Permissions errors....

2002-03-29 Thread James Kelty

Hello, all, and thanks for the tapedev advice from earlier. But! Alas, I am,
once again, running into a little problem. This one has to do with
permissions!

I am getting the below errors about /sbin/dump, and /etc/dumpdates. Any, and
all help would be great!

-James

[amanda@warbaby docs]$ id
uid=55(amanda) gid=6(disk) groups=6(disk),4(adm),55(backup)


[amanda@warbaby docs]$ ls -l /etc/dumpdates
-rw-rw-r--1 root disk0 Mar 29 15:53 /etc/dumpdates

[amanda@warbaby docs]$ ls -l /sbin/dump
-rwxr-x---1 root adm 50140 Feb 14  2001 /sbin/dump

[amanda@warbaby docs]$ /usr/local/sbin/amcheck Daily
Amanda Tape Server Host Check
-
Holding disk /storage/amanda/Dumps: 52640200 KB disk space available, that's
plenty
ERROR: /dev/nst0: not an amanda tape
   (expecting a new tape)
NOTE: skipping tape-writable test
NOTE: info dir /usr/local/etc/amanda/Daily/curinfo/192.168.10.49/_: does not
exist
Server check took 5.214 seconds

Amanda Backup Client Hosts Check

ERROR: 192.168.10.49: [can not execute /sbin/dump: Permission denied]
ERROR: 192.168.10.49: [can not read/write /etc/dumpdates: Permission denied]
Client check: 1 host checked in 0.021 seconds, 2 problems found

(brought to you by Amanda 2.4.2p2)

James Kelty
Sr. Unix Systems Administrator
The Ashland Agency
541.488.0801
[EMAIL PROTECTED]




Re: Permissions errors....

2002-03-29 Thread Doug Silver

On Fri, 29 Mar 2002, James Kelty wrote:

 Hello, all, and thanks for the tapedev advice from earlier. But! Alas, I am,
 once again, running into a little problem. This one has to do with
 permissions!
 
 I am getting the below errors about /sbin/dump, and /etc/dumpdates. Any, and
 all help would be great!
 
 -James
 
 [amanda@warbaby docs]$ id
 uid=55(amanda) gid=6(disk) groups=6(disk),4(adm),55(backup)
 
 
 [amanda@warbaby docs]$ ls -l /etc/dumpdates
 -rw-rw-r--1 root disk0 Mar 29 15:53 /etc/dumpdates
 
 [amanda@warbaby docs]$ ls -l /sbin/dump
 -rwxr-x---1 root adm 50140 Feb 14  2001 /sbin/dump
 
[snip]
 
 Amanda Backup Client Hosts Check
 
 ERROR: 192.168.10.49: [can not execute /sbin/dump: Permission denied]
 ERROR: 192.168.10.49: [can not read/write /etc/dumpdates: Permission denied]
 Client check: 1 host checked in 0.021 seconds, 2 problems found
 
 (brought to you by Amanda 2.4.2p2)
 
 James Kelty
 Sr. Unix Systems Administrator
 The Ashland Agency
 541.488.0801
 [EMAIL PROTECTED]
 

Does the amanda user have permission to write to /etc?  As that user, just
try to the dumpdates files.  Confirm the group permissions on /sbin as
well, though that should be ok.  Does the /tmp/amanda debug files on the
client lend any further insight into this?

-- 
~
Doug Silver
Network Manager
Quantified Systems, Inc
~





RE: Permissions errors....

2002-03-29 Thread Morse, Richard E.

James Kelty [mailto:[EMAIL PROTECTED]] wrote:
Morse, Richard E. [mailto:[EMAIL PROTECTED]] wrote:
James Kelty [mailto:[EMAIL PROTECTED]] wrote:

 [amanda@warbaby docs]$ id
 uid=55(amanda) gid=6(disk) groups=6(disk),4(adm),55(backup)

 [amanda@warbaby docs]$ ls -l /etc/dumpdates
 -rw-rw-r--1 root disk0 Mar 29 15:53 /etc/dumpdates

 [amanda@warbaby docs]$ ls -l /sbin/dump
 -rwxr-x---1 root adm 50140 Feb 14  2001 /sbin/dump

 ERROR: /dev/nst0: not an amanda tape
(expecting a new tape)
 
 ERROR: 192.168.10.49: [can not execute /sbin/dump:  Permission denied]
 ERROR: 192.168.10.49: [can not read/write /etc/dumpdates: Permission denied]
 
 Is 192.168.10.49 the ip number of warbaby?
 
