Bug#843838: [pkg-bacula-devel] Bug#843838: Bug#843838: Bug#843838: Fail to access config file
On 10.11.2016 18:51, Jörg Frings-Fürst wrote: > I guess that the error is the wrong group. Of course, this is obvious. > But the error comes not from use rsync without --numeric-ids. > I don't use rsync, I have moved the hard disk with dd. > > But also I have no idea from where the dirmngr comes. I also have no idea, but I find it very suspicious that every group that should be "bacula" is "dirmngr" on your system, as if someone/something changed /etc/group or replaced it with a one not belonging to the system. > A note: > > If you change "the way the daemons are started" please check and change > the required user/group. I tested this change on several systems, some newly installed Sid, some upgraded from Jessie, some even upgraded from Squeeze and older. Every sane system had the correct groups and users for /etc/bacula/*. The only change for permissions and owners was needed for /etc/bacula/bacula-sd.conf and this is done in bacula-sd.postinst. In my opinion this problem is not a bug in the bacula package but your system was broken to begin with and this change just exposed it. You need to find out who or what made the changes to /etc/group as more problems may linger. I personally also don't see an obligation for Debian packages to check every possible angle an administrator could have manually broken their system and try to work around this, but YMMV. Just broadly changing and overwriting every permission in /etc/bacula/ is also wrong, as the administrator might have made working changes which we don't want to destroy. Grüße, Sven. signature.asc Description: OpenPGP digital signature
Bug#843838: [pkg-bacula-devel] Bug#843838: Bug#843838: Fail to access config file
Am Donnerstag, den 10.11.2016, 17:04 +0100 schrieb Sven Hartge: > On 10.11.2016 16:41, Jörg Frings-Fürst wrote: > > Am Donnerstag, den 10.11.2016, 09:25 +0100 schrieb Sven Hartge: > > > Was the system in question at some time in the past cloned/copied > > > via > > > rsync (without using --numeric-ids) or any other method while > > > having > > > been bootet from a rescue medium like GRML or Knoppix? > > One year ago I have move the system 1:1 (tested) to a new > > hardrive. > > And the error occurred after the last update. > > The error is triggered by a change in the way the daemons are > started, > as indicated in the changelog, but the core error is the wrong group > (dirmngr != bacula) on your system. > > I really think this happened during your system move (it happened to > me > as well in the past, forgot to add --numeric-ids to rsync) but you > did > not notice it, because most users either matched or the programs > don't > care about them, because they are started as root. > > I guess if you check other dynamic system users (meaning users > created > by packaging scripts and not hardcoded into base-passwd) and groups > you > will still find additional mismatches somewhere in /etc and other > places. > I guess that the error is the wrong group. But the error comes not from use rsync without --numeric-ids. I don't use rsync, I have moved the hard disk with dd. But also I have no idea from where the dirmngr comes. A note: If you change "the way the daemons are started" please check and change the required user/group. > Grüße, > Sven. > CU Jörg -- New: GPG Fingerprint: 63E0 075F C8D4 3ABB 35AB 30EE 09F8 9F3C 8CA1 D25D GPG key (long) : 09F89F3C8CA1D25D GPG Key: 8CA1D25D CAcert Key S/N : 0E:D4:56 Old pgp Key: BE581B6E (revoked since 2014-12-31). Jörg Frings-Fürst D-54470 Lieser Threema: SYR8SJXB IRC: j_...