Using ndmp.conf to Store Username and Password

If exposing the access credentials of the NAS on the Plugin command line is undesirable, it is possible to use file ndmp.conf, stored on the File Daemon host, to save your credentials.

In the following example, the profile root will refer to the NAS host nasbox, the connection will use MD5 as authentication method (“/m”), the username will be root and the password will be password.

# cat /opt/bacula/etc/ndmp.conf
[--root]
-D nasbox/m,root,password

The format of the -D parameter is the following:

HOST[:PORT][/FLAGS][,USERNAME,PASSWORD]

Where:

Option

Description

HOST

Is the host name or IP address of the NAS

:PORT

Optional port number. If not given the port number is 10000.

USERNAME

A user name that will be recognized by the NAS. Whether this is a general user name or a special account within the NAS is implementation dependent.

PASSWORD

The password corresponding to the USERNAME. The password field should not contain special characters such as: “, ’, !, $, / or #.

/FLAGS

Optional flags to indicate desired NDMP version or authentication method. The default version is negotiated to be the highest possible.

The default authentication method is text (NDMP_AUTH_TEXT).

2

Use NDMP version 2.

3

Use NDMP version 3.

4

Use NDMP version 4.

n

Use no authentication (NDMP_AUTH_NONE).

t

Use text authentication (NDMP_AUTH_TEXT). The user name and password are sent over the network as clear text (unencrypted).

m

Use MD5 challenge/response authentication (NDMP_AUTH_MD5). The remote NAS is asked for a challenge. The password is used as the shared secret and is never sent over the network.

In the following example, the profile “11” will refer to the NAS host “10.1.1.11”, the connection will use MD5 as authentication method (“/m”), the username will be root and the password will be mypassword. A second profile “12” is also shown in this example ndmp.conf file.

[root@lxbackup ~]# cat /opt/bacula/etc/ndmp.conf
[--11]
-D 10.1.1.11/m,root,mypassword

[--12]
-D 10.1.1.12/m,root,mypassword2

In the following example two FileSet resources are configured – one for each of the two NAS profiles configured in the ndmp.conf example above.

Fileset {
 Name = NDMP_11
 Include {
  Plugin = "ndmp: host=10.1.1.11 profile=11 volume=/vol/LAN_backup type=smtape"
 }
}

Fileset {
 Name = NDMP_12
 Include {
  Plugin = "ndmp: host=10.1.1.12 profile=12 volume=/vol/DMZ_backup type=smtape"
 }
}

Note

The ndmp.conf file is different from the ontap.conf file described here NetApp Configuration.