> The files on the client that are identified for backup have restricted
> permissions 640 and have a specific owner/group (not root).
> When I run a backup I get this error:
> ERR=Permission denied.
> The error message is clear, and the root cause is that the Bacula user
> accessing the files on the client has insufficient permissions.
> Which user is reading files on client for backup?
> Or which user is connection from Bacula directory to Bacula client?
The user used for reading files on the client server during the backup
is the user bacula file daemon is set to run as.
You can use command such as this to check the process list and see the
user bacula-fd is using: ps aux | grep bacula-fd
In most cases it is normal to run it as root and in some cases you can
set it to run under some unprivileged user but it really depends on the
ownership of the files and directories you need to backup.