Backup Central

It finally happened. My trusty old Toshiba Tecra completely lost it this morning - just a blinking amber on light, no screen, no prompt, no beeps. So I'm trying to pull the files off amanda and get them onto my other PC - a Dell - but I'm running into a problem. I have a feeling it's because I was encrypting the dumps on the clients. Any help appreciated!

I'm running Amanda 2.6.1p1 and I had three boxes

Amanda Server running Ubuntu 8.04
Toshiba Tecra running Ubuntu 9.10
Dell Inspiron running Ubuntu 9.10

My amanda.conf for the backups for the Toshiba are in laptops:


org "laptops" # your organization name for reports
mailto "mlb" # space separated list of operators at your site
dumpcycle 1 week # the number of days in the normal dump cycle
runspercycle 7          # the number of amdump runs in dumpcycle days
# (1 week * 5 amdump runs per week -- just weekdays)
tapecycle 14 tapes # the number of tapes in rotation
# 1 week (dumpcycle) times 5 tapes per week (just
# the weekdays) plus a few to handle errors that
# need amflush and so we do not overwrite the full
# backups performed at the beginning of the previous
# cycle
runtapes 1 # number of tapes to be used in a single run of amdump
tpchanger "chg-multi" # the tape-changer glue script
tapedev "S3:" # the no-rewind tape device to be used
device_property "S3_ACCESS_KEY" "Somestuff"
device_property "S3_SECRET_KEY" "Moresecretstuff"
changerfile "changer.conf"
#changerdev "/dev/sg1"
tapetype HARDDISK # what kind of tape it is (see tapetypes below)

holdingdisk hd1 {
    directory "/samba/smalldrive/dumps/laptops"
    use -1000Mb
}

holdingdisk hd2 {
    directory "/samba/bigdrive/dumps/laptops"
    use -1000 Mb
}

label_new_tapes "laptops-%%%%" # Enable auto labeling
labelstr "^laptops-[0-9][0-9]*$" # label constraint regex: all tapes must
match

dtimeout 1800 # number of idle seconds before a dump is aborted.
ctimeout 30 # maximum number of seconds that amcheck waits
# for each client host
etimeout 300 # number of seconds per filesystem for estimates.

define dumptype global {
        comment "Global definitions"
        auth "bsdtcp"
}

define dumptype gui-base {
        global
        program "GNUTAR"
        comment "gui base dumptype dumped with tar"
        compress none
        index yes
}


define tapetype HARDDISK {
    comment "Virtual Tapes"
    length 5000 mbytes
}


includefile "advanced.conf"
includefile "/var/lib/amanda/template.d/dumptypes"
includefile "tapetypes"

define dumptype encrypt-simple {
   root-tar
   encrypt client
   compress fast
   client_encrypt "/usr/sbin/amcryptsimple"
   client_decrypt_option "-d"
}
Here's my disklist


mlb-laptop.imparisystems.local /home/mlb/Documents encrypt-simple
mlb-laptop.imparisystems.local /home/mlb/ImpariSystems encrypt-simple
mlb-laptop.imparisystems.local /home/mlb/Desktop encrypt-simple
mlb-laptop.imparisystems.local /home/mlb/EC2 encrypt-simple
mlb-laptop.imparisystems.local /home/mlb/Photos encrypt-simple
mlb-laptop.imparisystems.local /home/mlb/Pictures encrypt-simple
mlb-laptop.imparisystems.local /home/mlb/.evolution encrypt-simple

