Hi, I was using samba backup offline, but seems that now is not working, a bug is reported. As a workaround I want to use online backup: sudo samba-tool domain backup online --targetdir=<output-dir> --server=<DC-server> -UAdministrator Asking password in interative mode works, but I need to automate to execute from crontab without asking pwd, how can I do this with security? Thanks
On 29/08/2019 13:23, Trenta sis via samba wrote:> Hi, > > I was using samba backup offline, but seems that now is not working, a > bug is reported. > > As a workaround I want to use online backup: > > sudo samba-tool domain backup online --targetdir=<output-dir> > --server=<DC-server> -UAdministrator > > Asking password in interative mode works, but I need to automate to > execute from crontab without asking pwd, how can I do this with > security? > > Thanks >I would have suggested using kerberos instead: samba-tool domain backup online --targetdir=<output-dir> --server=<DC-server> -k yes Only problem is, it doesn't work, you still get asked for Administrators password, this is from this line in domain_backup.py: ??????? smb_conn = smb_sysvol_conn(server, lp, creds) It looks like the kerberos credentials are not passed down the stack, to not get asked for the password, you have to use this: samba-tool domain backup online --targetdir=/root/ --server=dc4 -UAdministrator --password=xxxxxxxxxx Do you want to store 'Administrators'? password in a crontab ? Rowland
Hi, for security reasons we can't sotre pwd on crontab, any other option? My prefered is offline backup but also doesn't work... any other option? thanks Missatge de Trenta sis <trenta.sis at gmail.com> del dia dj., 29 d?ag. 2019 a les 14:23:> > Hi, > > I was using samba backup offline, but seems that now is not working, a > bug is reported. > > As a workaround I want to use online backup: > > sudo samba-tool domain backup online --targetdir=<output-dir> > --server=<DC-server> -UAdministrator > > Asking password in interative mode works, but I need to automate to > execute from crontab without asking pwd, how can I do this with > security? > > Thanks
On 29/08/2019 15:53, Trenta sis via samba wrote:> Hi, > > for security reasons we can't sotre pwd on crontab, any other option? > My prefered is offline backup but also doesn't work... any other option? >I didn't think you would want to store the Administrator password anywhere ;-) In my opinion, you have found a bug, you are being asked for a password to backup sysvol, even if you use kerberos, it works for everything else. Do you want to open a bug report ? Rowland
Correct with -k yes fails, and offline bug also has a bug opened pending to solve. It will be great to solve also online... Really is a issue for productions environments, no working secure backups with offline or online... How are users making backups with 4.10 ? thanks Missatge de Trenta sis <trenta.sis at gmail.com> del dia dj., 29 d?ag. 2019 a les 16:53:> > Hi, > > for security reasons we can't sotre pwd on crontab, any other option? > My prefered is offline backup but also doesn't work... any other option? > > thanks > > Missatge de Trenta sis <trenta.sis at gmail.com> del dia dj., 29 d?ag. > 2019 a les 14:23: > > > > Hi, > > > > I was using samba backup offline, but seems that now is not working, a > > bug is reported. > > > > As a workaround I want to use online backup: > > > > sudo samba-tool domain backup online --targetdir=<output-dir> > > --server=<DC-server> -UAdministrator > > > > Asking password in interative mode works, but I need to automate to > > execute from crontab without asking pwd, how can I do this with > > security? > > > > Thanks