Re: [BackupPC-users] Forbidden You don't have permission to access /BackupPC on this server.

2015-09-22 Thread Richard Zimmerman
Do you actually have selinux in enforcing mode?
If so, I would have thought it would be sensible to turn it to permissive, 
until the BackupPC problem is solved.

> So I have decided to start again with CentOS 6.7.

I'm reasonably certain if you applied all the suggestions that have been made 
(and turned off selinux temporarily) your problem would have been solved.

I had much the same problems as you getting BackupPC running.

> I need
> this machine to be backing up.

In my experience BackupPC is very good indeed once it is set up.
But it is also rather difficult to set up, in both CentOS 6 and 7.
in my experience.
--
Timothy Murphy
gayleard /at/ eircom.net
School of Mathematics, Trinity College, Dublin


I don't know if my setup here will help or not, but here it does...

selinux = disabled

My BackupPC server has MPD (Multiple Personality Disorder) :)

In addition to being the BackupPC server, it's an internal web server, backup 
PostgreSQL and Nagios server.

To solve my case of /backuppc access denied, I added apache to the backuppc 
GROUP.

/etc/group: backuppc:x:498:apache

I'm not sure if this helps in your case but in this corner of the world, adding 
apache to the respective services (backuppc, nagios, etc) got all my services 
playing happily together on the server.

I also gave up trying to use rsync on Windows. Again in my case rsync was 
notoriously unreliable, slow and problematic.  Switched to using SMB backups 
and never looked back. Volume snapshots work as they are suppose to, NO 
additional software needed on the Windows computers, etc.

You mileage may vary (YMMV) but over here BackupPC is a winner in my book!

BackupPC = BackupPC-3.3.1-1.el6.x86_64 on CentOS 6.7

Regards,

Richard
 
---
Richard Zimmerman
Systems / Network Administrator
River Bend Hose Specialty, Inc.
 S Main Street
South Bend, IN   46601-3337
(574) 233-1133
(574) 280-7284 Fax

--
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/


Re: [BackupPC-users] Forbidden You don't have permission to access /BackupPC on this server.

2015-09-22 Thread Les Mikesell
On Mon, Sep 21, 2015 at 3:39 PM, Timothy Murphy  wrote:
> On Monday 21 September 2015 12:11:39 Bob of Donelson Trophy wrote:
>
>> Regarding my permissions issue. I have really begun to think that CentOS
>> 7 is a little too new for this particular installation.
>
> I'm not sure what this means - you seem to have installed BackupPC OK.

I think it is the difference between Apache 2.2 and 2.4.   The apache
log said the configuration prevented the client from having access -
and only the part of the config that applied to apache 2.2 was changed
to allow access from remote clients.But, I don't have systems to
test on anymore.

-- 
  Les Mikesell
lesmikes...@gmail.com

--
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/


Re: [BackupPC-users] Forbidden You don't have permission to access /BackupPC on this server.

2015-09-22 Thread Bob of Donelson Trophy
 

Les, 

What I was trying to say (and not very well) is that I was having
trouble finding the answers I needed. I had to get the backup server up
and running so I abandon the C7 version and reverted to C6.7 hoping
someday there will be a simple upgrade soon . . . as in next year or
maybe the year after. 

And you may be correct. I remember reading somewhere that one of the
issues Apache 2.4 handles differently than Apache 2.2 is external
access. And I searched for that information again and could not find it.
(Bottom line, C6.7 is running and I have moved on.) 

Thanks for your suggestion. I always appreciate your insight. 

---

___ 

Bob Wooden of Donelson Trophy

615.885.2846
www.donelsontrophy.com [1]

"Everyone deserves an award!!"

On 2015-09-22 13:45, Les Mikesell wrote: 

> On Mon, Sep 21, 2015 at 3:39 PM, Timothy Murphy  wrote:
> On Monday 21 September 2015 12:11:39 Bob of Donelson Trophy wrote: Regarding 
> my permissions issue. I have really begun to think that CentOS 7 is a little 
> too new for this particular installation. I'm not sure what this means - you 
> seem to have installed BackupPC OK.

I think it is the difference between Apache 2.2 and 2.4. The apache
log said the configuration prevented the client from having access -
and only the part of the config that applied to apache 2.2 was changed
to allow access from remote clients. But, I don't have systems to
test on anymore.

