How To:Set Up Amanda Communication Via SSH Tunnels: Difference between revisions

From wiki.zmanda.com
Jump to navigation Jump to search
No edit summary
 
(→‎Amanda 2.5.0: note about "the new way")
 
(9 intermediate revisions by 4 users not shown)
Line 1: Line 1:
{{How To Header}}
Amanda 2.5.0 provides ssh based authentication mechanism; see [[How To:Set up transport encryption with SSH]].  The technique in this article may still be useful for tunneling connections through restrictive firewalls, "jump hosts", and so on.


== Amanda 2.5.0 ==
== ssh tunnels ==
 
If user wants to set up ssh connection between amanda server and a specific client or use ssh for older versions
of Amanda, ssh tunnel between server and client has to be created.  
* Install and Configure ssh
 
* Check if ssh between the server and client as amanda user is working.


Amanda 2.5.0 provides ssh based authentication mechanism. To enable Amanda to use "ssh" for communication, "auth"
* Configure ssh to use DSA/RSA authentication. See [http://www-128.ibm.com/developerworks/linux/library/l-keyc.html ssh key generation and installation].
parameter in [[amanda.conf]] should be set to "SSH".


* Run the following command on the Amanda client, to create a ssh tunnel (stunnel command can be also used)


== ssh tunnels ==
# ssh -L 10080:<amanda server>:<port> 'sleep 100'


If user wants to set up ssh connection between amanda server and a specific client or use ssh for older versions
<port> should be the port used by amanda to backup the client.  
of Amanda, ssh tunnel between server and client has to be created.


Run the following command on the Amanda server, to create a ssh tunnel
*#Amanda uses a range of ports on the server. So, ssh tunnels to all ports will have to be created.
*#If amdump starts doing backup within 100 seconds, it will use the ssh tunnel. Increase the sleep time so that backup uses the ssh tunnel.


# ssh -L port:localhost:port dest
* ssh tunnel creation should be part for backup wrapper script. See [[Backup_client#pre_and_post-_backup_scripts_wrappers|Pre-backup wrapper script]] section

Latest revision as of 22:50, 31 May 2007

This article is a part of the How Tos collection.

Amanda 2.5.0 provides ssh based authentication mechanism; see How To:Set up transport encryption with SSH. The technique in this article may still be useful for tunneling connections through restrictive firewalls, "jump hosts", and so on.

ssh tunnels

If user wants to set up ssh connection between amanda server and a specific client or use ssh for older versions of Amanda, ssh tunnel between server and client has to be created.

  • Install and Configure ssh
  • Check if ssh between the server and client as amanda user is working.
  • Run the following command on the Amanda client, to create a ssh tunnel (stunnel command can be also used)
# ssh -L 10080:<amanda server>:<port> 'sleep 100'

<port> should be the port used by amanda to backup the client.
    1. Amanda uses a range of ports on the server. So, ssh tunnels to all ports will have to be created.
    2. If amdump starts doing backup within 100 seconds, it will use the ssh tunnel. Increase the sleep time so that backup uses the ssh tunnel.
Retrieved from ‘http://wiki.zmanda.com/index.php?title=How_To:Set_Up_Amanda_Communication_Via_SSH_Tunnels&oldid=4844’