@freenode.net j_...@oftc.net My wish list: - Please send me a picture from the nature at your home. signature.asc Description: This is a digitally signed message part
Bug#843838: [pkg-bacula-devel] Bug#843838: Bug#843838: Fail to access config file
On 10.11.2016 16:41, Jörg Frings-Fürst wrote: > Am Donnerstag, den 10.11.2016, 09:25 +0100 schrieb Sven Hartge: >> Was the system in question at some time in the past cloned/copied via >> rsync (without using --numeric-ids) or any other method while having >> been bootet from a rescue medium like GRML or Knoppix? > One year ago I have move the system 1:1 (tested) to a new hardrive. > And the error occurred after the last update. The error is triggered by a change in the way the daemons are started, as indicated in the changelog, but the core error is the wrong group (dirmngr != bacula) on your system. I really think this happened during your system move (it happened to me as well in the past, forgot to add --numeric-ids to rsync) but you did not notice it, because most users either matched or the programs don't care about them, because they are started as root. I guess if you check other dynamic system users (meaning users created by packaging scripts and not hardcoded into base-passwd) and groups you will still find additional mismatches somewhere in /etc and other places. Grüße, Sven. signature.asc Description: OpenPGP digital signature
Bug#843838: [pkg-bacula-devel] Bug#843838: Fail to access config file
Hello Sven, Am Donnerstag, den 10.11.2016, 09:25 +0100 schrieb Sven Hartge: > On 10.11.2016 08:05, Jörg Frings-Fürst wrote: > > > # ls -l /etc/bacula/ > > insgesamt 104 > > -rw-r- 1 root dirmngr 9343 Feb 20 2016 bacula-dir.conf > > -rw-r- 1 root bacula 9156 Aug 18 14:12 bacula-dir.conf.dist > > -rw-r- 1 root dirmngr 1024 Sep 29 2013 bacula-fd.conf > > This looks highly suspicious and reminds me of something that > happened > to me in the past: > > Was the system in question at some time in the past cloned/copied via > rsync (without using --numeric-ids) or any other method while having > been bootet from a rescue medium like GRML or Knoppix? > One year ago I have move the system 1:1 (tested) to a new hardrive. And the error occurred after the last update. > It seems the numerical UID in the rootfs got messed up. > > Could you also please provide the output of > > ls -ln /etc/bacula > getent group dirmngr > getent group bacula > $ ls -ln /etc/bacula insgesamt 104 -rw-r- 1 0 129 9343 Feb 20 2016 bacula-dir.conf -rw-r- 1 0 134 9156 Aug 18 14:12 bacula-dir.conf.dist -rw-r- 1 0 129 1024 Sep 29 2013 bacula-fd.conf -rw-r- 1 0 0 1127 Aug 18 14:12 bacula-fd.conf.dist -rw-r- 1 129 129 3338 Sep 12 2014 bacula-sd.conf -rw-r- 1 129 134 8070 Aug 18 14:12 bacula-sd.conf.dist -rw-r- 1 0 129 175 Feb 24 2014 bat.conf -rw-r- 1 0 134 180 Aug 18 14:12 bat.conf.dist -rw-r- 1 0 129 172 Sep 29 2013 bconsole.conf -rw-r- 1 0 134 266 Aug 18 14:12 bconsole.conf.dist -rw--- 1 0 0 442 Feb 24 2014 