Rob, The problem had to do with setting the right permissions for the user that I chose to control BackupPC, i.e., apache. See my post below. I do agree with you that apache, which runs httpd, should not be the user running BackupPC. My initial goal was to get any setup this to work and then worry about security concerns. I am not planning to make the system live until I iron out all the problems, including security issues.
I appreciate your advise. I'll definately use it. As for my particular problem, which would exist even if I made 'backuppc' user run BackupPC, see the following post that I emailed previously: ************************************Ok, never mind. I think I solved my own problem. The /data directory had root ownship. I thought this was OK since /data/BackupPC was owned by apache user. However, clearly, that was not good enough. I changed the ownership of: chown apache.apache -R /data and everything worked.... Well, at least it started backing stuff up. It started backing up '/' even though I specified in BackupFilesOnly '/opt'. Strange... I guess, I have to go back and read the docs again.... If anyone knows of a quick fix for this, let me know. Thanks, Yaakov. ************************************ Thank you, Yaakov. On 7/19/07, Rob Owens <[EMAIL PROTECTED]> wrote: > I think you got that error because /data/BackupPC is owned by user > apache. It's supposed to be owned by user backuppc. Same goes for any > of its subdirectories. > > -Rob > > Yaakov Chaikin wrote: > > With all these side (albeit important) security issues, I never got an > > answer to my question. Why am I am getting a Permission Denied error > > and what am I doing wrong? > > > > Thanks, > > Yaakov. > > > > On 7/18/07, Rob Owens <[EMAIL PROTECTED]> wrote: > > > >> I believe you can look in the XferLog in the web interface to see the > >> command that BackupPC attempted to run. > >> > >> I know a bit about ssh and security, but I'm relatively new to > >> BackupPC. I've only been using it about 2 weeks. > >> > >> -Rob > >> > >> Yaakov Chaikin wrote: > >> > >>> I am not really sure how to set this up. Does BackupPC start its own > >>> process with whatever user I specify in config.pl? If so, then I can > >>> see how this can be done, i.e., by simply specifying 'backuppc' as the > >>> user in config.pl (I think there is a place in there to do this, > >>> right? I don't have that file in front of me at the moment.) However, > >>> if BackupPC does not start its own process under the specified in > >>> config.pl user, then I am not sure how to set this up. > >>> > >>> Any help? > >>> > >>> Thanks, > >>> Yaakov. > >>> > >>> On 7/18/07, Rob Owens <[EMAIL PROTECTED]> wrote: > >>> > >>>> You want /data/BackupPC to be owned by user "backuppc". You shouldn't > >>>> be allowing user "apache" to do anything besides run the webserver. > >>>> User "apache" should not be allowed to log in as root. User "backuppc" > >>>> should be allowed to log into the host machines as root (assuming you're > >>>> using rsync as your transport). > >>>> > >>>> -Rob > >>>> > >>>> Yaakov Chaikin wrote: > >>>> > >>>>> Hi, > >>>>> > >>>>> I am running BackupPC 3.0 and having trouble getting it to back up. So > >>>>> far, I am just running a test back up on the machine that hosts the > >>>>> BackupPC. > >>>>> > >>>>> Here is the error log that I am getting when I click "Start Full > >>>>> > >>>> Backup": > >>>> > >>>>> ************************************** > >>>>> 2007-07-17 22:26:26 User yaakov requested backup of tbiqdev (tbiqdev) > >>>>> 2007-07-17 22:26:26 tbiqdev: mkdir /data/BackupPC: Permission denied > >>>>> at //usr/share/BackupPC/bin/BackupPC_dump line 193 > >>>>> ************************************** > >>>>> > >>>>> The /data/BackupPC is directory where I specified I wanted the backups > >>>>> to be stored. It's owned by the apache user since this is the user > >>>>> that runs the 'httpd' server. > >>>>> > >>>>> What am I doing wrong? > >>>>> > >>>>> Thanks, > >>>>> Yaakov. > >>>>> > >>>>> P.S. I followed the instructions and set up ssh key sharing. So, now > >>>>> the user apache can log in as root without providing a password. I > >>>>> don't know if this has anything to do with that since the client and > >>>>> server is the same machine, but I figured I'd mention it. > >>>>> > >>>>> > >>>>> > >>>> ------------------------------------------------------------------------- > >>>> > >>>> > >>>>> This SF.net email is sponsored by DB2 Express > >>>>> Download DB2 Express C - the FREE version of DB2 express and take > >>>>> control of your XML. No limits. Just data. Click to get it now. > >>>>> http://sourceforge.net/powerbar/db2/ > >>>>> _______________________________________________ > >>>>> BackupPC-users mailing list > >>>>> [email protected] > >>>>> https://lists.sourceforge.net/lists/listinfo/backuppc-users > >>>>> http://backuppc.sourceforge.net/ > >>>>> > >>>>> > > > > ------------------------------------------------------------------------- > > This SF.net email is sponsored by DB2 Express > > Download DB2 Express C - the FREE version of DB2 express and take > > control of your XML. No limits. Just data. Click to get it now. > > http://sourceforge.net/powerbar/db2/ > > _______________________________________________ > > BackupPC-users mailing list > > [email protected] > > https://lists.sourceforge.net/lists/listinfo/backuppc-users > > http://backuppc.sourceforge.net/ > > > ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ BackupPC-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