 

Links:
--
[1] http://www.donelsontrophy.com
--
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/


Re: [BackupPC-users] Forbidden You don't have permission to access /BackupPC on this server.

2015-09-22 Thread Brad Alexander
On Tue, Sep 22, 2015 at 3:06 PM, Bob of Donelson Trophy <
b...@donelsontrophy.net> wrote:

> And you may be correct. I remember reading somewhere that one of the
> issues Apache 2.4 handles differently than Apache 2.2 is external access.
> And I searched for that information again and could not find it. (Bottom
> line, C6.7 is running and I have moved on.)
>
I don't know that that is the case, since I have been running it on
debian/sid since before apache 2.4 came out:

nanobit.org closed.
[storm@defiant ~]$ ssh root@farragut dpkg -l apache2
Desired=Unknown/Install/Remove/Purge/Hold
|
Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name   Version  Architecture Description
+++-==---=
ii  apache22.4.16-3 amd64Apache HTTP Server

>From my /etc/apache2/sites-enabled/default-ssl.conf:



ServerAdmin webmaster@localhost



DocumentRoot
/var/www

Options
FollowSymLinks
AllowOverride
None



Options Indexes FollowSymLinks
MultiViews
AllowOverride
None
Order
allow,deny
allow from
all
RedirectMatch ^/$
/backuppc/




ScriptAlias /cgi-bin/
/usr/lib/cgi-bin/

AllowOverride
None
Options +ExecCGI -MultiViews
+SymLinksIfOwnerMatch
Order
allow,deny
Allow from
all



SSLOptions +StdEnvVars


SSLOptions +StdEnvVars





> ---
>
> ___
>
> Bob Wooden of Donelson Trophy
>
> 615.885.2846www.donelsontrophy.com
> "Everyone deserves an award!!"
>
> On 2015-09-22 13:45, Les Mikesell wrote:
>
> On Mon, Sep 21, 2015 at 3:39 PM, Timothy Murphy  wrote:
>
> On Monday 21 September 2015 12:11:39 Bob of Donelson Trophy wrote:
>
> Regarding my permissions issue. I have really begun to think that CentOS 7
> is a little too new for this particular installation.
>
> I'm not sure what this means - you seem to have installed BackupPC OK.
>
> I think it is the difference between Apache 2.2 and 2.4.   The apache
> log said the configuration prevented the client from having access -
> and only the part of the config that applied to apache 2.2 was changed
> to allow access from remote clients.But, I don't have systems to
> test on anymore.
>
>
>
> --
>
> ___
> BackupPC-users mailing list
> BackupPC-users@lists.sourceforge.net
> List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
> Wiki:http://backuppc.wiki.sourceforge.net
> Project: http://backuppc.sourceforge.net/
>
>
--
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/


Re: [BackupPC-users] Forbidden You don't have permission to access /BackupPC on this server.

2015-09-22 Thread Les Mikesell
On Tue, Sep 22, 2015 at 2:20 PM, Brad Alexander  wrote:
>
>
> On Tue, Sep 22, 2015 at 3:06 PM, Bob of Donelson Trophy
>  wrote:
>>
>> And you may be correct. I remember reading somewhere that one of the
>> issues Apache 2.4 handles differently than Apache 2.2 is external access.
>> And I searched for that information again and could not find it. (Bottom
>> line, C6.7 is running and I have moved on.)
>
> I don't know that that is the case, since I have been running it on
> debian/sid since before apache 2.4 came out:
>
> nanobit.org closed.
> [storm@defiant ~]$ ssh root@farragut dpkg -l apache2
> Desired=Unknown/Install/Remove/Purge/Hold
> |
> Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
> |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
> ||/ Name   Version  Architecture Description
> +++-==---=
> ii  apache22.4.16-3 amd64Apache HTTP Server
>
> From my /etc/apache2/sites-enabled/default-ssl.conf:
>
> 
> 
> ServerAdmin webmaster@localhost
>
> DocumentRoot /var/www
> 
> Options FollowSymLinks
> AllowOverride None
> 
> 
> Options Indexes FollowSymLinks MultiViews
> AllowOverride None
> Order allow,deny
> allow from all
> RedirectMatch ^/$ /backuppc/
> 
>
> ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
> 
> AllowOverride None
> Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
> Order allow,deny
> Allow from all
> 
> 
> SSLOptions +StdEnvVars
> 
> 
> SSLOptions +StdEnvVars
> 
> 
> 
>

