exclude list problems (PEBKAC?)

2002-10-11 Thread pointer



I've checked the docs/FAQ/google/archives and I must be missing
something really simple. :\

I have an amanda client that I'm backing having problems backing up.

We're using tar for /usr on this client:

SNIP disklist snippet
client /usr no-mirror-tar
SNIP

Here's the def for no-mirror-tar:

SNIP amanda.conf snippet
define dumptype no-mirror-tar {
global
program GNUTAR
compress client fast
comment usr partitions dumped with tar
exclude list .amanda-exclude.gtar
priority medium
}
SNIP

The global config only has a comment and 'index yes.'

The exclude list (on the client) has this:

SNIP
$ cat /usr/.amanda-exclude.gtar
./local/mirror
./local/www/logs
SNIP



The runtar.debug looks like this:

SNIP
gtar: version 2.4.2
running: /usr/local/bin/tar: gtar --create --directory /usr
--listed-incremental /usr/local/var/amanda/gnutar-lists/client_usr_0.new
--sparse --one-file-system --ignore-failed-read --totals --file -
--exclude-from /usr/.amanda-exclude.gtar .
SNIP

And the backup of this partition errors out with this:

SNIP
/-- client  /usr lev 0 FAILED [/usr/local/bin/tar returned 2]
sendbackup: start [client:/usr level 0]
sendbackup: info BACKUP=/usr/local/bin/tar
sendbackup: info RECOVER_CMD=/usr/local/bin/gzip -dc |/usr/local/bin/tar
-f... -
sendbackup: info COMPRESS_SUFFIX=.gz
sendbackup: info end
? gtar: Cannot add file ./local/mirror/pub/redhat/i386
.
.
.
| Total bytes written: 8484853760
? gtar: Error exit delayed from previous errors
sendbackup: error [/usr/local/bin/tar returned 2]
\
SNIP

There's also a 'file changed as we read it' error, but all of these
errors come from ./local (/usr/local) in places that are excluded (see
above).

Suggestions?

Thanks,

Mike




Re: exclude list problems (PEBKAC?)

2002-10-11 Thread Frank Smith



--On Friday, October 11, 2002 10:26:58 -0500 pointer [EMAIL PROTECTED] wrote:



 I've checked the docs/FAQ/google/archives and I must be missing
 something really simple. :\

 I have an amanda client that I'm backing having problems backing up.

 We're using tar for /usr on this client:

 SNIP disklist snippet
 client /usr no-mirror-tar
 SNIP

 Here's the def for no-mirror-tar:

 SNIP amanda.conf snippet
 define dumptype no-mirror-tar {
 global
 program GNUTAR
 compress client fast
 comment usr partitions dumped with tar
 exclude list .amanda-exclude.gtar
 priority medium
 }
 SNIP

 The global config only has a comment and 'index yes.'

 The exclude list (on the client) has this:

 SNIP
 $ cat /usr/.amanda-exclude.gtar
 ./local/mirror
 ./local/www/logs
 SNIP



 The runtar.debug looks like this:

 SNIP
 gtar: version 2.4.2
 running: /usr/local/bin/tar: gtar --create --directory /usr
 --listed-incremental /usr/local/var/amanda/gnutar-lists/client_usr_0.new
 --sparse --one-file-system --ignore-failed-read --totals --file -
 --exclude-from /usr/.amanda-exclude.gtar .
 SNIP

 And the backup of this partition errors out with this:

 SNIP
 /-- client  /usr lev 0 FAILED [/usr/local/bin/tar returned 2]
 sendbackup: start [client:/usr level 0]
 sendbackup: info BACKUP=/usr/local/bin/tar
 sendbackup: info RECOVER_CMD=/usr/local/bin/gzip -dc |/usr/local/bin/tar
 -f... -
 sendbackup: info COMPRESS_SUFFIX=.gz
 sendbackup: info end
 ? gtar: Cannot add file ./local/mirror/pub/redhat/i386
 .
 .
 .
| Total bytes written: 8484853760
 ? gtar: Error exit delayed from previous errors
 sendbackup: error [/usr/local/bin/tar returned 2]
 \
 SNIP

 There's also a 'file changed as we read it' error, but all of these
 errors come from ./local (/usr/local) in places that are excluded (see
 above).

 Suggestions?

 Thanks,

 Mike

Your config looks correct to me.  What does '/usr/local/bin/tar --version'
show? Can your backup user read the exclude file?

Frank


--
Frank Smith[EMAIL PROTECTED]
Systems Administrator Voice: 512-374-4673
Hoover's Online Fax: 512-374-4501



Re: exclude list problems (PEBKAC?)

2002-10-11 Thread Jon LaBadie

On Fri, Oct 11, 2002 at 10:26:58AM -0500, pointer wrote:
 
 
 I've checked the docs/FAQ/google/archives and I must be missing
 something really simple. :\
 
 I have an amanda client that I'm backing having problems backing up.
 
