Re: [BackupPC-users] Fwd: Re: BackupPC v4 for Fedora / EPEL Update

[tbuchanan]

From:   Adam Goryachev <mailingli...@websitemanagers.com.au>
To: backuppc-users@lists.sourceforge.net
Date:   04/04/2017 09:38 AM
Subject:        Re: [BackupPC-users] Fwd: Re: BackupPC v4 for Fedora / 
EPEL Update



On 4/4/17 21:19, Bob of Donelson Trophy wrote:
On 2017-04-03 07:06, Adam Goryachev wrote:
Perfect, there is your "smoking gun".
So, do the following:
ps aux|grep apache
See what user apache is running as (you also need the group, probably just 
get that from the apache config files).

Now do the following commands:
ls -ld /etc/BackupPC
ls -ld /etc/BackupPC/apache.users

Lets assume apache is running with the user apache
Lets assume the /etc/BackupPC directory is owned by backuppc, and is 
secured so that it is not world readable (a pretty good idea since it is 
likely to contain passwords in the various config files).
Lets assume the /etc/BackupPC/apache.users file is owned by backuppc as 
well.

You would need to do the following commands to "fix" it (ie, allow apache 
to read the passwd file).
chgrp apache /etc/BackupPC
chmod g+rx /etc/BackupPC (edit config probably won't work, but it should 
fix your current problem).

You might also need the following:
chgrp apache /etc/BackupPC/apache.users
chmod g+r /etc/BackupPC/apache.users

The other option is to simply do this:
mv /etc/BackupPC/apache.users /etc/apache2/backuppc.users
chown apache /etc/apache2/backuppc.users
Update the apache config file to point to the new location.

Then, restart apache and you should be fine.

Regards,
Adam

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/
 
These made sense and I ran your suggestions. The first login attempt and I 
received the appropriate login box, entered user name and passwd but still 
only five (5) entires in navigation menu. Logoff, close browser tab, start 
new tab, enter backuppc ipaddress and just login, no request for user name 
or passwd.
Thanks for your suggestions, Adam. These match (in the CentOS way) to what 
I was seeing on Ubuntu running v3.3.1. I still think it is a permissions 
issue.
 
I don't think it is a permissions issue (at least not a unix permissions 
issue). Check your apache error log to ensure there is nothing there.
I expect the problem is that you haven't told backuppc that your username 
is the administrator.
You need to make sure the username you enter matches the backuppc 
configuration:
$Conf{BackupPCUser} = 'backuppc';

So for me, I login with username backuppc.

Regards,
Adam
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/


What is your setting for $Conf{CgiAdminUsers} in /etc/BackupPC/config.pl? 
This gives the full menu for me when I log in as a user defined in this 
parameter.

example, $Conf{CgiAdminUsers} = 'craig celia';
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Fwd: Re: BackupPC v4 for Fedora / EPEL Update

[Richard Shaw]

On Tue, Apr 4, 2017 at 8:37 AM, Adam Goryachev <
mailingli...@websitemanagers.com.au> wrote:

> I don't think it is a permissions issue (at least not a unix permissions
> issue). Check your apache error log to ensure there is nothing there.
> I expect the problem is that you haven't told backuppc that your username
> is the administrator.
> You need to make sure the username you enter matches the backuppc
> configuration:
> $Conf{BackupPCUser} = 'backuppc';
>
> So for me, I login with username backuppc.
>

Ah! That's probably it. I need to update the README to mention that the
username you setup using htpasswd needs to be set in config.pl.

Thanks,
Richard
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Fwd: Re: BackupPC v4 for Fedora / EPEL Update

[Adam Goryachev]

On 4/4/17 21:19, Bob of Donelson Trophy wrote:


On 2017-04-03 07:06, Adam Goryachev wrote:


Perfect, there is your "smoking gun".
So, do the following:
ps aux|grep apache
See what user apache is running as (you also need the group, probably 
just get that from the apache config files).