So I try to get onto my Dell to recover the files from the Toshiba. On the Dell, I do the following:
sudo amrecover -C laptops
AMRECOVER Version 2.6.1p1. Contacting server on ubuntu.imparisystems.local ...
220 ubuntu AMANDA index server (2.6.1p1) ready.
Setting restore date to today (2010-03-11)
200 Working date set to 2010-03-11.
200 Config set to laptops.
501 Host mlb-dell is not in your disklist.
Trying host mlb-dell ...
501 Host mlb-dell is not in your disklist.
Trying host mlb-dell ...
501 Host mlb-dell is not in your disklist.
Use the sethost command to choose a host to recover
amrecover> sethost mlb-laptop
501 Host mlb-laptop is not in your disklist.
Trying host mlb-laptop.imparisystems.local ...
200 Dump host set to mlb-laptop.imparisystems.local.
amrecover> listdisk
200- List of disk for host mlb-laptop.imparisystems.local
201- /home/mlb/Documents
201- /home/mlb/ImpariSystems
201- /home/mlb/Desktop
201- /home/mlb/EC2
201- /home/mlb/Photos
201- /home/mlb/Pictures
201- /home/mlb/.evolution
200 List of disk for host mlb-laptop.imparisystems.local
amrecover> setdisk /home/mlb/ImpariSystems
200 Disk set to /home/mlb/ImpariSystems.
amrecover> lcd /home/mlb/ImpariSystems
amrecover> add *
Added file /ImpariSystems.20100309121440.log
Added file /ImpariSystems.20100309121438.xac
Added file /ImpariSystems.20100309103512.log
Added file /ImpariSystems
Added dir "/Demo Site/" at date 2010-03-08-17-27-03
Added dir "/Demo Site/" at date 2010-03-10-09-15-33
Added file /YorkInvoice.txt.20080211112237.log
Added file /YorkInvoice.txt.20080211112236.log
Added file /YorkInvoice
Added file /Q3IncomeStatement.20090222151410.log
Added file /Q3IncomeStatement.20090222151409.xac
Added file /Q3IncomeStatement.20090222150138.log
Added file /Q3IncomeStatement.20090220101929.log
Added file /Q3IncomeStatement.20090220101928.log
Added file /Q3IncomeStatement
Added file /OC_Beta_V4.0.pdf
Added file /ImpariSystems.20100228163356.log
Added file /ImpariSystems.20100228163355.xac
Added file /ImpariSystems.20100228163244.log
Added file /ImpariSystems.20100223123458.log
Added file /ImpariSystems.20100223123457.xac
Added file /ImpariSystems.20100223122643.log
Added file /ImpariSystems.20100223122642.xac
Added file /ImpariSystems.20100223121705.xac
Added file /ImpariSystems.20100223121705.log
Added file /ImpariSystems.20100223121146.log
Added file /ImpariSystems.20100223121145.xac
Added file /ImpariSystems.20100223120132.xac
Added file /ImpariSystems.20100223120132.log
Added file /ImpariSystems.20100223115324.log
Added file /ImpariSystems.20100208164001.log
Added file /ImpariSystems.20100208120210.log
Added file /ImpariSystems.20100208120209.xac
Added file /ImpariSystems.20100208115934.log
Added file /ImpariSystems.20100207143430.log
Added file /ImpariSystems.20100207143429.xac
Added file /ImpariSystems.20100207142854.log
Added file /ImpariSystems.20100207142853.xac
Added file /ImpariSystems.20100207142327.log
Added file /ImpariSystems.20100202141328.xac
Added file /ImpariSystems.20100202141328.log
Added file /ImpariSystems.20100202140825.log
Added file /ImpariSystems.20100202140824.xac
Added file /ImpariSystems.20100202135209.log
Added file /ImpariSystems.20100202135208.xac
Added file /ImpariSystems.20100202134629.log
Added file /Financials.20070602144258.log
Added file /Financials.20070524123205.log
Added file /Financials.20070524123203.log
Added file /Financials
Added file /EasyCom.pdf
Added file /Backup.20090222151812.log
Added file /Backup.20090222151811.log
Added file /Backup
Added file /2007msrsmfinal1.pdf
amrecover> extract

Extracting files using tape drive changer on host ubuntu.imparisystems.local.
The following tapes are needed: laptops-0002
                                laptops-0004