 We're using tar for /usr on this client:
 
 
 SNIP
 /-- client  /usr lev 0 FAILED [/usr/local/bin/tar returned 2]
 sendbackup: start [client:/usr level 0]
 sendbackup: info BACKUP=/usr/local/bin/tar
 sendbackup: info RECOVER_CMD=/usr/local/bin/gzip -dc |/usr/local/bin/tar
 -f... -
 sendbackup: info COMPRESS_SUFFIX=.gz
 sendbackup: info end
 ? gtar: Cannot add file ./local/mirror/pub/redhat/i386
 .
 .
 .
 | Total bytes written: 8484853760
 ? gtar: Error exit delayed from previous errors
 sendbackup: error [/usr/local/bin/tar returned 2]
 \
 SNIP

Even when gnutar ignores failed reads, it exits with an error message
and an error status (the returned 2 above).

You can compile amanda to consider this exit message and status as normal
by placing in config.h a line like

#define IGNORE_TAR_ERRORS 1

-- 
Jon H. LaBadie  [EMAIL PROTECTED]
 JG Computing
 4455 Province Line Road(609) 252-0159
 Princeton, NJ  08540-4322  (609) 683-7220 (fax)



Re: exclude list problems (PEBKAC?)

2002-10-11 Thread pointer

Frank,

On Fri, 2002-10-11 at 10:50, Frank Smith wrote:
 Your config looks correct to me.
 What does '/usr/local/bin/tar --version' show?

SNIP
$ /usr/local/bin/tar  --version
tar (GNU tar) 1.13

Copyright (C) 1988, 92,93,94,95,96,97,98, 1999 Free Software Foundation,
Inc.
This is free software; see the source for copying conditions.  There is
NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR
PURPOSE.

Written by John Gilmore and Jay Fenlason.
SNIP

 Can your backup user read the exclude file?

Yes.

SNIP
$ ls -al /usr/.amanda-exclude.gtar
-rw-r--r--   1 root other  32 Oct 10 10:22
/usr/.amanda-exclude.gtar
SNIP

Cheers,

Mike





Re: exclude list problems (PEBKAC?)

2002-10-11 Thread Joshua Baker-LePain

On 11 Oct 2002 at 11:58am, pointer wrote

 On Fri, 2002-10-11 at 10:50, Frank Smith wrote:
  Your config looks correct to me.
  What does '/usr/local/bin/tar --version' show?
 
 SNIP
 $ /usr/local/bin/tar  --version
 tar (GNU tar) 1.13

Bad.  Bad bad bad.  If you're using indexing, they're broken.  amrecover 
won't work.  Run, don't walk, to download 1.13.25 from 
ftp://alpha.gnu.org.

-- 
Joshua Baker-LePain
Department of Biomedical Engineering
Duke University




Re: exclude list problems (PEBKAC?)

2002-10-11 Thread Frank Smith

--On Friday, October 11, 2002 11:58:27 -0500 pointer [EMAIL PROTECTED] wrote:

 Frank,

 On Fri, 2002-10-11 at 10:50, Frank Smith wrote:
 Your config looks correct to me.
 What does '/usr/local/bin/tar --version' show?

 SNIP
 $ /usr/local/bin/tar  --version
 tar (GNU tar) 1.13

 Copyright (C) 1988, 92,93,94,95,96,97,98, 1999 Free Software Foundation,
 Inc.
 This is free software; see the source for copying conditions.  There is
 NO
 warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR
 PURPOSE.

 Written by John Gilmore and Jay Fenlason.
 SNIP

 Can your backup user read the exclude file?

 Yes.

 SNIP
 $ ls -al /usr/.amanda-exclude.gtar
 -rw-r--r--   1 root other  32 Oct 10 10:22
 /usr/.amanda-exclude.gtar
 SNIP

 Cheers,

 Mike

I'm stumped on why your excludes aren't working.

Possible unrelated problem for you: does anyone on the list remember if
tar 1.13 was one of the versions with the bad index file problem (the
infamous 'big numbers')?

Frank



--
Frank Smith[EMAIL PROTECTED]
Systems Administrator Voice: 512-374-4673
Hoover's Online Fax: 512-374-4501



Re: exclude list problems (PEBKAC?)

2002-10-11 Thread pointer

Joshua,

On Fri, 2002-10-11 at 11:50, Joshua Baker-LePain wrote:
 Bad.  Bad bad bad.  If you're using indexing, they're broken.  amrecover 
 won't work.  Run, don't walk, to download 1.13.25 from 
 ftp://alpha.gnu.org.

Thanks for the heads-up.  I'd seen this, but hadn't gotten around to
updating it.  Yes, bad, bad, bad!  Anyone know when a new version is
coming out to fix CAN-2002-0399?

Did I misunderstand the vuln announcement, or is this really only
exploitable when a superuser extracts files from a tarball without
looking at the contents...?

