backup and pki authenication

[Luis_Miguel_Mig]

I always had my backups running with an user and pki pub authentication.
I had it in r77.20, r80.40, r81.10.
However I am having issues in r81.20 to set it up.

I can run a once off backup using my user authenticating with pki in my scp server.
However the same setting fail with scheduled backups.
But I can run  local scheduled backups.

This is the error I get 

scheduled_backup: Error : Base64 decode failed
scheduled_backup: schedule backup: obfuscation error
scheduled_backup: /bin/scheduled_backup: rc=-1



Any idea?

[AkosBakos]

Hi @Luis_Miguel_Mig 

Have a look at on this article: https://support.checkpoint.com/results/sk/sk182516

The error messages came from the /var/log/messages?

Akos

[Luis_Miguel_Mig]

Yes, from /var/log/messages
As I said, it used to work with r81.10 and the ssh keys authentication works with the manual backup you can execute at the top of the backup section in the GUI but I get this error with scheduled backups.

[AkosBakos]

Hi @Luis_Miguel_Mig 

You have issues with the scheduled backup only? 

Last time I ran into this issue: https://support.checkpoint.com/results/sk/sk175665

What do you see the cron logs (/var/log/cron)

Akos

[Luis_Miguel_Mig]

The scheduled backup works if I run the backup locally or if I user user/password authentication.
Scheduled backup only fails if I use ssh keys authentication (and only in r81.20)
But ssh keys authentication works okay running an once-off scp backup.

Aug 14 11:11:39 2024 fm crontab[14856]: (admin) REPLACE (admin)
Aug 14 11:11:39 2024 fm crontab[14858]: (admin) REPLACE (admin)
Aug 14 11:12:01 2024 fm crond[13813]: (admin) RELOAD (cron/admin)
Aug 14 11:12:01 2024 fm crond[15155]: (admin) CMD (/bin/scheduled_backup weekly)
Aug 14 11:20:01 2024 fm crond[21484]: (root) CMD (/usr/lib/sa/sa1 1 1)

[AkosBakos]

Hi @Luis_Miguel_Mig 

Check this thread: System Backup with host keys

Have you tried to set a new scheduled backup with keys on r81.20?

Akos

[Luis_Miguel_Mig]

Yeah, I tried it many times.
It is the combination of scheduled backup and ssh keys what fails.
The manual scp with ssh keys at the top of the gui works.

[AkosBakos]

I think, you did all of the troubleshooting steps. Can you open a TAC case?