Now do the following commands:
ls -ld /etc/BackupPC
ls -ld /etc/BackupPC/apache.users

Lets assume apache is running with the user apache
Lets assume the /etc/BackupPC directory is owned by backuppc, and is 
secured so that it is not world readable (a pretty good idea since it 
is likely to contain passwords in the various config files).
Lets assume the /etc/BackupPC/apache.users file is owned by backuppc 
as well.


You would need to do the following commands to "fix" it (ie, allow 
apache to read the passwd file).

chgrp apache /etc/BackupPC
chmod g+rx /etc/BackupPC (edit config probably won't work, but it 
should fix your current problem).


You might also need the following:
chgrp apache /etc/BackupPC/apache.users
chmod g+r /etc/BackupPC/apache.users

The other option is to simply do this:
mv /etc/BackupPC/apache.users /etc/apache2/backuppc.users
chown apache /etc/apache2/backuppc.users
Update the apache config file to point to the new location.

Then, restart apache and you should be fine.

Regards,
Adam

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net 


List: https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki: http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/


These made sense and I ran your suggestions. The first login attempt 
and I received the appropriate login box, entered user name and passwd 
but still only five (5) entires in navigation menu. Logoff, close 
browser tab, start new tab, enter backuppc ipaddress and just login, 
no request for user name or passwd.


Thanks for your suggestions, Adam. These match (in the CentOS way) to 
what I was seeing on Ubuntu running v3.3.1. I still think it is a 
permissions issue.


I don't think it is a permissions issue (at least not a unix permissions 
issue). Check your apache error log to ensure there is nothing there.
I expect the problem is that you haven't told backuppc that your 
username is the administrator.
You need to make sure the username you enter matches the backuppc 
configuration:

$Conf{BackupPCUser} = 'backuppc';

So for me, I login with username backuppc.

Regards,
Adam
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Fwd: Re: BackupPC v4 for Fedora / EPEL Update

[Bob of Donelson Trophy]

On 2017-04-03 07:29, Richard Shaw wrote:

> I think I figured it out...  
> 
> I'm not sure if I should automate this in the packaging or not but you just 
> need to add apache to the backuppc group... 
> 
> usermod -a -G backuppc apache 
> 
> You may have to reboot for it to take effect since you can't "login" as 
> apache... 
> 
> Thanks, 
> Richard 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot 
> ___
> BackupPC-users mailing list
> BackupPC-users@lists.sourceforge.net
> List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
> Wiki:http://backuppc.wiki.sourceforge.net
> Project: http://backuppc.sourceforge.net/

Did as suggested. Can login, still missing many menu entries. (See one
of my other emails. Missing 7 or 8 entries compared to v3.3.1 version.)

-- 
___

Bob Wooden of Donelson Trophy--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Fwd: Re: BackupPC v4 for Fedora / EPEL Update

[Bob of Donelson Trophy]

On 2017-04-03 07:06, Adam Goryachev wrote:

> Perfect, there is your "smoking gun".
> So, do the following:
> ps aux|grep apache
> See what user apache is running as (you also need the group, probably just 
> get that from the apache config files).
> 
> Now do the following commands:
> ls -ld /etc/BackupPC
> ls -ld /etc/BackupPC/apache.users
> 
> Lets assume apache is running with the user apache
> Lets assume the /etc/BackupPC directory is owned by backuppc, and is secured 
> so that it is not world readable (a pretty good idea since it is likely to 
> contain passwords in the various config files).
> Lets assume the /etc/BackupPC/apache.users file is owned by backuppc as well.
> 
> You would need to do the following commands to "fix" it (ie, allow apache to 
> read the passwd file).
> chgrp apache /etc/BackupPC
> chmod g+rx /etc/BackupPC (edit config probably won't work, but it should fix 
> your current problem).
> 
> You might also need the following:
> chgrp apache /etc/BackupPC/apache.users
> chmod g+r /etc/BackupPC/apache.users
> 
> The other option is to simply do this:
> mv /etc/BackupPC/apache.users /etc/apache2/backuppc.users
> chown apache /etc/apache2/backuppc.users
> Update the apache config file to point to the new location.
> 
> Then, restart apache and you should be fine.
> 
> Regards,
> Adam
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot 
> ___
> BackupPC-users mailing list
> BackupPC-users@lists.sourceforge.net
> List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
> Wiki:http://backuppc.wiki.sourceforge.net
> Project: http://backuppc.sourceforge.net/

