diff
Initial working version of SD-SD replication.

This code implements the replication of data between two Storage Daemons
used by the migrate and copy jobs. This is an extenstion of the existing
migration and copy job functionality. The old code already could select
two different storage resources on two different Storage Daemons but it
would then only connect to the write storage and ask there for the read
storage which is ofcourse not known there. This code checks to see if
the read and write storage is located on diffferent Storage Daemons by
comparing the address, SDport and password of the remote storage daemon.

If it detects there are two Storage Daemons involved it will use the
new SD-SD communication protocol to perform a replicate of the data from
the read storage to the write storage.

This patch implements the following:
- Refactored code for authenticating a daemon, this was refactored so
that clients like the bconsole and qt-console from now on use the
now working authenticate_with_director method of the bsock class so
we don't duplicate code to much. Also the other authentication was
refactored as part of this overhaul of the authentication system.
There are now generic functions which allow to authenticate a certain
daemon and a specific authentication is implemented using these
functions. For the SD-SD authentication there is some extra code to be
able to have one storage daemon start the challenge and the let the
other response otherwise the authentication would never work as both
challenge each other at the same time.
- Refactored a lot of code to properly use a boolean when things are
a boolean and not polute the code with assigning true to an integer
variable. That by incident false is 0 and true is 1 doesn't mean
that you shouldn't just call a variable of the type bool and mix
and match integer and boolean all over the code. A lot done more
to come.
- Most protocol messages are now put into static char variables in the
code instead of defining them directly in the code call. This was done
in some parts of the code but not nearly enough this is a good step
in the right direction.
- You can bandwith limit your replication sessions in multiple ways.
- set a bandwidth limit in the migration/copy job
- set a bandwitdh limit for the writing SD in the SD definition
in the director config.
- set a bandwitdh limit for the reading SD in the SD definition
in the director config.
- set a bandwidth limit on the reading SD in the storage daemon config
- set a bandwidth limit on the writing SD in the storage daemon config
- change the bandwith via the console setbandwidth cmd.
- The already allocated mig_jcr for a migration and copy Job is used
to track the communication with the writing SD. The reading SD is
controlled via the normal jcr structure. For this to work the mig_jcr
is created without a so called Messages resource so when using the
mig_jcr for controlling the writing SD we don't get those nasty mail
and database logging as if the Job actually did run.
- A new SD-SD communication protocol is implemented and this can be
extended in the future to perform other SD-SD protocol features. For
now the generic listener of the SD will understand the following
incoming connections:
- FD - SD backup and restore sessions which start with the following
sequence: Hello Start Job <jobname>
- SD - SD replication of data which start with the following
sequence: Hello Start Storage Job <jobname>
- DIR - SD controlling sessions for controlling the SD from the
director.
- The old one Storage Daemon migrate and copy is still available and
when the director finds out both the read and write storage is one
the same SD it will use this optimized and fastest code path where
the SD reads the data and directly writes the data to other media
available to the same SD. SD-SD network replication is only used when
the two SDs are determined to be different this way we only use the
network when really neeeded and the one SD replication using internal
stuctures is way faster then any loopback network send protocol.
- Comments are fixed along the way.
- Parts of lib/message.c are reindented as it used the wrong indention
levels.

Fixes 0000007: Job migration/copy between different SDs
Affected Issues
0000007
mod - src/console/Makefile.in Diff File
rm - src/console/authenticate.c Diff File
mod - src/console/console.c Diff File
mod - src/dird/authenticate.c Diff File
mod - src/dird/backup.c Diff File
mod - src/dird/catreq.c Diff File
mod - src/dird/dird_conf.c Diff File
mod - src/dird/dird_conf.h Diff File
mod - src/dird/fd_cmds.c Diff File
mod - src/dird/getmsg.c Diff File
mod - src/dird/job.c Diff File
mod - src/dird/migrate.c Diff File
mod - src/dird/mountreq.c Diff File
mod - src/dird/msgchan.c Diff File
mod - src/dird/ndmp_dma.c Diff File
mod - src/dird/protos.h Diff File
mod - src/dird/restore.c Diff File
mod - src/dird/sd_cmds.c Diff File
mod - src/dird/ua_cmds.c Diff File
mod - src/dird/ua_status.c Diff File
mod - src/dird/vbackup.c Diff File
mod - src/dird/verify.c Diff File
mod - src/filed/accurate.c Diff File
mod - src/filed/authenticate.c Diff File
mod - src/filed/backup.c Diff File
mod - src/filed/filed.c Diff File
mod - src/filed/job.c Diff File
mod - src/filed/protos.h Diff File
mod - src/filed/restore.c Diff File
mod - src/filed/status.c Diff File
mod - src/filed/verify.c Diff File
mod - src/filed/verify_vol.c Diff File
mod - src/include/jcr.h Diff File
mod - src/lib/base64.c Diff File
mod - src/lib/bsock.c Diff File
mod - src/lib/bsock.h Diff File
mod - src/lib/cram-md5.c Diff File
mod - src/lib/message.c Diff File
mod - src/lib/message.h Diff File
mod - src/lib/protos.h Diff File
mod - src/lib/tls.c Diff File
mod - src/qt-console/bat.pro.in Diff File
mod - src/qt-console/bcomm/dircomm.cpp Diff File
mod - src/qt-console/bcomm/dircomm.h Diff File
rm - src/qt-console/bcomm/dircomm_auth.cpp Diff File
mod - src/stored/Makefile.in Diff File
mod - src/stored/acquire.c Diff File
mod - src/stored/append.c Diff File
mod - src/stored/askdir.c Diff File
mod - src/stored/authenticate.c Diff File
mod - src/stored/bcopy.c Diff File
mod - src/stored/bextract.c Diff File
mod - src/stored/bls.c Diff File
mod - src/stored/bscan.c Diff File
mod - src/stored/btape.c Diff File
mod - src/stored/dircmd.c Diff File
mod - src/stored/fd_cmds.c Diff File
mod - src/stored/job.c Diff File
mod - src/stored/mac.c Diff File
mod - src/stored/protos.h Diff File
mod - src/stored/read.c Diff File
mod - src/stored/record.h Diff File
mod - src/stored/reserve.c Diff File
add - src/stored/sd_cmds.c Diff File
mod - src/stored/status.c Diff File
mod - src/stored/stored.c Diff File
mod - src/stored/stored_conf.c Diff File
mod - src/stored/stored_conf.h Diff File
mod - src/stored/wait.c Diff File
mod - src/win32/console/Makefile Diff File
mod - src/win32/qt-console/bat.pro Diff File

