From: Huck <dhu...@pa...> - 2008-03-26 15:45:12
|
While I was on break, a switch went down...so unwittingly the computer teacher reset all of the servers by cold-booting them... Well..the backuppc machine now gives a 403 access denied error message when trying to load http://localhost.localdomain/backuppc from the local machine...and the same when trying to access it from any other computer on the network. Any ideas/thoughts why this would occur? --Huck |
From: Nils B. (Lemonbit) <ni...@le...> - 2008-03-26 15:50:58
|
Huck wrote: > While I was on break, a switch went down...so unwittingly the computer > teacher reset all of the servers by cold-booting them... > > Well..the backuppc machine now gives a 403 access denied error message > when trying to load http://localhost.localdomain/backuppc from the > local machine...and the same when trying to access it from any other > computer on the network. > > Any ideas/thoughts why this would occur? Your webserver error_log should be able to tell you more. Have you checked that? Nils Breunese. |
From: Huck <dhu...@pa...> - 2008-03-26 16:33:51
|
only 2 things stood out... [Tue Mar 25 18:53:53 2008] [error] [client 10.1.3.80] (13)Permission denied: access to /backuppc denied [Wed Mar 26 06:25:02 2008] [error] make_obcallback: could not import mod_python.apache.\n found and solved the mod_python.apache issue... but even after upgrading backuppc...still have a 'rights' issue... I'm wondering if it has something to do with the .htaccess file? I don't know....there is no SELINUX on this server. in /usr/share/backuppc what SHOULD the file-rights be and ownership? --Huck Nils Breunese (Lemonbit) wrote: > Huck wrote: > >> While I was on break, a switch went down...so unwittingly the computer >> teacher reset all of the servers by cold-booting them... >> >> Well..the backuppc machine now gives a 403 access denied error message >> when trying to load http://localhost.localdomain/backuppc from the >> local machine...and the same when trying to access it from any other >> computer on the network. >> >> Any ideas/thoughts why this would occur? > > Your webserver error_log should be able to tell you more. Have you > checked that? > > Nils Breunese. > > ------------------------------------------------------------------------- > Check out the new SourceForge.net Marketplace. > It's the best place to buy or sell services for > just about anything Open Source. > http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace > _______________________________________________ > BackupPC-users mailing list > Bac...@li... > List: https://lists.sourceforge.net/lists/listinfo/backuppc-users > Wiki: http://backuppc.wiki.sourceforge.net > Project: http://backuppc.sourceforge.net/ > > |
From: Paul M. <pc...@gm...> - 2008-03-26 18:24:48
|
I have a pretty good inclination as to why that's the case. If I recall correctly, the BackupPC_Admin cgi interface has setuid permissions that allow it only to be run by the backuppc user. It's recommended that you run your webserver as the backuppc user rather than a separate webserver user (nobody, apache, www, etc) for that purpose and to avoid any conflicts. What changes have you made to allow your server to run as a different user? -- Paul Mantz http://www.mcpantz.org Zmanda - Open source backup and recovery http://www.zmanda.com/ On Wed, Mar 26, 2008 at 1:18 PM, Huck <dhu...@pa...> wrote: > Well...I really don't know HOW or why or what-have-you... > > but I added www-data to the 'backuppc' group...and restarted apache2 > and it "solved" the problem...making absolutely no sense to me as the > permissions on the entire backuppc /usr/share/backuppc/* as well as > those parent directories were all rwxr-xr-x ... > > --Huck > > > > Huck wrote: > > only 2 things stood out... > > > > [Tue Mar 25 18:53:53 2008] [error] [client 10.1.3.80] (13)Permission > > denied: access to /backuppc denied > > [Wed Mar 26 06:25:02 2008] [error] make_obcallback: could not import > > mod_python.apache.\n > > > > found and solved the mod_python.apache issue... > > but even after upgrading backuppc...still have a 'rights' issue... > > I'm wondering if it has something to do with the .htaccess file? > > > > I don't know....there is no SELINUX on this server. > > in /usr/share/backuppc what SHOULD the file-rights be and ownership? > > > > > > --Huck > > > > Nils Breunese (Lemonbit) wrote: > >> Huck wrote: > >> > >>> While I was on break, a switch went down...so unwittingly the computer > >>> teacher reset all of the servers by cold-booting them... > >>> > >>> Well..the backuppc machine now gives a 403 access denied error message > >>> when trying to load http://localhost.localdomain/backuppc from the > >>> local machine...and the same when trying to access it from any other > >>> computer on the network. > >>> > >>> Any ideas/thoughts why this would occur? > >> Your webserver error_log should be able to tell you more. Have you > >> checked that? > >> > >> Nils Breunese. > >> > >> ------------------------------------------------------------------------- > >> Check out the new SourceForge.net Marketplace. > >> It's the best place to buy or sell services for > >> just about anything Open Source. > >> http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace > >> _______________________________________________ > >> BackupPC-users mailing list > >> Bac...