Bug#447156: browser says Unable to bring up wimslogd Permission denied

2007-11-27 Thread Georges Khaznadar
Hello Boud,

I checked every permissions which are set by the package wims at
post-install, from revision 3.62-9, they should match with the
requirements you list there.

I shall try to have this new revision uploaded soon.

Boud Roukema a écrit :
> On Mon, 22 Oct 2007, Georges Khaznadar wrote:
>
>> Boud Roukema a écrit :
>>> ANALYSIS:
 From the command line:
>>>
>>> as user wims:
>>>   cd /var/lib/wims/public_html/ && ./wims
>>> outputs a correct html page.
>>>
>>> as user www-data, same command:
>>>
>>>   cd /var/lib/wims/public_html/ && ./wims
>>> outputs:
>>>
 Status: 500 WIMS Internal Error
>>
>> The command ./wims, in this context, should be executed with the
>> identity of the user wims, since the post-installation package is
>> supposed to set the permission bit as stated below:
>
> salut Georges and the bug-tracker,
>
> i found some more chmod commands sufficient to make wims work
> sufficiently correctly for me to copy/paste old classes, do some
> appropriate mkdir/chown/chmod/cp operations on them and satisfy students'
> needs. :)
>
> However, i suspect that the setup of user/group/suid and so on that i
> have is not the one intended.  Regarding the wims web-based management
> functions, i'll reply independently to bug 447896 in order to not mess
> up the bug tracking structure.
>
>
> Here are the commands i found sufficient (in addition to my previous 
> comments):
>
>
> chmod g+rx public_html/scripts/adm/
>
> chmod g+rx bin chmod g+rx public_html/bin public_html/msg/
> chmod g+rx public_html/bases/d[io]c public_html/bases/sheet/ 
> public_html/bases/site/ public_html/bases/sys/
>
> chmod g-x log/classes/.[hiw]*
>
> chmod g+w tmp/forall/ tmp/sessions/
>
> # This was needed since otherwise the exercises have key information in 
> italian!
> chmod g+rx public_html/modules/adm/sheet.??/
> chmod g+rx public_html/modules/adm/*
>
>
> The group in each case is wims, which includes both wims and www-data.
>
> i hope this helps. i guess for testing (sorry, i'm unlikely to have much
> time on any short time scale, but at least i'd like my feedback here to be
> available), the best solution would be to create a chroot jail and install
> etch from scratch there, then test the installation from aptitude. i'm not
> a debian developer, so i'm only guessing here what would be best.
>
>
> As to whether or not the bug is closed, it's hard to say. For me 
> personally,
> the above and my previous list of chmod/chown commands are a hack, which is 
> not enough to close the bug. Maybe the bug severity could just be 
> downgraded.
>
>
> In a moment i'll reply to the other bug report.
>
> bon courage
> boud


-- 
Georges KHAZNADAR et Jocelyne FOURNIER
22 rue des mouettes, 59240 Dunkerque France.
Téléphone +33 (0)3 28 29 17 70



signature.asc
Description: Digital signature


Bug#447156: browser says Unable to bring up wimslogd Permission denied

2007-11-26 Thread Boud Roukema

On Mon, 22 Oct 2007, Georges Khaznadar wrote:


Boud Roukema a écrit :

ANALYSIS:

From the command line:


as user wims:
  cd /var/lib/wims/public_html/ && ./wims
outputs a correct html page.

as user www-data, same command:

  cd /var/lib/wims/public_html/ && ./wims
outputs:


Status: 500 WIMS Internal Error


The command ./wims, in this context, should be executed with the
identity of the user wims, since the post-installation package is
supposed to set the permission bit as stated below:


salut Georges and the bug-tracker,

i found some more chmod commands sufficient to make wims work
sufficiently correctly for me to copy/paste old classes, do some
appropriate mkdir/chown/chmod/cp operations on them and satisfy students'
needs. :)

However, i suspect that the setup of user/group/suid and so on that i
have is not the one intended.  Regarding the wims web-based management
functions, i'll reply independently to bug 447896 in order to not mess
up the bug tracking structure.


Here are the commands i found sufficient (in addition to my previous comments):


chmod g+rx public_html/scripts/adm/

chmod g+rx bin 
chmod g+rx public_html/bin public_html/msg/

chmod g+rx public_html/bases/d[io]c public_html/bases/sheet/ 
public_html/bases/site/ public_html/bases/sys/

chmod g-x log/classes/.[hiw]*

chmod g+w tmp/forall/ tmp/sessions/

# This was needed since otherwise the exercises have key information in 
italian!
chmod g+rx public_html/modules/adm/sheet.??/
chmod g+rx public_html/modules/adm/*


The group in each case is wims, which includes both wims and www-data.

i hope this helps. i guess for testing (sorry, i'm unlikely to have much
time on any short time scale, but at least i'd like my feedback here to be
available), the best solution would be to create a chroot jail and install
etch from scratch there, then test the installation from aptitude. i'm not
a debian developer, so i'm only guessing here what would be best.