Restoring files into directory /home/mlb/ImpariSystems
Continue [?/Y/n]? Y

Extracting files using tape drive changer on host ubuntu.imparisystems.local.
Load tape laptops-0002 now
Continue [?/Y/n/s/d]? Y
tar: This does not look like a tar archive
tar: ./2007msrsmfinal1.pdf: Not found in archive
tar: ./Backup: Not found in archive
tar: ./Backup.20090222151811.log: Not found in archive
tar: ./Backup.20090222151812.log: Not found in archive
tar: ./EasyCom.pdf: Not found in archive
tar: ./Financials: Not found in archive
tar: ./Financials.20070524123203.log: Not found in archive
tar: ./Financials.20070524123205.log: Not found in archive
tar: ./Financials.20070602144258.log: Not found in archive
tar: ./ImpariSystems.20100202134629.log: Not found in archive
tar: ./ImpariSystems.20100202135208.xac: Not found in archive
tar: ./ImpariSystems.20100202135209.log: Not found in archive
tar: ./ImpariSystems.20100202140824.xac: Not found in archive
tar: ./ImpariSystems.20100202140825.log: Not found in archive
tar: ./ImpariSystems.20100202141328.log: Not found in archive
tar: ./ImpariSystems.20100202141328.xac: Not found in archive
tar: ./ImpariSystems.20100207142327.log: Not found in archive
tar: ./ImpariSystems.20100207142853.xac: Not found in archive
tar: ./ImpariSystems.20100207142854.log: Not found in archive
tar: ./ImpariSystems.20100207143429.xac: Not found in archive
tar: ./ImpariSystems.20100207143430.log: Not found in archive
tar: ./ImpariSystems.20100208115934.log: Not found in archive
tar: ./ImpariSystems.20100208120209.xac: Not found in archive
tar: ./ImpariSystems.20100208120210.log: Not found in archive
tar: ./ImpariSystems.20100208164001.log: Not found in archive
tar: ./ImpariSystems.20100223115324.log: Not found in archive
tar: ./ImpariSystems.20100223120132.log: Not found in archive
tar: ./ImpariSystems.20100223120132.xac: Not found in archive
tar: ./ImpariSystems.20100223121145.xac: Not found in archive
tar: ./ImpariSystems.20100223121146.log: Not found in archive
tar: ./ImpariSystems.20100223121705.log: Not found in archive
tar: ./ImpariSystems.20100223121705.xac: Not found in archive
tar: ./ImpariSystems.20100223122642.xac: Not found in archive
tar: ./ImpariSystems.20100223122643.log: Not found in archive
tar: ./ImpariSystems.20100223123457.xac: Not found in archive
tar: ./ImpariSystems.20100223123458.log: Not found in archive
tar: ./ImpariSystems.20100228163244.log: Not found in archive
tar: ./ImpariSystems.20100228163355.xac: Not found in archive
tar: ./ImpariSystems.20100228163356.log: Not found in archive
tar: ./OC_Beta_V4.0.pdf: Not found in archive
tar: ./Q3IncomeStatement: Not found in archive
tar: ./Q3IncomeStatement.20090220101928.log: Not found in archive
tar: ./Q3IncomeStatement.20090220101929.log: Not found in archive
tar: ./Q3IncomeStatement.20090222150138.log: Not found in archive
tar: ./Q3IncomeStatement.20090222151409.xac: Not found in archive
tar: ./Q3IncomeStatement.20090222151410.log: Not found in archive
tar: ./YorkInvoice: Not found in archive
tar: ./YorkInvoice.txt.20080211112236.log: Not found in archive
tar: ./YorkInvoice.txt.20080211112237.log: Not found in archive
tar: ./Demo Site: Not found in archive
tar: Exiting with failure status due to previous errors
Extractor child exited with status 2

Any ideas?

Thanks,

Matt Burkhardt
Impari Systems, Inc.