@li... > >> List: https://lists.sourceforge.net/lists/listinfo/backuppc-users > >> Wiki: http://backuppc.wiki.sourceforge.net > >> Project: http://backuppc.sourceforge.net/ > >> > >> > > > > ------------------------------------------------------------------------- > > Check out the new SourceForge.net Marketplace. > > It's the best place to buy or sell services for > > just about anything Open Source. > > http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace > > _______________________________________________ > > BackupPC-users mailing list > > Bac...@li... > > List: https://lists.sourceforge.net/lists/listinfo/backuppc-users > > Wiki: http://backuppc.wiki.sourceforge.net > > Project: http://backuppc.sourceforge.net/ > > > > > > ------------------------------------------------------------------------- > Check out the new SourceForge.net Marketplace. > It's the best place to buy or sell services for > just about anything Open Source. > http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace > _______________________________________________ > BackupPC-users mailing list > Bac...@li... > List: https://lists.sourceforge.net/lists/listinfo/backuppc-users > Wiki: http://backuppc.wiki.sourceforge.net > Project: http://backuppc.sourceforge.net/ > |
From: Les M. <le...@fu...> - 2008-03-26 19:27:56
|
Paul Mantz wrote: > I have a pretty good inclination as to why that's the case. If I > recall correctly, the BackupPC_Admin cgi interface has setuid > permissions that allow it only to be run by the backuppc user. It's > recommended that you run your webserver as the backuppc user rather > than a separate webserver user (nobody, apache, www, etc) for that > purpose and to avoid any conflicts. What changes have you made to > allow your server to run as a different user? > You really only need to run the web server as the backuppc user in the case where you run mod_perl and it can't run suid. In the suid case, the BackupPC_Admin script must be owned by the backuppc user and setuid, and it must be executable by group with the group set to the web server user. -- Les Mikesell les...@gm... |
From: Les M. <les...@gm...> - 2008-03-26 15:55:50
|
Huck wrote: > While I was on break, a switch went down...so unwittingly the computer > teacher reset all of the servers by cold-booting them... > > Well..the backuppc machine now gives a 403 access denied error message > when trying to load http://localhost.localdomain/backuppc from the > local machine...and the same when trying to access it from any other > computer on the network. > > Any ideas/thoughts why this would occur? Must be a change in the httpd.conf setup that didn't take effect until it was restarted - or a permission/ownership change on the backuppc script - or someone activated SELinux. Usually the /var/log/httpd/error_log will have some details about whether a permission problem is in the configuration or filesystem. -- Les Mikesell le...@fu... |
From: Huck <dhu...@pa...> - 2008-03-26 18:14:16
|
Well...I really don't know HOW or why or what-have-you... but I added www-data to the 'backuppc' group...and restarted apache2 and it "solved" the problem...making absolutely no sense to me as the permissions on the entire backuppc /usr/share/backuppc/* as well as those parent directories were all rwxr-xr-x ... --Huck Huck wrote: > only 2 things stood out... > > [Tue Mar 25 18:53:53 2008] [error] [client 10.1.3.80] (13)Permission > denied: access to /backuppc denied > [Wed Mar 26 06:25:02 2008] [error] make_obcallback: could not import > mod_python.apache.\n > > found and solved the mod_python.apache issue... > but even after upgrading backuppc...still have a 'rights' issue... > I'm wondering if it has something to do with the .htaccess file? > > I don't know....there is no SELINUX on this server. > in /usr/share/backuppc what SHOULD the file-rights be and ownership? > > > --Huck > > Nils Breunese (Lemonbit) wrote: >> Huck wrote: >> >>> While I was on break, a switch went down...so unwittingly the computer >>> teacher reset all of the servers by cold-booting them... >>> >>> Well..the backuppc machine now gives a 403 access denied error message >>> when trying to load http://localhost.localdomain/backuppc from the >>> local machine...and the same when trying to access it from any other >>> computer on the network. >>> >>> Any ideas/thoughts why this would occur? >> Your webserver error_log should be able to tell you more. Have you >> checked that? >> >> Nils Breunese. >> >> ------------------------------------------------------------------------- >> Check out the new SourceForge.net Marketplace. >> It's the best place to buy or sell services for >> just about anything Open Source. >> http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace >> _______________________________________________ >> BackupPC-users mailing list >> Bac...@li... >> List: https://lists.sourceforge.net/lists/listinfo/backuppc-users >> Wiki: http://backuppc.wiki.sourceforge.net >> Project: http://backuppc.sourceforge.net/ >> >> > > ------------------------------------------------------------------------- > Check out the new SourceForge.net Marketplace. > It's the best place to buy or sell services for > just about anything Open Source. > http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace > _______________________________________________ > BackupPC-users mailing list > Bac...@li... > List: https://lists.sourceforge.net/lists/listinfo/backuppc-users > Wiki: http://backuppc.wiki.sourceforge.net > Project: http://backuppc.sourceforge.net/ > > |