As to whether or not the bug is closed, it's hard to say. For me personally,
the above and my previous list of chmod/chown commands are a hack, which is 
not enough to close the bug. Maybe the bug severity could just be downgraded.



In a moment i'll reply to the other bug report.

bon courage
boud

Bug#447156: browser says Unable to bring up wimslogd Permission denied

2007-10-22 Thread Georges Khaznadar
Boud Roukema a écrit :
> ANALYSIS: 
>> From the command line:
>
> as user wims:
>   cd /var/lib/wims/public_html/ && ./wims
> outputs a correct html page.
>
> as user www-data, same command:
>
>   cd /var/lib/wims/public_html/ && ./wims
> outputs:
>
>> Status: 500 WIMS Internal Error

The command ./wims, in this context, should be executed with the
identity of the user wims, since the post-installation package is
supposed to set the permission bit as stated below:

$ ls -l /var/lib/wims/public_html/wims
-rwsr-sr-x 1 wims wims 266440 2007-10-20 06:16 /var/lib/wims/public_html/wims

The question should rather be : were the permissions correct for the file
/var/lib/wims/public_html/wims ?

---8<---
gk:~$ grep chmod /var/lib/dpkg/info/wims.postinst 
chmod 700 $d
  chmod 6755 $server
  chown wims:wims $conffile; chmod 600 $conffile
  chmod 6755 $lambdawrapper
  chmod 6755 /var/lib/wims/public_html/bin/ch..root
gk:~$ grep "server=" /var/lib/dpkg/info/wims.postinst 
  server=/var/lib/wims/public_html/wims
  webserver=${webserver%,}
  webserver=${webserver%,}
---8<---

probably the postinst failed at some early stage, but you manually 
installed something later and did not run again the configuration scripts?

Amitiés,Georges.



signature.asc
Description: Digital signature


Bug#447156: browser says Unable to bring up wimslogd Permission denied

2007-10-22 Thread Boud Roukema

On Thu, 18 Oct 2007, Georges Khaznadar wrote:


Hello Boud,

the package wims_3.62-8 will be available shortly, which fixes this bug
and many others.


hi Georges,

i think that this bug is not yet closed...  And i have another one which seems
to be independent so i'll file it independently.

amities
boud



--
PROBLEM:
i updated to wims-3.62-8 from debian.ofset.org

i once again get:

WIMS panick! Unable to bring up wimslogd.
Permission denied



ANALYSIS: 

From the command line:


as user wims:
  cd /var/lib/wims/public_html/ && ./wims
outputs a correct html page.

as user www-data, same command:

  cd /var/lib/wims/public_html/ && ./wims
outputs:


Status: 500 WIMS Internal Error
Cache-Control: no-cache
Pragma: no-cache
Content-type: text/plain


WIMS panick! Unable to bring up wimslogd.
Permission denied
wims: Unable to bring up wimslogd.
Permission denied



i tried the following in the order below:

/var/lib/wims# chmod g+rx bin

chmod -R g+rw log/

chmod -R g+x log/account/ log/[cf]* log/modules/ log/referer # directories

chmod g+rwx tmp/log/  # key step to solution


After this last line, user www-data *was* able to correctly do
  cd /var/lib/wims/public_html/ && ./wims

The web interface then gives:


WIMS panick! cannot_create_session_directory
Permission denied


chmod g+w tmp/sessions/

pwd

/var/lib/wims


chmod g+rwx sessions/   # key step to solution

This second problem is now resolved after this chmod.




SUGGESTED SOLUTION:

i don't have the time to check which chmods are necessary or optional among
the above list - i would suggest just doing

chmod g+rwx tmp/log/  # key step to solution
chmod g+rwx sessions/   # key step to solution

and then if there's a problem trying some of the others.



--



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#447156: browser says Unable to bring up wimslogd Permission denied

2007-10-18 Thread Georges Khaznadar
Hello Boud,

the package wims_3.62-8 will be available shortly, which fixes this bug
and many others.

If you are in a hurry, you can find wims_3.62-7 at an unofficial
repository: deb http://debian.ofset.org etch main
It appears to have a single bug, which will be fixed in the next
release, but this is worked around by making a 
"chown -R wims:wims /var/lib/wims/public_html" and making all pending
configurations after the failed installation.

Best regards,   Georges.

