Ok, after reading some more docs, the following set up should work,
but it doesn't:
1) Everything that has to do with BackupPC is owned by user "backuppc".
2) config.pl specified "backuppc" as the user.
3) The CGI script (which, for me, happens to be at
/usr/share/BackupPC/sbin//BackupPC_Admin) is owned by the "backuppc"
user, but its group is set to "apache", which is the same group as the
"apache" user has. I.e., the Web server which is run as "apache"
should be able to execute the CGI script.
3) My Apache web server loads mod_perl.
Ok, after all that, it still gives me the same error message as in the
first post.
What am I doing wrong here?
Thanks,
Yaakov.
On 7/22/07, Yaakov Chaikin <[EMAIL PROTECTED]> wrote:
> Ok, I dug up something from the docs, which says this:
> *******************************************************
> If you are using mod_perl then apache should run as user __BACKUPPCUSER__.
> *******************************************************
>
> I do have lines in the httpd.conf which load the mod_perl module. So,
> I DO have to run apache as the same user as the BackupPC software...
>
> The only question that I have now is whether people would recommend
> not loading mod_perl and then able to run Apache as a different user
> than BackupPC.
>
> Currently, the user that runs Apache has access to Subversion
> repositories, so there is definitely a reason to separate them...
> Question is whether it's anymore secure or if the way BackupPC works,
> it won't matter in the end.
>
> Any help would be appreciated.
>
> Thanks,
> Yaakov.
>
> On 7/22/07, Yaakov Chaikin <[EMAIL PROTECTED]> wrote:
> > Hi,
> >
> > Now that I got my BackupPC working, I broke it again trying to secure
> > it further.
> >
> > Previously, I was told here that I should not be running Apache web
> > server as the same user as running BackupPC.
> >
> > So, I kept Apache running as 'apache' user and switched BackupPC (in
> > config.pl) to be "backuppc" user. I also switched all the directories
> > that have to do with BackupPC and previously owned by "apache" user to
> > being owned by "backuppc" user.
> >
> > Now, when I try to go through the web browser, the server status page
> > give me an error:
> > *************************************************************************************
> > Error: Wrong user: my userid is 48, instead of 498(backuppc)
> >
> > This script needs to run as the user specified in $Conf{BackupPCUser},
> > which is set to backuppc.
> >
> > This is an installation problem. If you are using mod_perl then it
> > appears that Apache is not running as user backuppc. If you are not
> > using mod_perl, then most like setuid is not working properly on
> > BackupPC_Admin. Check the permissions on
> > //usr/share/BackupPC/sbin//BackupPC_Admin and look at the
> > documentation.
> > *************************************************************************************
> >
> > From the error message, it almost sounds like I SHOULD have the user
> > that runs Apache be the same user that runs BackupPC. Is that true? If
> > not, then how do I fix this problem?
> >
> > Currently, the //usr/share/BackupPC/sbin//BackupPC_Admin is owned by
> > "backuppc" user.
> >
> > Thanks,
> > Yaakov.
> >
>
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/backuppc-users
http://backuppc.sourceforge.net/