I didn't mean there was a problem running 2.4, just that if you put
'Require Local'
which I believe was in the other config posted, clients other than
from the same host as the server will be denied access.
  http://httpd.apache.org/docs/2.4/mod/mod_authz_host.html

-- 
  Les Mikesell
 lesmikes...@gmail.com

--
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/


Re: [BackupPC-users] Forbidden You don't have permission to access /BackupPC on this server.

2015-09-22 Thread Holger Parplies
Hi,

Les Mikesell wrote on 2015-09-22 14:30:34 -0500 [Re: [BackupPC-users] Forbidden 
You don't have permission to access /BackupPC on this server.]:
> On Tue, Sep 22, 2015 at 2:20 PM, Brad Alexander  wrote:
> > [...]
> > I don't know that that is the case, since I have been running it on
> > debian/sid since before apache 2.4 came out:
> > [...]
> 
> I didn't mean there was a problem running 2.4, just that if you put
> 'Require Local'
> which I believe was in the other config posted, clients other than
> from the same host as the server will be denied access.
>   http://httpd.apache.org/docs/2.4/mod/mod_authz_host.html

or, more to the point, it seems to be a bug in the Centos 7 BackupPC package,
which provides an incorrect Apache configuration. It's neither an (upstream)
BackupPC issue nor an Apache problem/incompatibility. It might not even be a
Centos packaging error, if Centos default policy were to limit access to
localhost, but then again, it would be for both Apache 2.2 and 2.4, wouldn't
it?

Access policy really is a topic the individual admin will need to *think
about* and *set up correctly* anyway, unless you're on some sort of home
network ...

Regards,
Holger

--
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/


Re: [BackupPC-users] Forbidden You don't have permission to access /BackupPC on this server.

2015-09-22 Thread Holger Parplies
Hi,

Stefan Peter wrote on 2015-09-21 20:20:44 +0200 [Re: [BackupPC-users] Forbidden 
You don't have permission to access /BackupPC on this server.]:
> Dear Bob of Donelson Trophy
> 
> Please find my comments interspersed below:
> (this is the stanza I use for noobs)

[this is worth resending]

> On 21.09.2015 14:03, Bob of Donelson Trophy wrote:
> > First, my only comment on top posting.
> > 
> > [...]
> > I, like you, have to live with top posts occasionally, sorry.

Are you asking for our help, or are we asking for your vague descriptions of
off-topic problems (Apache misconfigurations by packaged versions of BackupPC)?
You see, *we* don't really *have* to live with top posts.

> You are not supposed to bottom post, either. The idea behind the whole
> eMail rule is to have a dialogue, to allow a reader who is subscribed to
> a couple of mailing lists to be able to follow the conversation without
> digging through a 2000+ line email you have to read *bottom up* if
> she/he wants to understand the context.

In particular, you are supposed to omit parts of the quoted mail no longer
neccessary for understanding the dialogue at the current point. As a rule of
thumb, that is at least everything after the end of your reply.

> > We mailing list normal users, although annoyed with top posting, can
> > learn to follow the combination of top posts with bottom posts and keep
> > up with answers.

We normal mailing list posters can also learn to move the cursor around as Les
has already suggested. It's not hard, even in vi. It's a matter of courtesy,
really. Could I be bothered to put in some work to make things easier for the
people whose help I am asking for?

> One could, but I have other emails to read, my boss does not pay me for
> reading eMails and I don't have the time to dig through the mess top
> posters produce. Result: Your eMail most probably will be ignored by a
> majority of the participants of a tech related mailing list. Not what
> you aim at, I suppose.

I can't speak for the majority, but I can confirm this for myself. I have
recently read quite some mails from you (Bob of Donelson Trophy) with problems
which were partly quite obvious and obviously somewhere else than you were
looking. I didn't feel inclined to respond to any of them, and I have noticed
that many others also have not, who I would expect could answer your questions.

