topic Re: backup and pki authenication in General Topics

backup and pki authenication

Luis_Miguel_Mig — Tue, 13 Aug 2024 15:27:45 GMT

I always had my backups running with an user and pki pub authentication.
I had it in r77.20, r80.40, r81.10.
However I am having issues in r81.20 to set it up.

I can run a once off backup using my user authenticating with pki in my scp server.
However the same setting fail with scheduled backups.
But I can run local scheduled backups.

This is the error I get

scheduled_backup: Error : Base64 decode failed
scheduled_backup: schedule backup: obfuscation error
scheduled_backup: /bin/scheduled_backup: rc=-1

Any idea?

Re: backup and pki authenication

AkosBakos — Tue, 13 Aug 2024 16:30:45 GMT

Hi @Luis_Miguel_Mig

Have a look at on this article: https://support.checkpoint.com/results/sk/sk182516

The error messages came from the /var/log/messages?

Akos

Re: backup and pki authenication

Luis_Miguel_Mig — Wed, 14 Aug 2024 10:16:03 GMT

Yes, from /var/log/messages
As I said, it used to work with r81.10 and the ssh keys authentication works with the manual backup you can execute at the top of the backup section in the GUI but I get this error with scheduled backups.

Re: backup and pki authenication

AkosBakos — Wed, 14 Aug 2024 10:26:02 GMT

Hi @Luis_Miguel_Mig

You have issues with the scheduled backup only?

Last time I ran into this issue: https://support.checkpoint.com/results/sk/sk175665

What do you see the cron logs (/var/log/cron)

Akos

Re: backup and pki authenication

Luis_Miguel_Mig — Wed, 14 Aug 2024 10:33:49 GMT

The scheduled backup works if I run the backup locally or if I user user/password authentication.
Scheduled backup only fails if I use ssh keys authentication (and only in r81.20)
But ssh keys authentication works okay running an once-off scp backup.

Aug 14 11:11:39 2024 fm crontab[14856]: (admin) REPLACE (admin)
Aug 14 11:11:39 2024 fm crontab[14858]: (admin) REPLACE (admin)
Aug 14 11:12:01 2024 fm crond[13813]: (admin) RELOAD (cron/admin)
Aug 14 11:12:01 2024 fm crond[15155]: (admin) CMD (/bin/scheduled_backup weekly)
Aug 14 11:20:01 2024 fm crond[21484]: (root) CMD (/usr/lib/sa/sa1 1 1)

Re: backup and pki authenication

AkosBakos — Wed, 14 Aug 2024 10:42:31 GMT

Hi @Luis_Miguel_Mig

Check this thread: System Backup with host keys

Have you tried to set a new scheduled backup with keys on r81.20?

Akos

Re: backup and pki authenication

Luis_Miguel_Mig — Wed, 14 Aug 2024 10:55:47 GMT

Yeah, I tried it many times.
It is the combination of scheduled backup and ssh keys what fails.
The manual scp with ssh keys at the top of the gui works.

Re: backup and pki authenication

AkosBakos — Wed, 14 Aug 2024 10:58:22 GMT

I think, you did all of the troubleshooting steps. Can you open a TAC case?