Re: [RDD] pypad filewrite permission denied

[Fred Gleason]

On Feb 4, 2020, at 06:21, drew Roberts  wrote:

> What is(are) the best way(s) to solve this permission issue. What is the best 
> practice in this situation?

PyPAD scripts execute as the user defined in ‘/etc/rd.conf’ as follows:

*** snip snip ***
[Identity]
PypadOwner=pypad
PypadGroup=pypad
*** snip snip ***

By default, both the ‘user’ and the ‘group’ are ‘pypad’. If you’re using the 
stock CentOS setup, these accounts get created automatically by the installer; 
on ‘installed from source’ setups, it will need to be done by hand. It’s also 
perfectly possible to change these entries to have the scripts run under some 
other account(s).

Cheers!


|-|
| Frederick F. Gleason, Jr. | Chief Developer |
|   | Paravel Systems |
|-|
| A room without books is like a body without a soul. |
| |
| -- Cicero   |
|-|

___
Rivendell-dev mailing list
Rivendell-dev@lists.rivendellaudio.org
http://caspian.paravelsystems.com/mailman/listinfo/rivendell-dev

Re: [RDD] pypad filewrite permission denied

[drew Roberts]

Mark,

On Mon, Feb 3, 2020 at 9:01 PM Mark Murdock 
wrote:

> We just put a Rivendell client on the air today, and things are mostly
> going well. However, the pypad_writefile instance for now play info is not
> writing to /home/rd/NowPlay. The error log says permission is denied.
>

I have run into this as well while helping someone else move from 2.x to
3.x...


> This works fine if we play out from the server,
>

I am surprised to hear this, we were on a standalone machine (I think, I
did not do the initial setup but it was a single machine system.)

> but not from the on air client. How do I give the on air machine
> permission to write to this directory?
>

The question is not exactly this. The simple, dangerous answer is:

su
chmod 777 /home/rd

or

sudo chmod 777 /home/rd

Don't do either one of these.

The other simple answer is to write the file somewhere where "you" do have
permissions, I chose /tmp/NowPlay (to match your original...)

Neither of these is satisfying.

The question I have is:

What is(are) the best way(s) to solve this permission issue. What is the
best practice in this situation?

I also considered making a directory called:

/home/rdreports

and then

chmod 777 /home/rdreports

and then write to

/home/rdreports/NowPlay

That would give about the same security as the /tmp option.

Looking at the file now I see something like:

-rw-r--r--. 1 pypad pypad 25 Feb  4 06:12 /tmp/NowPlay

also:

grep pypad /etc/passwd
pypad:x:151:151:Rivendell PyPAD scripts:/dev/null:/bin/false

grep pypad /etc/group
pypad:x:151:

so slightly better security with the /etc/rdreports idea would be:

chmod 770 /home/rdreports
chown pypad:pypad /home/rdreports

and then add rd to the pypad group.

>
>
> Thanks,
>
>
>
> Mark Murdock
>
> KAMB
>
> 90 E. 16th St.
>
> Merced, CA 95340
>
> (209) 723-1015
>
> m...@celebrationradio.com
>
> Website 
>
>
>

all the best,

drew
-- 
Enjoy the *Paradise Island Cam* playing
*Bahamian Or Nuttin* - https://www.paradiseislandcam.com/
___
Rivendell-dev mailing list
Rivendell-dev@lists.rivendellaudio.org
http://caspian.paravelsystems.com/mailman/listinfo/rivendell-dev

[RDD] pypad filewrite permission denied

[Mark Murdock]

We just put a Rivendell client on the air today, and things are mostly going 
well. However, the pypad_writefile instance for now play info is not writing to 
/home/rd/NowPlay. The error log says permission is denied. This works fine if 
we play out from the server, but not from the on air client. How do I give the 
on air machine permission to write to this directory?

Thanks,

Mark Murdock
KAMB
90 E. 16th St.
Merced, CA 95340
(209) 723-1015
m...@celebrationradio.com
Website

___
Rivendell-dev mailing list
Rivendell-dev@lists.rivendellaudio.org
http://caspian.paravelsystems.com/mailman/listinfo/rivendell-dev