bacula

I am evaluating bacula to backup our Nas shares.
The version i am using is 5.2. When I run the installation (with MySQL),
the bacula (mysql user) clear text password is stored in the /etc/bacula/bacula-dir.conf.
this raises a redflag to our security department.
So we would have to find a way to remove this passwd in the config file. But I am not sure how to approach it. Does anyone have any suggestion?

Thanks,
CP

based on this: https://www.bacula.org/9.4.x-manuals...00000000000000
you have no other choices. But you may try to contact them.

Originally Posted by pan64 based on this: https://www.bacula.org/9.4.x-manuals...00000000000000 you have no other choices. But you may try to contact them.

oh ok thanks... i was thinking of upgrade it to the latest version to see if there is any changes.
I am thinking of replacing it with an environment variable to see if it would work.

Thanks,
CP

Originally Posted by phanmchau I am thinking of replacing it with an environment variable to see if it would work.

how would that be more secure?

Suggestion: Don't use the production/live/real userid and password; create a read-only database user and use that for backup.

Run that idea by your security department.