[SOLVED] backup owner check failed

[Ovidiu]

I know there are countless threads here with the same issue but none of them seemed to be an exact fit for my problem so instead of hijacking another thread I opened my own.

I have a NAS where I have installed both: PVE and PBS on the same host. For convenience, I just used root@pam for every action where permissions were needed and all worked fine.

I now added 2FA to the root user on PVE and on PBS and since then the backups stopped.

So my first try was to add an API key to the root@pam user on PBS and give it permissions on the datastore. I tried with different permissions up to Admin. This looked good except I then had to re-add the PBS storage on the PVE side using my new API key instead of root@pam. It worked well, I seemed to have access to the datastore but when trying to back up I get this error on the PVE side:

qmp command 'backup' failed - backup connect failed: command error: backup owner check failed

Now the similar threads I found all said that I need to change permissions of the backups on this datastore and yes, the owner of these backups is root@pam, and yet I can't change the owner to be the API key.

proxmox-backup-client change-owner vm/100 root@pam!nas2pbs --repository pbs-local
bash: !nas2pbs: event not found

vm/100 is my backup group
root@pam!nas2pbs is my API key
pbs-local is the ID of the PBS as added on PVE

I'm stuck, please advise what I'm doing wrong.

Let me add some screenshots:

 

[fabian]

you can also change the owner in the GUI (the little 'person' icon in the "Actions" column). for the CLI, you need to quote the authid properly: proxmox-backup-client change-owner vm/100 "root@pam!nas2pbs" --repository pbs-local, else the '!' will be interpreted by the shell.

 

[Ovidiu]

Oh man, that is embarrassing :-( I had a fleeting thought of quoting the API key, then I thought it can't be that simple.

Awesome that it is now possible to do this straight from the GUI.

Can you give me an additional hint please, what permissions do I need for this API key to be able to back up to PBS and restore from it? Nothing else needed as the pruning and other actions will be done from PBS side not PVE side.

 

[fabian]

https://pbs.proxmox.com/docs/user-management.html#access-roles