Boud Roukema a écrit :
> Package: wims
> Version: 3.60-6
> Severity: grave
> Justification: renders package unusable
> 
> 
> 
> -- System Information:
> Debian Release: 4.0
>   APT prefers stable
>   APT policy: (500, 'stable')
> Architecture: i386 (i686)
> Shell:  /bin/sh linked to /bin/bash
> Kernel: Linux 2.6.18-5-686
> Locale: LANG=pl_PL.ISO-8859-2, LC_CTYPE=pl_PL.ISO-8859-2 
> (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C)
> 
> Versions of packages wims depends on:
> ii  adduser 3.102Add and remove users and groups
> ii  apache  1.3.34-4.1   versatile, high-performance HTTP 
> s
> ii  chemeq  1.9  Parser for chemical formula and 
> eq
> ii  debconf [debconf-2. 1.5.11   Debian configuration management 
> sy
> ii  fortunes1:1.99.1-3   Data files containing fortune 
> cook
> ii  gnuplot 4.0.0-5  A command-line driven 
> interactive 
> ii  imagemagick 7:6.2.4.5.dfsg1-0.14 Image manipulation programs
> ii  libc6   2.3.6.ds1-13etch2GNU C Library: Shared libraries
> ii  libgd2-xpm  2.0.33-5.2   GD Graphics Library version 2
> ii  maxima  5.10.0-6 A computer algebra system -- 
> base 
> ii  octave  1:2.1.73-13  GNU Octave language for 
> numerical 
> ii  octave2.0 [octave]  2.0.17-9 The GNU Octave language for 
> numeri
> ii  octave2.1 [octave]  1:2.1.73-13  GNU Octave language for 
> numerical 
> ii  octave2.9 [octave]  2.9.9-8etch1 GNU Octave language for 
> numerical 
> ii  pari-gp 2.3.1-2  PARI/GP Computer Algebra System 
> bi
> ii  tetex-bin   3.0-30   The teTeX programs
> ii  tetex-extra 3.0.dfsg.3-5etch1Additional TeX input files of 
> teTe
> ii  units-filter2.6-1Parser for expressions 
> concerning 
> ii  wims-modules3.60-6   modules used by the WIMS server
> 
> Versions of packages wims recommends:
> ii  gap   4r4p9-1Groups, Algorithms and 
> Programming
> pn  wims-extra (no description available)
> ii  yacas 1.0.57-2   Computer Algebra System
> 
> -- debconf information:
> * wims/reconfigure-webserver: apache
> * wims/restart-webserver: true
> 
> 
> 
> PROBLEM: 
> 
> Installing: installing wims-3.60-6 from debian etch, on a system with
> a pre-existing wims-3.58 installed by hand gave an error message
> regarding the pre-existence of the wims user and something about a
> wims group being needed (i didn't record the exact message).  i did:
> addgroup wims && adduser wims wims
> 
> IIRC, i then didaptitude install wims   again.  The installation
> finished without errors (after about 10-15 minutes...)
> 
> The problem: my browser at the page http://mydomain.com/wims gave the error
> message:
> 
>   WIMS panick! Unable to bring up wimslogd.
>   Permission denied
> 
> Eventually (after many, many hours, including reading src/log.c and
> learning about sockets) i found that by doing some chown + chmod's
> this problem was solved. My guess is that www-data (the apache user)
> did not have the authorisation to create files and/or directories
> in wims' area.
> 
> 
> SUGGESTION:  
> 
> The debian package for wims should either 
> 
>  * give the sysadmin some interactive hints about the possible need to
>fix things with chmod && chown (it is not enough just to say that
>the group wims must be created), or
> 
>  * a comment about this could be added to README.Debian, or 
> 
>  * it should redo some chmod/chown-ing in the post-installation phase
>in case the installation got stopped half-way and then continued as
>happened in my case.
> 
> 
> DETAILS:
> 
> 
> DIAGNOSTICS:
> 
> uname -a
> Linux mydomain 2.6.18-5-686 #1 SMP Wed Oct 3 00:12:50 UTC 2007 i686 GNU/Linux
> 
> 
> dpkg -l |grep wims
> ii  wims  3.60-6  WWW 
> Interactive Mathematics Server (WIMS)
> ii  wims-modules  3.60-6  modules 
> used by the WIMS server
> 
> 
> As shown above, this is still using apache-1.3.
> 
> 
> grep wims /var/log/dpkg.log# local times :P
> 
> 2007-10-18 03:56:04 install wims-modules  3.60-6
> 2007-10-18 03:56:04 status half-installed wims-modules 3.60-6
> 2007-10-18 03:56:14 status unpacked wims-modules 3.60-6

Bug#447156: browser says Unable to bring up wimslogd Permission denied

2007-10-18 Thread Boud Roukema
Package: wims
Version: 3.60-6
Severity: grave
Justification: renders package unusable