Customer Relationship Management Systems
We help you find and keep your best customers
mlb < at > imparisystems.com ([email]mlb < at > imparisystems.com[/email])
http://www.imparisystems.com
http://www.linkedin.com/in/mlburkhardt
502 Fairview Avenue
Frederick, MD 21701
work (301) 682-7901
cell (301) 802-3235

Amrecover tends to hide the actual error messages, since they occur on
the server.

Try doing a recovery using amfetchdump, instead. I suspect that
there's a missing encryption key or something preventing the recovery.

Dustin

--
Open Source Storage Engineer
http://www.zmanda.com

Thanks for being so quick Dustin...

I did amfetchdump and on the first run through it was complaining about /var/lib/amanda/.am_passphrase missing, so I created it and put in the correct passphrase, now I'm getting this:


amfetchdump: slot 10: time 20100205150231 label laptops-0010 (exact label match)
Scanning volume laptops-0010 (slot 10)
amfetchdump: 1: restoring FILE: date 20100205150231 host mlb-laptop.imparisystems.local disk /home/mlb/Documents lev 1 comp .gz program /bin/tar crypt enc client_encrypt /usr/sbin/amcryptsimple client_decrypt_option -d
gpg: decryption failed: bad key

So I'm hunting around for the next steps - can I create a new key file without the old computer?

On Thu, 2010-03-11 at 13:22 -0600, Dustin J. Mitchell wrote:
Amrecover tends to hide the actual error messages, since they occur on
the server.

Try doing a recovery using amfetchdump, instead. I suspect that
there's a missing encryption key or something preventing the recovery.

Dustin

--
Open Source Storage Engineer
http://www.zmanda.com


Matt Burkhardt
Impari Systems, Inc.

Customer Relationship Management Systems
We help you find and keep your best customers
mlb < at > imparisystems.com ([email]mlb < at > imparisystems.com[/email])
http://www.imparisystems.com
http://www.linkedin.com/in/mlburkhardt
502 Fairview Avenue
Frederick, MD 21701
work (301) 682-7901
cell (301) 802-3235

On Thu, Mar 11, 2010 at 2:52 PM, Matt Burkhardt <mlb < at > imparisystems.com> wrote:

I did amfetchdump and on the first run through it was complaining about /var/lib/amanda/.am_passphrase missing, so I created it and put in the correct passphrase, now I'm getting this:

amfetchdump: slot 10: time 20100205150231 label laptops-0010 (exact label match)
Scanning volume laptops-0010 (slot 10)
amfetchdump: 1: restoring FILE: date 20100205150231 host mlb-laptop.imparisystems.local disk /home/mlb/Documents lev 1 comp .gz program /bin/tar crypt enc client_encrypt /usr/sbin/amcryptsimple client_decrypt_option -d
gpg: decryption failed: bad key

So I'm hunting around for the next steps - can I create a new key file without the old computer?

I'm not terribly familiar with crypto, but presumably you need the
secret key to decrypt. Hopefully that was stored somewhere other than
on the old computer?

BTW, once you get amfetchdump working, amrecover will work fine.
Amrecover just doesn't show error messages very well. For example,
the message regarding am_passphrase was buried in the amidxtaped
logfile.

Dustin

--
Open Source Storage Engineer
http://www.zmanda.com

Dustin J. Mitchell schrieb:
I'm not terribly familiar with crypto, but presumably you need the
secret key to decrypt. Hopefully that was stored somewhere other than
on the old computer?

BTW, once you get amfetchdump working, amrecover will work fine.
Amrecover just doesn't show error messages very well. For example,
the message regarding am_passphrase was buried in the amidxtaped
logfile.


Well, I'm not quite sure we're talking bout the same thing, but when I use
encryption, I get something like this in the dumpfiles:

To restore, position tape at start of file and run:
dd if=<tape> bs=32k skip=1 | /usr/sbin/amcrypt-ossl-asym -d | /bin/gzip -dc |
/bin/tar -xpGf - ...