SNIP
$ tar --version
tar (GNU tar) 1.13.25
Copyright (C) 2001 Free Software Foundation, Inc.
This program comes with NO WARRANTY, to the extent permitted by law.
You may redistribute it under the terms of the GNU General Public
License;
see the file named COPYING for details.
Written by John Gilmore and Jay Fenlason.
SNIP

Cheers,

Mike




Re: exclude list problems (PEBKAC?)

2002-10-11 Thread Gene Heskett

On Friday 11 October 2002 12:58, Frank Smith wrote:
--On Friday, October 11, 2002 11:58:27 -0500 pointer 
[EMAIL PROTECTED] wrote:
 Frank,

 On Fri, 2002-10-11 at 10:50, Frank Smith wrote:
 Your config looks correct to me.
 What does '/usr/local/bin/tar --version' show?

 SNIP
 $ /usr/local/bin/tar  --version
 tar (GNU tar) 1.13

 Copyright (C) 1988, 92,93,94,95,96,97,98, 1999 Free Software
 Foundation, Inc.
 This is free software; see the source for copying conditions. 
 There is NO
 warranty; not even for MERCHANTABILITY or FITNESS FOR A
 PARTICULAR PURPOSE.

 Written by John Gilmore and Jay Fenlason.
 SNIP

 Can your backup user read the exclude file?

 Yes.

 SNIP
 $ ls -al /usr/.amanda-exclude.gtar
 -rw-r--r--   1 root other  32 Oct 10 10:22
 /usr/.amanda-exclude.gtar
 SNIP

 Cheers,

 Mike

I'm stumped on why your excludes aren't working.

Possible unrelated problem for you: does anyone on the list
 remember if tar 1.13 was one of the versions with the bad index
 file problem (the infamous 'big numbers')?

Frank

That was officially fixed with 1.13-19 Frank, it and 1.13-25 both 
seem to work just fine.

What burns me a bit is that the usual tar --version, doesn't eject 
the minor number, so thery are all 1.13's.  One must forcibly 
remove any tar thats there, and reinstall a known good one to be 
sure.

-- 
Cheers, Gene
AMD K6-III@500mhz 320M
Athlon1600XP@1400mhz  512M
99.17% setiathome rank, not too shabby for a WV hillbilly



Re: exclude list problems (PEBKAC?)

2002-10-11 Thread Gene Heskett

On Friday 11 October 2002 14:04, pointer wrote:
Joshua,

On Fri, 2002-10-11 at 11:50, Joshua Baker-LePain wrote:
 Bad.  Bad bad bad.  If you're using indexing, they're broken. 
 amrecover won't work.  Run, don't walk, to download 1.13.25 from
 ftp://alpha.gnu.org.

Thanks for the heads-up.  I'd seen this, but hadn't gotten around
 to updating it.  Yes, bad, bad, bad!  Anyone know when a new
 version is coming out to fix CAN-2002-0399?

Did I misunderstand the vuln announcement, or is this really only
exploitable when a superuser extracts files from a tarball without
looking at the contents...?

Thats the way I read that announcement.

SNIP
$ tar --version
tar (GNU tar) 1.13.25
Copyright (C) 2001 Free Software Foundation, Inc.
This program comes with NO WARRANTY, to the extent permitted by
 law. You may redistribute it under the terms of the GNU General
 Public License;
see the file named COPYING for details.
Written by John Gilmore and Jay Fenlason.
SNIP

this is the good one AFAIK.

-- 
Cheers, Gene
AMD K6-III@500mhz 320M
Athlon1600XP@1400mhz  512M
99.17% setiathome rank, not too shabby for a WV hillbilly



Re: exclude list problems (PEBKAC?)

2002-10-11 Thread Frank Smith

--On Friday, October 11, 2002 15:11:00 -0400 Gene Heskett [EMAIL PROTECTED] 
wrote:

 On Friday 11 October 2002 12:58, Frank Smith wrote:

 Possible unrelated problem for you: does anyone on the list
 remember if tar 1.13 was one of the versions with the bad index
 file problem (the infamous 'big numbers')?

 Frank

 That was officially fixed with 1.13-19 Frank, it and 1.13-25 both
 seem to work just fine.

 What burns me a bit is that the usual tar --version, doesn't eject
 the minor number, so thery are all 1.13's.  One must forcibly
 remove any tar thats there, and reinstall a known good one to be
 sure.

Hmm, on my Debian linux server here I get:
# /usr/local/bin/tar --version
tar (GNU tar) 1.13.19


and on one of my Solaris boxes:
# /usr/local/bin/tar --version
tar (GNU tar) 1.13.25

Both were compiled from source, but even on a RedHat 7.2 box I see:
#/bin/tar --version
tar (GNU tar) 1.13.19

Maybe they started including the minor number in the version string
somewhere along the line.

Frank

--
Frank Smith [EMAIL PROTECTED]
Systems Administrator  Voice: 512-374-4673
Hoover's Online  Fax: 512-374-4501