-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-5-686
Locale: LANG=pl_PL.ISO-8859-2, LC_CTYPE=pl_PL.ISO-8859-2 
(charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C)

Versions of packages wims depends on:
ii  adduser 3.102Add and remove users and groups
ii  apache  1.3.34-4.1   versatile, high-performance HTTP s
ii  chemeq  1.9  Parser for chemical formula and eq
ii  debconf [debconf-2. 1.5.11   Debian configuration management sy
ii  fortunes1:1.99.1-3   Data files containing fortune cook
ii  gnuplot 4.0.0-5  A command-line driven interactive 
ii  imagemagick 7:6.2.4.5.dfsg1-0.14 Image manipulation programs
ii  libc6   2.3.6.ds1-13etch2GNU C Library: Shared libraries
ii  libgd2-xpm  2.0.33-5.2   GD Graphics Library version 2
ii  maxima  5.10.0-6 A computer algebra system -- base 
ii  octave  1:2.1.73-13  GNU Octave language for numerical 
ii  octave2.0 [octave]  2.0.17-9 The GNU Octave language for numeri
ii  octave2.1 [octave]  1:2.1.73-13  GNU Octave language for numerical 
ii  octave2.9 [octave]  2.9.9-8etch1 GNU Octave language for numerical 
ii  pari-gp 2.3.1-2  PARI/GP Computer Algebra System bi
ii  tetex-bin   3.0-30   The teTeX programs
ii  tetex-extra 3.0.dfsg.3-5etch1Additional TeX input files of teTe
ii  units-filter2.6-1Parser for expressions concerning 
ii  wims-modules3.60-6   modules used by the WIMS server

Versions of packages wims recommends:
ii  gap   4r4p9-1Groups, Algorithms and Programming
pn  wims-extra (no description available)
ii  yacas 1.0.57-2   Computer Algebra System

-- debconf information:
* wims/reconfigure-webserver: apache
* wims/restart-webserver: true



PROBLEM: 

Installing: installing wims-3.60-6 from debian etch, on a system with
a pre-existing wims-3.58 installed by hand gave an error message
regarding the pre-existence of the wims user and something about a
wims group being needed (i didn't record the exact message).  i did:
addgroup wims && adduser wims wims

IIRC, i then didaptitude install wims   again.  The installation
finished without errors (after about 10-15 minutes...)

The problem: my browser at the page http://mydomain.com/wims gave the error
message:

  WIMS panick! Unable to bring up wimslogd.
  Permission denied

Eventually (after many, many hours, including reading src/log.c and
learning about sockets) i found that by doing some chown + chmod's
this problem was solved. My guess is that www-data (the apache user)
did not have the authorisation to create files and/or directories
in wims' area.


SUGGESTION:  

The debian package for wims should either 

 * give the sysadmin some interactive hints about the possible need to
   fix things with chmod && chown (it is not enough just to say that
   the group wims must be created), or

 * a comment about this could be added to README.Debian, or 

 * it should redo some chmod/chown-ing in the post-installation phase
   in case the installation got stopped half-way and then continued as
   happened in my case.


DETAILS:


DIAGNOSTICS:

uname -a
Linux mydomain 2.6.18-5-686 #1 SMP Wed Oct 3 00:12:50 UTC 2007 i686 GNU/Linux


dpkg -l |grep wims
ii  wims  3.60-6  WWW 
Interactive Mathematics Server (WIMS)
ii  wims-modules  3.60-6  modules 
used by the WIMS server


As shown above, this is still using apache-1.3.


grep wims /var/log/dpkg.log# local times :P

2007-10-18 03:56:04 install wims-modules  3.60-6
2007-10-18 03:56:04 status half-installed wims-modules 3.60-6
2007-10-18 03:56:14 status unpacked wims-modules 3.60-6
2007-10-18 03:56:14 status unpacked wims-modules 3.60-6
2007-10-18 03:56:15 install wims  3.60-6
2007-10-18 03:56:15 status half-installed wims 3.60-6
2007-10-18 03:56:19 status unpacked wims 3.60-6
2007-10-18 03:56:19 status unpacked wims 3.60-6
2007-10-18 03:56:21 status unpacked wims-modules 3.60-6
2007-10-18 03:56:21 status half-configured wims-modules 3.60-6
2007-10-18 03:56:26 status half-configured wims-modules 3.60-6
2007-10-18 03:58:43 status half-configured wims-modules 3.60-6
2007-10-18 04:01:59 status installed wims-modules 3.60-6
2007-10-18 04:01:59 status unpacked wims 3.60-6
2007-10-18 04:01:59 status unpacked wims 3.60-6
2007-10-18 04:01:59 status half-configured wims 3.60-6
2007-10-18 04:17:25 status installed wims 3.60-6


grep "www-data\|wims" /etc/p