common_default_passwords -rw--- 1 0 129 442 Dez 12 2013 common_default_passwords.dist -rw-r- 1 0 129 926 Okt 20 2014 filesets.conf drwxr-xr-x 2 0 0 4096 Nov 9 06:13 scripts -rw-r- 1 0 129 3396 Sep 12 2014 server-ixion.conf -rw-r- 1 0 129 3433 Mai 1 2014 server-neptun.conf -rw-r- 1 0 129 583 Apr 18 2014 tray-monitor.conf -rw-r- 1 0 129 583 Dez 12 2013 tray-monitor.conf.dist -rw-r- 1 0 129 3590 Feb 20 2016 ws-merkur.conf -rw-r- 1 0 129 3436 Mai 2 2014 ws-triton.conf -rw-r- 1 0 129 3127 Mai 1 2014 ws-zaubermaus.conf $ getent group dirmngr dirmngr:x:129: $ getent group bacula bacula:x:134: > Grüße, > Sven. > > CU Jörg -- New: GPG Fingerprint: 63E0 075F C8D4 3ABB 35AB 30EE 09F8 9F3C 8CA1 D25D GPG key (long) : 09F89F3C8CA1D25D GPG Key: 8CA1D25D CAcert Key S/N : 0E:D4:56 Old pgp Key: BE581B6E (revoked since 2014-12-31). Jörg Frings-Fürst D-54470 Lieser Threema: SYR8SJXB IRC: j_...@freenode.net j_...@oftc.net My wish list: - Please send me a picture from the nature at your home. signature.asc Description: This is a digitally signed message part
Bug#843838: [pkg-bacula-devel] Bug#843838: Fail to access config file
On 10.11.2016 08:05, Jörg Frings-Fürst wrote: > # ls -l /etc/bacula/ > insgesamt 104 > -rw-r- 1 root dirmngr 9343 Feb 20 2016 bacula-dir.conf > -rw-r- 1 root bacula 9156 Aug 18 14:12 bacula-dir.conf.dist > -rw-r- 1 root dirmngr 1024 Sep 29 2013 bacula-fd.conf This looks highly suspicious and reminds me of something that happened to me in the past: Was the system in question at some time in the past cloned/copied via rsync (without using --numeric-ids) or any other method while having been bootet from a rescue medium like GRML or Knoppix? It seems the numerical UID in the rootfs got messed up. Could you also please provide the output of ls -ln /etc/bacula getent group dirmngr getent group bacula Grüße, Sven. signature.asc Description: OpenPGP digital signature
Bug#843838: [pkg-bacula-devel] Bug#843838: Fail to access config file
Hi, thanks for your report. As a quick fix "chgrp bacula /etc/bacula/bacula-dir.conf" should help. To further understand your problem though, could you please also send us the output of: groups bacula cat /etc/defaults/bacula-dir.conf and if you use systemd, any local modifications of the startup procedure? Thanks, - Carsten
Bug#843838: Fail to access config file
Hi, the directory listing /etc/bacula: # ls -l /etc/bacula/ insgesamt 104 -rw-r- 1 root dirmngr 9343 Feb 20 2016 bacula-dir.conf -rw-r- 1 root bacula 9156 Aug 18 14:12 bacula-dir.conf.dist -rw-r- 1 root dirmngr 1024 Sep 29 2013 bacula-fd.conf -rw-r- 1 root root1127 Aug 18 14:12 bacula-fd.conf.dist -rw-r- 1 bacula dirmngr 3338 Sep 12 2014 bacula-sd.conf -rw-r- 1 bacula bacula 8070 Aug 18 14:12 bacula-sd.conf.dist -rw-r- 1 root dirmngr 175 Feb 24 2014 bat.conf -rw-r- 1 root bacula 180 Aug 18 14:12 bat.conf.dist -rw-r- 1 root dirmngr 172 Sep 29 2013 bconsole.conf -rw-r- 1 root bacula 266 Aug 18 14:12 bconsole.conf.dist -rw--- 1 root root 442 Feb 24 2014 common_default_passwords -rw--- 1 root dirmngr 442 Dez 12 2013 common_default_passwords.dist -rw-r- 1 root dirmngr 926 Okt 20 2014 filesets.conf drwxr-xr-x 2 root root4096 Nov 9 06:13 scripts -rw-r- 1 root dirmngr 3396 Sep 12 2014 server-ixion.conf -rw-r- 1 root dirmngr 3433 Mai 1 2014 server-neptun.conf -rw-r- 1 root