I have succeeded in running the command:
kopia server user add bob@desktop345abc ---config-file=/path/to/my/backup.config --user-password=bobsconnectpassword --password=repopassword
The above kopia server user add… replied with:
Updated user credentials will take effect in 5-10 minutes or when the server is restarted. To refresh credentials in a running server use ‘kopia server refresh’ command.
So I figured I’d move things along and tried kopia server refresh… That command seems to require a --server-control-username and --server-control-password yet I could not find how/where these credentials are ever created. Could use guidance there for one item.
I then install the Windows GUI client on one of the PC’s and feel the best choice must be the Kopia Repository Server as shown below:
It then prompts me for the server address which I know, however I have no idea how to produce this trusted server certificate fingerprint or is even needed, or is it an alternative to the path?
I then move forward and initially it throws this error:
dns resolver: missing port after port-separator colon
However I am using nginx reverse proxy and as a result a url only. That said, I realized I could not get past this without entering a port. So I appended the correct :xxxx
Then it comes to a new error
unable to initialize session: rpc error: code = PermissionDenied desc = access denied for Bob@Desktop345ABC: EOF
I noticed it automatically used the capitalized username of the PC ie; Bobs@ but when typing the earlier command kopia server user add it required all lowercase of the user information. Not sure if that plays into that permission error.
So then switch the url being used to the IP address of the server xxx.xx.xx.xxx:portnum and I’m getting the message
rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: tls: failed to verify certificate: x509: cannot validate certificate for 192.168.10.5 because it doesn't contain any IP SANs"
In the end I was never able to connect to the repo. I cannot find clear documentation on this part of the process and was wondering if anyone here has been down this road and can offer their expertise.
What sayeth the group?
Thanks.
Jay / CompuMatter