So far, having to restore something encrypted, I did use the above commands and
it worked just fine.

/Michael

--
Michael Müskens

Rule #18: It's better to seek forgiveness than ask permission.

On Fri, 2010-03-12 at 08:21 +0100, muessi wrote:
Dustin J. Mitchell schrieb:
I'm not terribly familiar with crypto, but presumably you need the
secret key to decrypt. Hopefully that was stored somewhere other than
on the old computer?

BTW, once you get amfetchdump working, amrecover will work fine.
Amrecover just doesn't show error messages very well. For example,
the message regarding am_passphrase was buried in the amidxtaped
logfile.


Well, I'm not quite sure we're talking bout the same thing, but when I use
encryption, I get something like this in the dumpfiles:

To restore, position tape at start of file and run:
dd if=<tape> bs=32k skip=1 | /usr/sbin/amcrypt-ossl-asym -d | /bin/gzip -dc |
/bin/tar -xpGf - ...


So far, having to restore something encrypted, I did use the above commands and
it worked just fine.

/Michael

I'm using amcryptsimple instead of the encryption methodology that you're using - but thanks for the feedback.

I'm also working with the gnupg folks and they've given me this feedback - just also wanted to check and make sure that I'm reading the code correctly. I'll keep everyone in the loop....

Long story short, I use amanda for my backups and I've been using encryptsimple for my backups. My PC died completely, and I'm trying to get the backups onto another machine. I've stepped through the programs and have found that it's calling gpg with

gpg --batch --quiet --no-mdc-warning --decrypt --passphrase-fd 3 3</var/lib/amanda/.am_passphrase

I was under the impression that the passphrase (.am_passphrase) was just a clear text secret phrase. However, the gpg call errors out with:

gpg: decryption failed: bad key

The "bad key" error doesn't mean the passphrase is wrong (that would be "invalid passphrase"). It often means that the file you are decrypting is corrupt. Was the file you are decrypting encrypted with a passphrase only or with a public key?

Here's the code that calls gpg for the encryption:


gpg --batch --no-secmem-warning --disable-mdc --symmetric --cipher-algo AES256 --passphrase-fd 3  3</var/lib/amanda/.am_passphrase

According to the man pages, it says not to use the --cipher-algo but doesn't mention if that's needed in order to decrypt the files. Would that have to happen?

Thanks!

Matt Burkhardt
Impari Systems, Inc.

Customer Relationship Management Systems
We help you find and keep your best customers
mlb < at > imparisystems.com ([email]mlb < at > imparisystems.com[/email])
http://www.imparisystems.com
http://www.linkedin.com/in/mlburkhardt
502 Fairview Avenue
Frederick, MD 21701
work (301) 682-7901
cell (301) 802-3235

On Fri, Mar 12, 2010 at 5:57 AM, Matt Burkhardt <mlb < at > imparisystems.com> wrote:
The "bad key" error doesn't mean the passphrase is wrong (that would be "invalid passphrase").  It often means that the file you are decrypting is corrupt.  Was the file you are decrypting encrypted with a passphrase only or with a public key?

What was the answer to this question?

Dustin

--
Open Source Storage Engineer
http://www.zmanda.com

On Tue, Mar 16, 2010 at 9:07 AM, Matt Burkhardt <mlb < at > imparisystems.com> wrote:
Since it's happened on almost every backup I've tried, I'm assuming I'm missing a very important piece of information - so I do think it's a bad key or I'm missing the public key.  I have another computer that is backed up the exact same way and I've had no problems recovering files for that one.

Hmm, so the first thing to figure out is, does an incorrect passphrase
generate that error? If so, then I suspect that you've been
encrypting with a different passphrase than you're using for
decryption. That this works for other systems points strongly in this
direction.

One thing you might do is amfetchdump's -l option, and then try
various manual invocations of gpg to decrypt it. Maybe there are
other passphrases available? You might also try stracing the gpg run.
If it reads most of the way to the end before bailing out, then it is
more likely to be a corrupt file. If it bails out at the very
beginning, then it's more likely to be a settings problem.

