Unsolved

This post is more than 5 years old

194 Posts

451

February 8th, 2007 06:00

Can't get aesasm to work in 7.3.2 Jumbo

Greetings,

I'm testing 7.3.2 Jumbo before we upgrade from 7.2.2 Jumbo on RedHat Linux ES3. Management wants to use AES encryption so I'm trying to test it on my test box. Set up /.nsr file as follows:

<< / >>
+aesasm: .

Test backup using this command:

save -s xxx.xxx.xxx -vvv -b Test /boot 1>2.2 2>&1

In output file 2.2 it says:

save: external ASM `aesasm' not found or not executable
save: ignoring ASM specification for `aesasm' in /.nsr

Did I miss something during the install? I don't see anything about AES encryption in either the Linux Installation Guide or the Administrator Guide. The manpage for uasm just says it'll use a lot of CPU.

Thanks,
Vic

6 Operator

 • 

14.4K Posts

 • 

56.2K Points

February 8th, 2007 06:00

It should be +aes instead of +aesasm. Also, since you use client directive you don't need << / >> part - simply place .nsr to /. When calling save use also -f .

194 Posts

February 8th, 2007 07:00

HC,

Can't believe the problem was that simple. Made the change and tried it again, seem to work according to the output (I also use compressasm):

`/boot/' change time Thu Feb 8 08:32:25 2007
matched internal `compressasm' on `.' for `/boot/'
walk(/boot/lost+found, lost+found)
matched internal `aes' on `lost+found' for `/boot/lost+found'
`/boot/lost+found/' change time Fri Sep 2 08:18:58 2005
chdir(lost+found/) [/boot/lost+found/ /boot/lost+found>
matched internal `compressasm' on `.' for `/boot/lost+found/'
compressasm -s /boot/lost+found/
[aes -s /boot/lost+found>
save: directory contents for /boot/lost+found/:
`..' fileid= 2
/boot/lost+found/: fid = <301, 11>
walk(/boot/grub, grub)

So I got into NMC and manually started a savegroup. Once done I went in and removed the passphrase because I read in another thread that if AES encryption is used it'll prompt you for the passphrase. Rebooted the server before starting nwrecover to make sure all changes took. Tried the recover and it did NOT prompt me for the passphrase and the file was restored.

So how do I check to verify AES encryption worked on savegroups?

Thanks again,
Vic

194 Posts

February 8th, 2007 08:00

Finally tracked it down. NetWorker won't prompt you for the passphrase, it'll create the file(s) with nothing in them. You have to use the '-p' option specifying the passphrase with nwrecover to recover the files.

Thanks again HC for your help.

Vic
No Events found!

Top