These made sense and I ran your suggestions. The first login attempt and
I received the appropriate login box, entered user name and passwd but
still only five (5) entires in navigation menu. Logoff, close browser
tab, start new tab, enter backuppc ipaddress and just login, no request
for user name or passwd. 

Thanks for your suggestions, Adam. These match (in the CentOS way) to
what I was seeing on Ubuntu running v3.3.1. I still think it is a
permissions issue. 

-- 
___

Bob Wooden of Donelson Trophy--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Fwd: Re: BackupPC v4 for Fedora / EPEL Update

[Richard Shaw]

I think I figured it out...

I'm not sure if I should automate this in the packaging or not but you just
need to add apache to the backuppc group...

usermod -a -G backuppc apache

You may have to reboot for it to take effect since you can't "login" as
apache...

Thanks,
Richard
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Fwd: Re: BackupPC v4 for Fedora / EPEL Update

[Adam Goryachev]

On 3/4/17 21:47, Bob of Donelson Trophy wrote:


On 2017-04-03 05:17, Richard Shaw wrote:

It should not be necessary to run apache as the backuppc user. When I 
have some time I may have to setup a CentOS 7 box up from scratch. 
I'm not sure at this point what I've tweaked but I'm not having the 
same problem.


To Adam,

I checked the apache error_log and found "(13)Permission denied: 
[client 192.168.242.29:43348] AH01620: Could not open password file: 
/etc/BackupPC/apache.users". Hum-m-m-m??



Perfect, there is your "smoking gun".
So, do the following:
ps aux|grep apache
See what user apache is running as (you also need the group, probably 
just get that from the apache config files).


Now do the following commands:
ls -ld /etc/BackupPC
ls -ld /etc/BackupPC/apache.users

Lets assume apache is running with the user apache
Lets assume the /etc/BackupPC directory is owned by backuppc, and is 
secured so that it is not world readable (a pretty good idea since it is 
likely to contain passwords in the various config files).
Lets assume the /etc/BackupPC/apache.users file is owned by backuppc as 
well.


You would need to do the following commands to "fix" it (ie, allow 
apache to read the passwd file).

chgrp apache /etc/BackupPC
chmod g+rx /etc/BackupPC (edit config probably won't work, but it should 
fix your current problem).


You might also need the following:
chgrp apache /etc/BackupPC/apache.users
chmod g+r /etc/BackupPC/apache.users

The other option is to simply do this:
mv /etc/BackupPC/apache.users /etc/apache2/backuppc.users
chown apache /etc/apache2/backuppc.users
Update the apache config file to point to the new location.

Then, restart apache and you should be fine.

Regards,
Adam
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Fwd: Re: BackupPC v4 for Fedora / EPEL Update

[Bob of Donelson Trophy]

On 2017-04-03 05:17, Richard Shaw wrote:

> It should not be necessary to run apache as the backuppc user. When I have 
> some time I may have to setup a CentOS 7 box up from scratch. I'm not sure at 
> this point what I've tweaked but I'm not having the same problem. 
> 
> Thanks, 
> Richard 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot 
> ___
> BackupPC-users mailing list
> BackupPC-users@lists.sourceforge.net
> List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
> Wiki:http://backuppc.wiki.sourceforge.net
> Project: http://backuppc.sourceforge.net/

To Adam, 

I checked the apache error_log and found "(13)Permission denied: [client
192.168.242.29:43348] AH01620: Could not open password file:
/etc/BackupPC/apache.users". Hum-m-m-m?? 