I'm sorry we don't have any good solid answers for you..

Dustin

--
Open Source Storage Engineer
http://www.zmanda.com

On Tue, Mar 16, 2010 at 1:55 PM, Dustin J. Mitchell <dustin < at > zmanda.com> wrote:
I'm sorry we don't have any good solid answers for you..

Well, I can give a little more detail. I encrypted a backup with
amcryptsimple, then changed the passphrase and tried to decrypt it. I
got:

gpg: decryption failed: Bad session key

Incidentally:
Tue Mar 16 14:12:47 2010: amfetchdump: <XferFilterProcess < at > 0x13a7030>:
process exited with status 0
which makes it hard for amfetchdump (or amidxtaped, behind the scenes
for amrecover) to know anything has gone wrong. I suppose we should
special-case a zero-length output as "failed"..

Some scribbling on the dumpfile on my vtape got gpg to say:

gpg: [don't know]: invalid packet (ctb=39)
gpg: [don't know]: invalid packet (ctb=5d)
gpg: [don't know]: invalid packet (ctb=2a)

which also doesn't match the error you saw.

dustin < at > euclid ~/code/amanda/t/amanda [master] $ gpg --version
gpg (GnuPG) 2.0.11
libgcrypt 1.4.4
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Dustin

--
Open Source Storage Engineer
http://www.zmanda.com

On Mon, 2010-03-15 at 14:10 -0500, Dustin J. Mitchell wrote:
On Fri, Mar 12, 2010 at 5:57 AM, Matt Burkhardt <mlb < at > imparisystems.com ([email]mlb < at > imparisystems.com[/email])> wrote:
The "bad key" error doesn't mean the passphrase is wrong (that would be "invalid passphrase").  It often means that the file you are decrypting is corrupt.  Was the file you are decrypting encrypted with a passphrase only or with a public key?

What was the answer to this question?

Dustin

--
Open Source Storage Engineer
http://www.zmanda.com

Dustin - thanks for checking up on me!

I've been trying to get an older version by getting the history and selecting a full backup - so I do


history
200- Dump history for config "laptops" host "mlb-laptop.imparisystems.local" disk /home/mlb/ImpariSystems
201- 2010-03-10-09-15-33 1 laptops-0004:5
201- 2010-03-09-10-40-06 1 laptops-0003:1
201- 2010-03-08-17-27-03 0 laptops-0002:2
201- 2010-03-06-12-03-37 0 laptops-0001:3
201- 2010-03-05-11-46-08 1 laptops-0020:2
201- 2010-03-05-09-57-36 0 laptops-0019:3
201- 2010-03-04-10-23-20 0 laptops-0018:4
201- 2010-03-03-09-00-02 1 laptops-0017:4
201- 2010-03-02-09-00-01 1 laptops-0016:1
201- 2010-02-28-12-13-07 1 laptops-0015:2
201- 2010-02-28-09-00-01 0 laptops-0014:4
201- 2010-02-25-09-00-01 1 laptops-0013:2
201- 2010-02-24-13-25-46 1 laptops-0012:2
201- 2010-02-24-09-00-02 0 laptops-0011:3
201- 2010-02-23-09-00-02 1 laptops-0007:2
201- 2010-02-11-09-00-02 0 laptops-0005:4
201- 2010-02-08-12-02-50 1 laptops-0006:4
201- 2010-02-07-09-00-02 1 laptops-0008:4
201- 2010-02-05-15-02-31 1 laptops-0010:4