bareos-13.2 581fdfc7

2013-05-04 22:34

mvwieringen

Ported: N/A

Details Diff
Implementation of an allowed job command keyword

Implement an allowed Job command keyword in the filed that sets which
of the different Job commands we should accept. Currently the filed
will execute any Job command unless people specify the -b or -r option
(backup only/restore only) which makes it a serious security concern by
much of the bigger customers security officers.

This new keyword implements a per director and a global list which is used
as a fallback when a specific one for a specific director is not configured.

We won't filter all the commands issued by the director only
the important ones. Things which we allow to be filtered are:

- backup
- restore
- verify
- estimate
- runscript

Fixes 0000032: Implementation of an allowed job command keyword
Affected Issues
0000032
mod - src/filed/filed_conf.c Diff File
mod - src/filed/filed_conf.h Diff File
mod - src/filed/job.c Diff File

bareos-13.2 a75ec62f

2013-05-04 22:34

mvwieringen

Ported: N/A

Details Diff
Implementation of an allowed scriptdir keyword

Implement an allowed scriptdir keyword in the filed that sets the
directories in which any runscript must be located so we can limit
the attack surface of the filedaemon.

Currently the filed will execute any script in any directory which
makes it a serious security concern by much of the bigger customers
security officers.

This new keyword implemented per director and a global one which is
used as a fallback when a specific one for a specific director is not
configured.

Fixes 0000031: Implementation of an allowed scriptdir keyword
Affected Issues
0000031
mod - src/filed/filed_conf.c Diff File
mod - src/filed/filed_conf.h Diff File
mod - src/filed/job.c Diff File
mod - src/lib/runscript.c Diff File
mod - src/lib/runscript.h Diff File

bareos-13.2 61f514ae

2013-05-04 22:34

mvwieringen

Ported: N/A

Details Diff
Allow cancel by JobId on storage daemon.

Sometimes the Director already removed the Job from its running queue
but the Storage daemon still thinks it doing a backup (or other Job)
and you cannot cancel the Job from within a console anymore. This piece
of code allows you to cancel a Storage Daemon Job by JobId. E.g. do
a status sd on the Storage Daemon make sure what Job you want to cancel
and issue a cancel storage=<Storage Daemon> Jobid=<JobId> This way you
can also remove a Job that blocks any other Jobs from running without
the need to restart the whole Storage Daemon.

Fixes 0000013: Allow cancel by JobId on storage daemon.
Affected Issues
0000013
mod - src/dird/protos.h Diff File
mod - src/dird/sd_cmds.c Diff File
mod - src/dird/ua_cmds.c Diff File
mod - src/stored/dircmd.c Diff File

bareos-13.2 fb305e0a

2013-05-04 22:34

mvwieringen

Ported: N/A

Details Diff
Tweak indent.
mod - src/dird/dird_conf.c Diff File

bareos-13.2 fa2238c8

2013-05-04 22:34

mvwieringen

Ported: N/A

Details Diff
Print BSR to memory buffer.

Print the BSR to a memory buffer and write that out in one go.
This allows you to use a printed BSR in any reporting.
mod - src/dird/bsr.c Diff File
mod - src/dird/protos.h Diff File

bareos-13.2 014f9260

2013-05-04 22:33

mvwieringen

Ported: N/A

Details Diff
Switch to new version number.

Start adding new features.
mod - debian/changelog Diff File
mod - platforms/deb/bareos-Debian_6.0.dsc Diff File
mod - platforms/deb/bareos-xUbuntu_12.04.dsc Diff File
mod - platforms/rpms/bareos.spec Diff File
mod - platforms/win32/winbareos-nsi.spec Diff File
mod - platforms/win32/winbareos32.spec Diff File
mod - platforms/win32/winbareos64.spec Diff File
mod - src/include/version.h Diff File

bareos-12.4 576963e4

2013-05-04 15:15

pstorz


Committer: mvwieringen

Ported: N/A

Details Diff
Status scheduler now shows disabled jobs

We now only display the Level= if a level really
is set in the run entry.

Also, we now print the year in the preview.

Signed-off-by: Marco van Wieringen <marco.van.wieringen@bareos.com>
mod - src/dird/ua_status.c Diff File
mod - src/lib/btime.c Diff File

bareos-12.4 2a880259

2013-05-04 15:15

mvwieringen

Ported: N/A

Details Diff
Tweaks.

Remove unused variable and only print newline when we realy printed
a triggered line.
mod - src/dird/ua_status.c Diff File
 First  Prev  1 2 3 ... 10 ... 20 ... 30 ... 40 ... 49 50 51 52 53 54 55 ... 57 58 59  Next  Last