To Tim, 

I changed the user and group to "backuppc" and noticed this. The first
login asked for the user and password. The second and every logion after
that automatically logged in, no request for user and password. Odd . .
. so I reset the user and group back to apache. 

I also noticed that when I modify the /etc/httpd/conf.d/BackupPC.conf to
allow "Require all granted" it always logs in with asking for user and
password. 

The last thing I noticed is in both cases the navigation menu (on the
left side under "SERVER") contains only five entries. Status, Host
Summary, Documentation, Wiki, Github are listed entries. Compared to my
v3 box, missing are Edit Config, Edit Hosts, Admin Options, LOG File,
Old LOGs, Email Summary, Current Queues, and Sourceforge (which I think
is only there because it's v3.) 

This leads me to believe apache is "seeing" the incorrect permissions
for the backuppc user, for that matter, any user and is not allowing
admin access. Therefore it comes back to a permissions issue. 

Perhaps this info will help Richard or anyone else to guide me to an
operational v4?

-- 
___

Bob Wooden of Donelson Trophy--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Fwd: Re: BackupPC v4 for Fedora / EPEL Update

[Richard Shaw]

It should not be necessary to run apache as the backuppc user. When I have
some time I may have to setup a CentOS 7 box up from scratch. I'm not sure
at this point what I've tweaked but I'm not having the same problem.

Thanks,
Richard
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Fwd: Re: BackupPC v4 for Fedora / EPEL Update

[Tim Herren]

On 03.04.2017 01:25, Adam Goryachev wrote:
> On 03/04/17 06:50, Bob of Donelson Trophy wrote:
>> I have updated to your latest COPR and v4.1.1. Thank you for that.
>>
>> I have been researching signing into the web gui. Even before I 
>> upgraded to v4.1.1 I was having resistance to signing in with the 
>> backuppc user with the htpasswd I have set up.
>>
>> I mentioned in a previous email that the backuppc user appears in the 
>> /etc/BackupPC/apache.users file, as it should. But, When I sign into 
>> the [ipaddress]/BackupPC it gives an "Internal Server Error". If I 
>> modify the /etc/httpd/conf.d/BackupPC.conf file and add "Require all 
>> granted" and comment out the "Require valid-user" I can access the gui 
>> however, I cannot do much of anything. Understandable as BackupPC does 
>> not "know" the user I am accessing it with. When I invert this back to 
>> the correct configuration I am NOT presented with a user login but 
>> rather the "Internal Server Error".
>>
>> What file permissions rights should the /etc/Backup[PC/apache.users 
>> file have?
>>
>>  [root@localhost ~]# ls -alh /etc/BackupPC/
>> total 192K
>> drwxr-x---.  2 backuppc backuppc  112 Apr  1 06:55 .
>> drwxr-xr-x. 80 root root 8.0K Apr  1 07:42 ..
>> -rw-r--r--.  1 root root   47 Apr  1 18:14 apache.users
>> -rw-r--r--.  1 backuppc backuppc  83K Mar 31 13:22 config.pl
>> -rw-r--r--.  1 backuppc backuppc  83K Mar 31 13:22 config.pl.sample
>> -rw-r--r--.  1 backuppc backuppc 2.2K Mar 31 13:22 hosts
>> -rw-r--r--.  1 backuppc backuppc 2.2K Mar 31 13:22 hosts.sample
>> -rw-r-.  1 backuppc backuppc0 Apr  1 17:53 LOCK
>>
>> Does your /etc/BackupPC/ directory have these rights?
>>
>> I am not sure I am looking in the correct place but, I think I am 
>> dealing with a permissions issue.
>>
>> Thoughts?
>>
> 
> Yes, please look at your apache error log file, it will tell you what 
> the problem is.
> Basically, Apache is saying "I don't like this, and I don't know what 
> else to do, please get the sys admin to fix it". That's if it's a 
> permissions error on any of the related files (.htaccess, the password 
> file, or syntax errors, or options that are not permitted etc.
> 
> It is also possible to get an internal server error if the 
> script/program itself can't run, usually the output of the script (error 
> message) will be recorded in the apache error log, so again, that is 
> where you will find out what the problem is.
> 
> Regards,
> Adam
> 
Hi,