dirmngr 583 Apr 18 2014 tray-monitor.conf -rw-r- 1 root dirmngr 583 Dez 12 2013 tray-monitor.conf.dist -rw-r- 1 root dirmngr 3590 Feb 20 2016 ws-merkur.conf -rw-r- 1 root dirmngr 3436 Mai 2 2014 ws-triton.conf -rw-r- 1 root dirmngr 3127 Mai 1 2014 ws-zaubermaus.conf CU Jörg -- New: GPG Fingerprint: 63E0 075F C8D4 3ABB 35AB 30EE 09F8 9F3C 8CA1 D25D GPG key (long) : 09F89F3C8CA1D25D GPG Key: 8CA1D25D CAcert Key S/N : 0E:D4:56 Old pgp Key: BE581B6E (revoked since 2014-12-31). Jörg Frings-Fürst D-54470 Lieser Threema: SYR8SJXB IRC: j_...@freenode.net j_...@oftc.net My wish list: - Please send me a picture from the nature at your home. signature.asc Description: This is a digitally signed message part
Bug#843838: Fail to access config file
Package: bacula-director Version: 7.4.4+dfsg-3 Severity: grave -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, after upgrade baculu bacule-director don't start anymore. Nov 10 07:39:29 merkur systemd[1]: Starting Bacula Director Daemon service... Nov 10 07:39:29 merkur bacula-dir[24610]: bacula-dir: ERROR TERMINATION at parse_conf.c:919 Nov 10 07:39:29 merkur bacula-dir[24610]: Config error: Cannot open config file "/etc/bacula/bacula-dir.conf": Keine Berechtigung Nov 10 07:39:29 merkur bacula-dir[24610]: 10-Nov 07:39 bacula-dir: ERROR TERMINATION at parse_conf.c:919 Nov 10 07:39:29 merkur bacula-dir[24610]: Config error: Cannot open config file "/etc/bacula/bacula-dir.conf": Keine Berechtigung Nov 10 07:39:29 merkur systemd[1]: bacula-director.service: Control process exited, code=exited status=1 Nov 10 07:39:29 merkur systemd[1]: Failed to start Bacula Director Daemon service. Nov 10 07:39:29 merkur systemd[1]: bacula-director.service: Unit entered failed state. Nov 10 07:39:29 merkur systemd[1]: bacula-director.service: Failed with result 'exit-code'. - -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (900, 'testing'), (800, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.7.0-1-amd64 (SMP w/6 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages bacula-director depends on: ii bacula-common 7.4.4+dfsg-3 ii bacula-director-mysql 7.4.4+dfsg-3 ii bsd-mailx [mailx] 8.1.2-0.20160123cvs-3 ii init-system-helpers1.45 ii libc6 2.24-5 ii libcap21:2.25-1 ii libgcc11:6.2.0-10 ii libssl1.0.21.0.2j-1 ii libstdc++6 6.2.0-10 ii libwrap0 7.6.q-25 ii lsb-base 9.20161101 ii ucf3.0036 ii zlib1g 1:1.2.8.dfsg-2+b3 bacula-director recommends no packages. Versions of packages bacula-director suggests: pn bacula-doc - -- no debconf information -BEGIN PGP SIGNATURE- iQIcBAEBCgAGBQJYJBd7AAoJEAn4nzyModJdEP4QAI9Sud21FefTt6l0SXzBmBsq Fqu7EAF+0xgHUE0S+1JaVLV8DyjGtGNiQi06vKWC6AdExJG21MeoVmeQrs42pqYS 7kRfGNlUsvg/hYKQa+tO1pJcUW7Qw7uw9jbzUUA7s1jBecIBFi28V+s9W9ai0rtR Og46QbQ81j/x6P4OnZ86MM6L4/RbRxWq+C9QRo0NjGju52JSvtCFTjKdEGguBYSZ Wc0yCrI+L2Ncbh6WJqdp0xMA8B8vKQw12BrJxYur0E++ZBeXbNMGbAgnrfz3HvRJ qWxOmqO0R2Zh+ZdgHvdd50+Zm/IqiZVORd8lEoNd9T5KHYWrxBSei3yyNN+b0oGK nFgPm0YRpf3x6dKKkIuCov8Qg458rkbOWx45BJeU40BBkVovcBc7+wEvREfGLKgs CtamdWJUQtmu3tPUYh/4rloZdnq3rvY89tShGa6tUIWFblw85gl9zeVssrZo5OSC JorkJdn9HJ9KFunmqR4I0i+uaCdZOnLZD8YKBt1sK1GNxBP4XbIaEb7JnfZM2vrq ap7dH84sdXPHoLkX9vG6UcNYzFASR/0X0EbXeNWdEYBsZBG8VDdizam3oOu+zV9w 7nki7PHvQxinkLX8QIMVr5ZKCTIPUTv3pl9netMAy75/FhL89wgYrjBmL6aBhWLx RyqFIztZEZgYA344ldDc =hKUx -END PGP SIGNATURE-
