Hi.. long time since I posted to this ML now...
Amanda has been working great for me so far.
But I decided to have a look at the krb5 auth support, since I already
use kerberos for a lot of other stuff.
I have finally got it working for both amdump and amrecover.
One question though, when using amrecover for restoring data it seems
that there is no way to control that a specific kerberos principal can
only restore data for a specific server.
Have I missed anything here? I think it would be good if one could
specify in the amanda servers .k5amandahosts file something like:
client.domain amanda/client < at > DOMAIN <hosts allowed to restore data
from>
So that a server admin for server A not necessarily can restore data
from server B.
Hope I made my question fairly clear, and thanks for any help or ideas
regarding this.
BTW, ATM I'm running a patched debian amanda installation (patched so
it's being linked against dynamic mit-krb5 libs) Amanda-2.5.2p1
/Andreas
