Ok, I dug up something from the docs, which says this:
*******************************************************
If you are using mod_perl then apache should run as user __BACKUPPCUSER__.
*******************************************************
I do have lines in the httpd.conf which load the mod_perl module. So,
I DO have to run apache as the same user as the BackupPC software...
The only question that I have now is whether people would recommend
not loading mod_perl and then able to run Apache as a different user
than BackupPC.
Currently, the user that runs Apache has access to Subversion
repositories, so there is definitely a reason to separate them...
Question is whether it's anymore secure or if the way BackupPC works,
it won't matter in the end.
Any help would be appreciated.
Thanks,
Yaakov.
On 7/22/07, Yaakov Chaikin <[EMAIL PROTECTED]> wrote:
> Hi,
>
> Now that I got my BackupPC working, I broke it again trying to secure
> it further.
>
> Previously, I was told here that I should not be running Apache web
> server as the same user as running BackupPC.
>
> So, I kept Apache running as 'apache' user and switched BackupPC (in
> config.pl) to be "backuppc" user. I also switched all the directories
> that have to do with BackupPC and previously owned by "apache" user to
> being owned by "backuppc" user.
>
> Now, when I try to go through the web browser, the server status page
> give me an error:
> *************************************************************************************
> Error: Wrong user: my userid is 48, instead of 498(backuppc)
>
> This script needs to run as the user specified in $Conf{BackupPCUser},
> which is set to backuppc.
>
> This is an installation problem. If you are using mod_perl then it
> appears that Apache is not running as user backuppc. If you are not
> using mod_perl, then most like setuid is not working properly on
> BackupPC_Admin. Check the permissions on
> //usr/share/BackupPC/sbin//BackupPC_Admin and look at the
> documentation.
> *************************************************************************************
>
> From the error message, it almost sounds like I SHOULD have the user
> that runs Apache be the same user that runs BackupPC. Is that true? If
> not, then how do I fix this problem?
>
> Currently, the //usr/share/BackupPC/sbin//BackupPC_Admin is owned by
> "backuppc" user.
>
> Thanks,
> Yaakov.
>
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/backuppc-users
http://backuppc.sourceforge.net/