I had the same problem you had. All I got when browsing to
http://ipadress/BackupPC was a Error 500 - Internal Server Error.
I did the installation from the rpm on a clean install of minimal CentOS 7.

Your permissions in /etc/BackupPC/ look good to me, I have the same
permissions.
What solved it for me is that I changed the "User" and "Group" in
/etc/httpd/conf/httpd.conf from "apache" to "backuppc" followed by a
"systemctl restart httpd"

After that all worked fine.
I am not sure what would be the correct steps if you use apache on the
same Host for anything else besides BackupPC.

Regards,
Tim

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/

Re: [BackupPC-users] Fwd: Re: BackupPC v4 for Fedora / EPEL Update

[Adam Goryachev]

On 03/04/17 06:50, Bob of Donelson Trophy wrote:
> I have updated to your latest COPR and v4.1.1. Thank you for that.
>
> I have been researching signing into the web gui. Even before I 
> upgraded to v4.1.1 I was having resistance to signing in with the 
> backuppc user with the htpasswd I have set up.
>
> I mentioned in a previous email that the backuppc user appears in the 
> /etc/BackupPC/apache.users file, as it should. But, When I sign into 
> the [ipaddress]/BackupPC it gives an "Internal Server Error". If I 
> modify the /etc/httpd/conf.d/BackupPC.conf file and add "Require all 
> granted" and comment out the "Require valid-user" I can access the gui 
> however, I cannot do much of anything. Understandable as BackupPC does 
> not "know" the user I am accessing it with. When I invert this back to 
> the correct configuration I am NOT presented with a user login but 
> rather the "Internal Server Error".
>
> What file permissions rights should the /etc/Backup[PC/apache.users 
> file have?
>
>  [root@localhost ~]# ls -alh /etc/BackupPC/
> total 192K
> drwxr-x---.  2 backuppc backuppc  112 Apr  1 06:55 .
> drwxr-xr-x. 80 root root 8.0K Apr  1 07:42 ..
> -rw-r--r--.  1 root root   47 Apr  1 18:14 apache.users
> -rw-r--r--.  1 backuppc backuppc  83K Mar 31 13:22 config.pl
> -rw-r--r--.  1 backuppc backuppc  83K Mar 31 13:22 config.pl.sample
> -rw-r--r--.  1 backuppc backuppc 2.2K Mar 31 13:22 hosts
> -rw-r--r--.  1 backuppc backuppc 2.2K Mar 31 13:22 hosts.sample
> -rw-r-.  1 backuppc backuppc0 Apr  1 17:53 LOCK
>
> Does your /etc/BackupPC/ directory have these rights?
>
> I am not sure I am looking in the correct place but, I think I am 
> dealing with a permissions issue.
>
> Thoughts?
>

Yes, please look at your apache error log file, it will tell you what 
the problem is.
Basically, Apache is saying "I don't like this, and I don't know what 
else to do, please get the sys admin to fix it". That's if it's a 
permissions error on any of the related files (.htaccess, the password 
file, or syntax errors, or options that are not permitted etc.

It is also possible to get an internal server error if the 
script/program itself can't run, usually the output of the script (error 
message) will be recorded in the apache error log, so again, that is 
where you will find out what the problem is.

Regards,
Adam



-- 
Adam Goryachev Website Managers www.websitemanagers.com.au

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/