In this example, I set the date to 2010-03-06 because I'm assuming that 0 means a full backup - and then I try to extract it and I get:


amrecover> setdate 2010-03-06
200 Working date set to 2010-03-06.
amrecover> ls
2010-03-06-12-03-37 YorkInvoice.txt.20080211112237.log
2010-03-06-12-03-37 YorkInvoice.txt.20080211112236.log
2010-03-06-12-03-37 YorkInvoice
2010-03-06-12-03-37 Q3IncomeStatement.20090222151410.log
2010-03-06-12-03-37 Q3IncomeStatement.20090222151409.xac
2010-03-06-12-03-37 Q3IncomeStatement.20090222150138.log
2010-03-06-12-03-37 Q3IncomeStatement.20090220101929.log
2010-03-06-12-03-37 Q3IncomeStatement.20090220101928.log
2010-03-06-12-03-37 Q3IncomeStatement
2010-03-06-12-03-37 OC_Beta_V4.0.pdf
2010-03-06-12-03-37 ImpariSystems.20100228163356.log
2010-03-06-12-03-37 ImpariSystems.20100228163355.xac
2010-03-06-12-03-37 ImpariSystems.20100228163244.log
2010-03-06-12-03-37 ImpariSystems.20100223123458.log
2010-03-06-12-03-37 ImpariSystems.20100223123457.xac
2010-03-06-12-03-37 ImpariSystems.20100223122643.log
2010-03-06-12-03-37 ImpariSystems.20100223122642.xac
2010-03-06-12-03-37 ImpariSystems.20100223121705.xac
2010-03-06-12-03-37 ImpariSystems.20100223121705.log
2010-03-06-12-03-37 ImpariSystems.20100223121146.log
2010-03-06-12-03-37 ImpariSystems.20100223121145.xac
2010-03-06-12-03-37 ImpariSystems.20100223120132.xac
2010-03-06-12-03-37 ImpariSystems.20100223120132.log
2010-03-06-12-03-37 ImpariSystems.20100223115324.log
2010-03-06-12-03-37 ImpariSystems.20100208164001.log
2010-03-06-12-03-37 ImpariSystems.20100208120210.log
2010-03-06-12-03-37 ImpariSystems.20100208120209.xac
2010-03-06-12-03-37 ImpariSystems.20100208115934.log
2010-03-06-12-03-37 ImpariSystems.20100207143430.log
2010-03-06-12-03-37 ImpariSystems.20100207143429.xac
2010-03-06-12-03-37 ImpariSystems.20100207142854.log
2010-03-06-12-03-37 ImpariSystems.20100207142853.xac
2010-03-06-12-03-37 ImpariSystems.20100207142327.log
2010-03-06-12-03-37 ImpariSystems.20100202141328.xac
2010-03-06-12-03-37 ImpariSystems.20100202141328.log
2010-03-06-12-03-37 ImpariSystems.20100202140825.log
2010-03-06-12-03-37 ImpariSystems.20100202140824.xac
2010-03-06-12-03-37 ImpariSystems.20100202135209.log
2010-03-06-12-03-37 ImpariSystems.20100202135208.xac
2010-03-06-12-03-37 ImpariSystems.20100202134629.log
2010-03-06-12-03-37 ImpariSystems
2010-03-06-12-03-37 Financials.20070602144258.log
2010-03-06-12-03-37 Financials.20070524123205.log
2010-03-06-12-03-37 Financials.20070524123203.log
2010-03-06-12-03-37 Financials
2010-03-06-12-03-37 EasyCom.pdf
2010-03-06-12-03-37 "Demo Site/"
2010-03-06-12-03-37 Backup.20090222151812.log
2010-03-06-12-03-37 Backup.20090222151811.log
2010-03-06-12-03-37 Backup
2010-03-06-12-03-37 2007msrsmfinal1.pdf
2010-03-06-12-03-37 .
amrecover> add ImpariSystems
Added file /ImpariSystems
amrecover> extract

Extracting files using tape drive changer on host ubuntu.imparisystems.local.
The following tapes are needed: laptops-0001

