Re: [Bobs-devel] backup over nfs ok, but files not visibles with the php web interface

[Sylvain M. <sy...@me...>]

> Sylvain MEILARD wrote:
>
>>>Hi,
>>>
>>>Am Mo, 2004-11-29 um 10.44 schrieb Sylvain MEILARD:
>>>
>>>
>>>>Hello,
>>>>
>>>>I'm trying to use bobs to backup 2 folders exported by nfs :
>>>>/home/cvsroot and
>>>>/home/bugs
>>>>
>>>>All works great for the first directory, but i can't see files  of th=
e
>>>>second
>>>>directory with the web interface. I suspect the problem is related to=
 the
>>>>files'rights :
>>>>Files in /home/bugs have the following rights :
>>>>[root@machine-cvs root]# ll /home/bugs
>>>>total 21000
>>>>-rw-r-----    1 mysql    mysql        8868 jui  4  2003 attachments.f=
rm
>>>>-rw-r-----    1 mysql    mysql    20388072 sep 27 11:09 attachments.M=
YD
>>>>-rw-r-----    1 mysql    mysql       10240 sep 27 11:09 attachments.M=
YI
>>>>....
>>>>
>>>>The backup seem's to be ok :
>>>>sylvain@pasteque bobs $ ll /var/bobsdata/current/machine-cvs/bugzilla
>>>>total 21000
>>>>-rw-r-----  1 76 76     8868 jui  4  2003 attachments.frm
>>>>-rw-r-----  1 76 76 20388072 sep 27 11:09 attachments.MYD
>>>>-rw-r-----  1 76 76    10240 sep 27 11:09 attachments.MYI
>>>>...
>>>>
>>>>machine-cvs contains directory i want to backup
>>>>pasteque is the machine on which bobs is installed.
>>>>
>>>>Do the backuped files and dir have to be readable by apache to appear=
 in
>>>> the
>>>>web interface ?
>>>>
>>>>
>>>Yes, backups should be readable by bobs, else you will not be able to
>>>view it by bobs, I assume.
>>>
>>>
>>
>>OK, that's what i was thinking, but the files which are backed up don't=
 have
>>the right of reading for others. I'm not sure it's a good idea to chang=
e the
>>rights on thoses files. I was hopping there is a way to use cmdloop to
>> perform
>>operations for which apache's rights are not enought. am i wrong ? (yes=
 i'm
>>affraid...)
>>
>>thanks !
>>
>>sylvain
>>
>>
>>
> But you can still use konqueror to manage the files. You can even split
> the screen with sftp:// or an nfs mount on one side if you want to
> restore files. It's just the restore interface that's innoperative. Any
> ideas on how to fix that without breaking security too badly?

I think i won't be easy... Apache should have reading right on backuped f=
iles.
So cmdloop should additionaly back up uids'owners of files, and then make
apache the owner. When restoring files, cmdloop would have to change agai=
n the
owner of backed up files to be restored, and then restore them (and then
remake apache own the files). The problem is that it would be hard to avo=
id a
bad user to restore files on which he has no right...
For now, what append if a user try to restore files on which he has no ri=
ght ?
cmdloop does a "su user -" before rsyncing ? It implies that uid have to =
be
synchronized between the bobs'machine and machines to be backed up, isn't=
 it ?


Sylvain

>
> Joe
>
>
>
> -------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT Products from real users=
.
> Discover which products truly live up to the hype. Start reading now.
> http://productguide.itmanagersjournal.com/
> _______________________________________________
> Bobs-devel mailing list
> Bob...@li...
> https://lists.sourceforge.net/lists/listinfo/bobs-devel
>
>