In this particular thread, Les has pointed out the key misunderstanding (even
twice, in the mean time):
this is *not* an OS permission issue but rather an Apache authorization issue.
To fix this, you need to understand (a bit of) Apache configuration, not
switch off selinux, worry about Unix group membership, downgrade any software
or anything like that.

You can, of course, do whatever you like, but by disregarding advice and
instead working around the problem as you could have done right away without
bothering us, you are not exactly encouraging anyone to help you in the
future.

Regards,
Holger

--
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/


Re: [BackupPC-users] Can`t Change {TopDir} Location . .

2015-09-22 Thread Holger Parplies
Hi,

tdevoye wrote on 2015-09-16 05:16:34 -0700 [[BackupPC-users]  Can`t Change 
{TopDir} Location . .]:
> [...]
> [root@]# /etc/init.d/backuppc restart

you probably mean 'service backuppc restart' ...

> Shutting down BackupPC:[  OK  ]
> Starting BackupPC: [  OK  ]
> BackupPC: WARNING:  Your BackupPC $Conf{TopDir} is not listed in the locate
> BackupPC: database configuration's PRUNEPATHS.  This may cause all of your
> BackupPC: backed up files to be indexed!

This message is not from any init script distributed with BackupPC. You're
talking about 3.3.1, since you don't mention any version, and that is the
default these days. Just in case you were wondering what you were referring
to.

> I have just solve this problem in few steps.

Glad to hear that you solved your problem, but I'm not sure where anyone else
comes into the picture.

> Tommy DEVOYE
> Network Admin
> 
> +--
> |This was sent by to...@devoye.fr via Backup Central.
> |Forward SPAM to ab...@backupcentral.com.
> +--

Network admin. Backup Central. No comment.

If you ever find out what Linux(?) distribution you're using, please forward
your message to the relevant BTS (not sure if it's actually a bug, but they
can close it if it isn't).

Regards,
Holger

--
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/


Re: [BackupPC-users] Forbidden You don't have permission to access /BackupPC on this server.

2015-09-22 Thread Les Mikesell
On Tue, Sep 22, 2015 at 3:26 PM, Holger Parplies  wrote:
> Hi,
>
> Les Mikesell wrote on 2015-09-22 14:30:34 -0500 [Re: [BackupPC-users] 
> Forbidden You don't have permission to access /BackupPC on this server.]:
>> On Tue, Sep 22, 2015 at 2:20 PM, Brad Alexander  wrote:
>> > [...]
>> > I don't know that that is the case, since I have been running it on
>> > debian/sid since before apache 2.4 came out:
>> > [...]
>>
>> I didn't mean there was a problem running 2.4, just that if you put
>> 'Require Local'
>> which I believe was in the other config posted, clients other than
>> from the same host as the server will be denied access.
>>   http://httpd.apache.org/docs/2.4/mod/mod_authz_host.html
>
> or, more to the point, it seems to be a bug in the Centos 7 BackupPC package,
> which provides an incorrect Apache configuration. It's neither an (upstream)
> BackupPC issue nor an Apache problem/incompatibility. It might not even be a
> Centos packaging error, if Centos default policy were to limit access to
> localhost, but then again, it would be for both Apache 2.2 and 2.4, wouldn't
> it?

I think the stock package does limit to local clients on both 2.2 and
2.4 by default, but the syntax is different and the instructions you
are most likely to find probably only mention how to change the older
2.2 section to allow remote access.

-- 
  Les Mikesell
lesmikes...@gmail.com

--
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/


Re: [BackupPC-users] Forbidden You don't have permission to access /BackupPC on this server.

2015-09-22 Thread Timothy Murphy
On Tuesday 22 September 2015 14:30:34 Les Mikesell wrote:
> On Tue, Sep 22, 2015 at 2:20 PM, Brad Alexander  wrote:

> I didn't mean there was a problem running 2.4, just that if you put
> 'Require Local'
> which I believe was in the other config posted, clients other than
> from the same host as the server will be denied access.
>   http://httpd.apache.org/docs/2.4/mod/mod_authz_host.html


I don't understand why there is the double restriction
  Allow from
and
  Require
in /etc/httpd/conf.d/BackupPC.conf

Both seem to me to have much the same effect.