Restoring files into directory /home/mlb
Continue [?/Y/n]? y

Extracting files using tape drive changer on host ubuntu.imparisystems.local.
Load tape laptops-0001 now
Continue [?/Y/n/s/d]? y
tar: This does not look like a tar archive
tar: ./ImpariSystems: Not found in archive
tar: Exiting with failure status due to previous errors
Extractor child exited with status 2
amrecover>

So I tried to retrieve an older version using amfetchdump - so


amfetchdump laptops mlb-laptop /home/mlb/ImpariSystems 20100303 -O /home/mlb/toshiba -l
1 tape(s) needed for restoration
The following tapes are needed: laptops-0017
Press enter when ready

amfetchdump: slot 17: time 20100303090002 label laptops-0017 (exact label match)
Scanning volume laptops-0017 (slot 17)
amfetchdump: 4: restoring FILE: date 20100303090002 host mlb-laptop.imparisystems.local disk /home/mlb/ImpariSystems lev 1 comp .gz program /bin/tar crypt enc client_encrypt /usr/sbin/amcryptsimple client_decrypt_option -d
gpg: decryption failed: bad key

Since it's happened on almost every backup I've tried, I'm assuming I'm missing a very important piece of information - so I do think it's a bad key or I'm missing the public key. I have another computer that is backed up the exact same way and I've had no problems recovering files for that one. Thanks!

Matt Burkhardt
Impari Systems, Inc.

Customer Relationship Management Systems
We help you find and keep your best customers
mlb < at > imparisystems.com ([email]mlb < at > imparisystems.com[/email])
http://www.imparisystems.com
http://www.linkedin.com/in/mlburkhardt
502 Fairview Avenue
Frederick, MD 21701
work (301) 682-7901
cell (301) 802-3235

On Tue, 2010-03-16 at 14:22 -0500, Dustin J. Mitchell wrote:
On Tue, Mar 16, 2010 at 1:55 PM, Dustin J. Mitchell <dustin < at > zmanda.com ([email]dustin < at > zmanda.com[/email])> wrote:
I'm sorry we don't have any good solid answers for you..

Well, I can give a little more detail. I encrypted a backup with
amcryptsimple, then changed the passphrase and tried to decrypt it. I
got:

gpg: decryption failed: Bad session key

Incidentally:
Tue Mar 16 14:12:47 2010: amfetchdump: <XferFilterProcess < at > 0x13a7030>:
process exited with status 0
which makes it hard for amfetchdump (or amidxtaped, behind the scenes
for amrecover) to know anything has gone wrong. I suppose we should
special-case a zero-length output as "failed"..

Some scribbling on the dumpfile on my vtape got gpg to say:

gpg: [don't know]: invalid packet (ctb=39)
gpg: [don't know]: invalid packet (ctb=5d)
gpg: [don't know]: invalid packet (ctb=2a)

which also doesn't match the error you saw.

dustin < at > euclid ~/code/amanda/t/amanda [master] $ gpg --version
gpg (GnuPG) 2.0.11
libgcrypt 1.4.4
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Dustin

I tried using the -l option on amfetchdump, but it still wants to be able to decrypt the file before it dumps it


amfetchdump: slot 16: time 20100302090001 label laptops-0016 (exact label match)
Scanning volume laptops-0016 (slot 16)
amfetchdump: 1: restoring FILE: date 20100302090001 host mlb-laptop.imparisystems.local disk /home/mlb/ImpariSystems lev 1 comp .gz program /bin/tar crypt enc client_encrypt /usr/sbin/amcryptsimple client_decrypt_option -d
gpg: decryption failed: bad key

I'm working back through the files just to see if one of these hits - I can't imagine using a separate passphrase on this set than on any other groups.

Thanks for all the help

Matt Burkhardt
Impari Systems, Inc.

mlb < at > imparisystems.com ([email]mlb < at > imparisystems.com[/email])
http://www.imparisystems.com
http://www.linkedin.com/in/mlburkhardt
502 Fairview Avenue
Frederick, MD 21701
work (301) 682-7901
cell (301) 802-3235