You can either make the files owned by a group that the web server user
belongs to (typically www-data), and then set permissions to 660 or 664, or
you can add the user that web server runs under (again, typically www-data)
a member of the "bacula" group (if such group exists), and make files be
group-owned by it. Either way, you are allowing your web daemon, and as a
consequence ANY web application running on it, manipulate your bacula
configuration files, so be careful with what else you install on the same
web server.
But it is definitely better than setting permissions to 666 as this means
ANYONE on that server can manipulate bacula files, no matter how they get
there.
On Mon, 28 May 2018 at 17:49 Marcin Haba <[email protected]> wrote:
> Hello Matthias,
>
> The Baculum API to work uses web server that, in case using config
> module, requires access to read and write Bacula config files. You can
> set appropriate permissions to these files or you can manipulate user
> or/and group or you can change web server user or group. Unfortunately
> this step is to do by users, because I don't know ideal solution here.
>
> Best regards.
> Marcin Haba (gani)
>
> On 28 May 2018 at 13:23, Matthias Leopold
> <[email protected]> wrote:
> > Hi,
> >
> > i just started to explore baculum. One of the first things i tried was
> > editing config files on API hosts. This only works when setting
> permissions
> > of the config files to 666, else i get
> >
> > Error 1000: Internal error. [Warning]
> > file_put_contents(/etc/bacula/bacula-fd.conf): failed to open stream:
> > Permission denied (@line 56 in file
> > /usr/share/baculum/htdocs/protected/Common/Class/ConfigBacula.php).
> >
> > Is this really the way this is supposed to work? I'm using apache httpd
> and
> > created /etc/sudoers.d/baculum as stated on
> >
> http://www.bacula.org/9.0.x-manuals/en/console/Baculum_API_Web_GUI_Tools.html
> >
> > thx
> > matthias
> >
> >
> ------------------------------------------------------------------------------
> > Check out the vibrant tech community on one of the world's most
> > engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> > _______________________________________________
> > Bacula-users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/bacula-users
>
>
>
> --
> "Greater love hath no man than this, that a man lay down his life for
> his friends." Jesus Christ
>
> "Większej miłości nikt nie ma nad tę, jak gdy kto życie swoje kładzie
> za przyjaciół swoich." Jezus Chrystus
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> Bacula-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/bacula-users
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Bacula-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-users