-- 
Timothy Murphy  
gayleard /at/ eircom.net
School of Mathematics, Trinity College, Dublin


--
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/


Re: [BackupPC-users] Forbidden You don't have permission to access /BackupPC on this server.

2015-09-22 Thread Bob of Donelson Trophy
 

First, I have trimmed out the irrelevant rhetoric. 

To the nicer people on this list, with your help, I have moved on. 

If you read all the threads of my original post, Stefan Peter was the
first to get way off topic. 

Then, whether appropriate or not, Holger Parplies uses this off topic
post to start one of his rants. Holger, you have chastised me before and
I let it go. 

This is the BackupPC-users mailing list and I am a user of BackupPC and
have been for years. I, as a user, ask questions just like any other
user posting to this list. In the future, I will be back. 

Holger, you have berated many via this list. You should be ashamed of
your behavior. I have noticed this fact, it is always late in the day
here (in the USA) which is late night in Europe when you post one of
your rants . . . . there is treatment for your condition. Get some help.
You are NOT a nice person when your like this. 

Holger, I DO NOT WANT YOUR HELP ANYMORE!! In the future when you see my
name, Bob Wooden (see it there in the email signature below) DO NOT
PARTICIPATE IN MY THREADS!! 
---

___ 

Bob Wooden of Donelson Trophy

615.885.2846
www.donelsontrophy.com [4]

"Everyone deserves an award!!"

On 2015-09-22 15:49, Holger Parplies wrote: 

> Hi,
> 
> Stefan Peter wrote on 2015-09-21 20:20:44 +0200 
> 
> . . . . mails from you (Bob of Donelson Trophy) 
> . . . .you are not exactly encouraging anyone to help you in the
> future.
> 
> Regards,
> Holger
> 
> --
> ___
> BackupPC-users mailing list
> BackupPC-users@lists.sourceforge.net
> List: https://lists.sourceforge.net/lists/listinfo/backuppc-users [1]
> Wiki: http://backuppc.wiki.sourceforge.net [2]
> Project: http://backuppc.sourceforge.net/ [3]
 

Links:
--
[1] https://lists.sourceforge.net/lists/listinfo/backuppc-users
[2] http://backuppc.wiki.sourceforge.net
[3] http://backuppc.sourceforge.net/
[4] http://www.donelsontrophy.com
--
Monitor Your Dynamic Infrastructure at Any Scale With Datadog!
Get real-time metrics from all of your servers, apps and tools
in one place.
SourceForge users - Click here to start your Free Trial of Datadog now!
http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/


Re: [BackupPC-users] Forbidden You don't have permission to access /BackupPC on this server.

2015-09-22 Thread Les Mikesell
On Tue, Sep 22, 2015 at 5:48 PM, Timothy Murphy  wrote:
> On Tuesday 22 September 2015 14:30:34 Les Mikesell wrote:
>> On Tue, Sep 22, 2015 at 2:20 PM, Brad Alexander  wrote:
>
>> I didn't mean there was a problem running 2.4, just that if you put
>> 'Require Local'
>> which I believe was in the other config posted, clients other than
>> from the same host as the server will be denied access.
>>   http://httpd.apache.org/docs/2.4/mod/mod_authz_host.html
>
>
> I don't understand why there is the double restriction
>   Allow from
> and
>   Require
> in /etc/httpd/conf.d/BackupPC.conf
>
> Both seem to me to have much the same effect.
>

The comments in the chunk as posted made it pretty clear that one part
was for Apache 2.2 and one for 2.4.

   
   # Apache 2.4
   
  ## Require valid-user
   Require all granted
   
   Require local
   
   
  
  
   # Apache 2.2
   order deny,allow
   deny from all
  ## allow from 127.0.0.1
  allow from all
  ## allow from ::1
  ## require valid-user
   require all granted
  

I assume that is to let the same config work with either version with
the default restriction to localhost.   But if you want to allow
access from remote clients you have to edit the part that matches your
system (inside the right IfModule block).

-- 
   Les Mikesell
 lesmikes...@gmail.com

--
Monitor Your Dynamic Infrastructure at Any Scale With Datadog!
Get real-time metrics from all of your servers, apps and tools
in one place.
SourceForge users - Click here to start your Free Trial of Datadog now!
http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140
___
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
List:https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/