 What happens when you 'su -l amanda' -- can you then run dump?
 
 If not, you need to fix that.  I would suggest changing the group of
 /sbin/dump to be disk...
 
 Yeah. I su'd -l to amanda, and I can run dump, and I can 
 read/write to the
 /etc/dumpdates files as well. It's really strange.

Do you have more than one computer on your disklist?  What happens if instead of
the ip address, you use the FQDN in your disklist?

HTH,
Ricky



RE: Permissions errors....

2002-03-29 Thread Morse, Richard E.

Who owns the amanda programs -- amcheck, amstatus, selfcheck, rundump,
dumper, etc...

Ricky


James Kelty [mailto:[EMAIL PROTECTED]] wrote:
 I get the same error with the FQDN as I do with the IP.
 
 -James
 
 -Original Message-
 From: Morse, Richard E. [mailto:[EMAIL PROTECTED]]
 Sent: Friday, March 29, 2002 4:41 PM
 To: 'James Kelty'
 Cc: '[EMAIL PROTECTED]'
 Subject: RE: Permissions errors
 
 
 James Kelty [mailto:[EMAIL PROTECTED]] wrote:
 Morse, Richard E. [mailto:[EMAIL PROTECTED]] wrote:
 James Kelty [mailto:[EMAIL PROTECTED]] wrote:
 
  [amanda@warbaby docs]$ id
  uid=55(amanda) gid=6(disk) groups=6(disk),4(adm),55(backup)
 
  [amanda@warbaby docs]$ ls -l /etc/dumpdates
  -rw-rw-r--1 root disk0 Mar 29 15:53 
 /etc/dumpdates
 
  [amanda@warbaby docs]$ ls -l /sbin/dump
  -rwxr-x---1 root adm 50140 Feb 14  2001 /sbin/dump
 
  ERROR: /dev/nst0: not an amanda tape
 (expecting a new tape)
 
  ERROR: 192.168.10.49: [can not execute /sbin/dump:  
 Permission denied]
  ERROR: 192.168.10.49: [can not read/write /etc/dumpdates: 
 Permission
 denied]
 
  Is 192.168.10.49 the ip number of warbaby?
 
  What happens when you 'su -l amanda' -- can you then run dump?
 
  If not, you need to fix that.  I would suggest changing 
 the group of
  /sbin/dump to be disk...
 
  Yeah. I su'd -l to amanda, and I can run dump, and I can
  read/write to the
  /etc/dumpdates files as well. It's really strange.
 
 Do you have more than one computer on your disklist?  What happens if
 instead of
 the ip address, you use the FQDN in your disklist?
 
 HTH,
 Ricky
 



Re: Permissions errors....

2002-03-29 Thread John R. Jackson

I am getting the below errors about /sbin/dump, and /etc/dumpdates. Any, and
all help would be great!

[amanda@warbaby docs]$ id
uid=55(amanda) gid=6(disk) groups=6(disk),4(adm),55(backup)
[amanda@warbaby docs]$ ls -l /etc/dumpdates
-rw-rw-r--1 root disk0 Mar 29 15:53 /etc/dumpdates
[amanda@warbaby docs]$ ls -l /sbin/dump
-rwxr-x---1 root adm 50140 Feb 14  2001 /sbin/dump

Looks like you have the account set up with the proper group membership.

Are you using inetd or xinetd?

Are you certain it is starting amandad as user backup (look at the
first line of one of the amandad*debug files on the client)?

Do you have groups yes in the xinetd config file (if you don't it only
gets started in group disk, which would explain the /sbin/dump problem,
but not the dumpdates one).

James Kelty

John R. Jackson, Technical Software Specialist, [EMAIL PROTECTED]