Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GBAK with service_mgr and WinSSPI authentication for Windows SYSTEM user producing error in clumplet API [CORE6329] #6570

Closed
firebird-automations opened this issue Jun 9, 2020 · 5 comments

Comments

@firebird-automations
Copy link
Collaborator

Submitted by: Sven-Eric Matthes (matthes)

Hello,

last year I configured our databases for backups without having to write our SYSDBA credentials in our backup script. Here I used Trusted Authentication via the WinSSPI Plugin and mapped the Windows SYSTEM user to SYSDBA via Global Mapping. We don't want our credentials in the script files because of security policies.

This is the mapping I created:
CREATE GLOBAL MAPPING WIN_SYSTEM
USING PLUGIN WIN_SSPI
FROM USER "AD\SERVERNAME$"
TO USER SYSDBA;

I could then create or restore a backup by running my backup script as Windows System User without SYSDBA credentials. This worked just fine with Firebird 3.0.4. Now I updated our Test environment to Firebird 3.0.5 and I'm getting an error in the clumplet API.

For example when restoring a backup it returns this:
gbak.exe -r -se localhost/3050:service_mgr -v -y D:\Backup\SomeDB.log D:\Backup\SomeDB.fbk D:\Database\SomeDB.fdb
gbak: ERROR:Internal error when using clumplet API: attempt to store 447 bytes in a clumplet with maximum size 255 bytes
gbak:Exiting before completion due to errors

The same error happens if I create backups like this:
gbak.exe -b -v -y D:\Backup\SomeDB.log D:\Database\SomeDB.fdb E:\Backup\SomeDB.fbk

If I backup or restore without service_mgr it works, but then it takes a lot longer!

Did something break here?

Commits: 4e4ce2d 7c1a0fe

@firebird-automations
Copy link
Collaborator Author

Modified by: @AlexPeshkoff

assignee: Alexander Peshkov [ alexpeshkoff ]

@firebird-automations
Copy link
Collaborator Author

Commented by: @AlexPeshkoff

That's not plugin or windows specific issue - but in this particular environment after adding ability to map any windows group to firebird role a kind of overflow (luckily detected with something better than segfault on server) has happened.

@firebird-automations
Copy link
Collaborator Author

Modified by: @AlexPeshkoff

status: Open [ 1 ] => Resolved [ 5 ]

resolution: Fixed [ 1 ]

Fix Version: 3.0.6 [ 10889 ]

Fix Version: 4.0 RC 1 [ 10930 ]

@firebird-automations
Copy link
Collaborator Author

Modified by: @pavel-zotov

status: Resolved [ 5 ] => Resolved [ 5 ]

QA Status: No test => Done successfully

@firebird-automations
Copy link
Collaborator Author

Modified by: @pavel-zotov

status: Resolved [ 5 ] => Closed [ 6 ]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants