Skip to main content
Version: 9.x

Database user for Bacula catalog

This page provide instructions to setup a dedicated database user to connect to MySQL/MariaDB or postgreSQL Bacula database catalog.

MySQL/MariaDB​

Create the user and grant privileges​

Create the user on MySQL/MariaDB server and grand "read-only" to all Bacula database tables

> CREATE USER 'username'@'host_or_wildcard' IDENTIFIED BY 'password';
> GRANT SELECT ON *.* TO 'username'@'host_or_wildcard';

Example

> CREATE USER 'bacula-web'@'bacula-web-host.lan' IDENTIFIED BY 'secret';
> GRANT SELECT ON bacula.* TO 'bacula-web'@'bacula-web-host.lan';
> FLUSH PRIVILEGES;

Test connection​

You can then test it from the host running Bacula-Web application

$ mysql -u bacula-web -p -h db-host-or-ip-address bacula
tip

In above example, you can replace

  • bacula-web user by the one you want
  • bacula-web-host.lan is the host running Bacula-Web application
  • db-host-or-ip-address is the host or ip address of MySQL/MariaDB server

postgreSQL​

Create the role on postgreSQL server and grant privileges

Create the role and grant privileges​

> \c bacula
> CREATE USER bacula_web WITH PASSWORD 'secret';
> GRANT CONNECT ON DATABASE bacula TO bacula_web;
> GRANT USAGE ON SCHEMA public TO bacula_web;
> GRANT SELECT ON ALL TABLES IN SCHEMA public TO bacula_web;

Update pg_hba.conf​

Update postgreSQL client authentication as below

cat <<EOF > pg_hba.conf
...
# IPv4 local connections:
host    all             all             127.0.0.1/32            md5
host	bacula		bacula_web		192.168.1.0/24		md5
...
EOF
tip

Above example use md5 auth method, for further options, see see postgreSQL documentation

Reload postgreSQL service

$ sudo systemctl reload postgresql

Test connection​

You can then test it from the host running Bacula-Web application

$ psql -U bacula-web -W -h db-host-or-ip-address bacula