Package: backuppc
Version: 3.3.2-2
Severity: normal

Dear Maintainer,

Freshly installed BackupPC on this Buster host. Could not connect with
browser to http://hostname/backuppc. Error in /var/log/apache/error.log:

[Fri Apr 12 15:30:50.876517 2019] [authz_core:error] [pid 786:tid 
139650751440640] [client 192.168.42.114:52654] AH01630: client denied by server 
configuration: /usr/share/backuppc/cgi-bin/
[Fri Apr 12 16:16:18.087116 2019] [authz_core:error] [pid 786:tid 
139650509231872] [client 192.168.42.114:52718] AH01630: client denied by server 
configuration: /usr/share/backuppc/cgi-bin/
[Fri Apr 12 16:17:10.254008 2019] [authz_core:error] [pid 790:tid 
139650643515136] [client 192.168.42.114:52732] AH01630: client denied by server 
configuration: /usr/share/backuppc/cgi-bin/index.cgi
[Fri Apr 12 16:17:17.668545 2019] [authz_core:error] [pid 786:tid 
139650593158912] [client 192.168.42.114:52734] AH01630: client denied by server 
configuration: /usr/share/backuppc/cgi-bin/

Fixed this by adding to /etc/backuppc/apache.conf 
require valid-user
after
AuthName "BackupPC Admin"

Now it works. 

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-4-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=fi_FI.UTF-8, LC_CTYPE=fi_FI.UTF-8 (charmap=UTF-8), 
LANGUAGE=fi_FI.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages backuppc depends on:
ii  adduser                                      3.118
ii  apache2 [httpd]                              2.4.38-3
ii  apache2-utils                                2.4.38-3
ii  bzip2                                        1.0.6-9
ii  debconf [debconf-2.0]                        1.5.71
ii  exim4-daemon-light [mail-transport-agent]    4.92-2
ii  iputils-ping                                 3:20180629-2
ii  libarchive-zip-perl                          1.64-1
ii  libc6                                        2.28-8
ii  libcgi-pm-perl                               4.40-1
pn  libdigest-md5-perl                           <none>
pn  libio-compress-perl | libcompress-zlib-perl  <none>
ii  libsocket6-perl                              0.29-1+b1
ii  libtime-parsedate-perl                       2015.103-3
ii  libwww-perl                                  6.36-1
ii  lsb-base                                     10.2019031300
ii  perl                                         5.28.1-6
ii  ucf                                          3.0038+nmu1

Versions of packages backuppc recommends:
ii  libfile-rsyncp-perl          0.74-2.1+b5
ii  libio-dirent-perl            0.05-1+b7
ii  openssh-client [ssh-client]  1:7.9p1-9
ii  rrdtool                      1.7.1-1
ii  rsync                        3.1.3-6
ii  samba-common-bin             2:4.9.5+dfsg-3
ii  smbclient                    2:4.9.5+dfsg-3

Versions of packages backuppc suggests:
pn  certbot | acme-tiny | acmetool | dehydrated | lacme | lecm | lego  <none>
pn  par2                                                               <none>
pn  w3m | www-browser                                                  <none>

-- Configuration Files:
/etc/backuppc/apache.conf changed:
Alias /backuppc /usr/share/backuppc/cgi-bin/
<Directory /usr/share/backuppc/cgi-bin/>
        AllowOverride None
        # Uncomment the line below to ensure that nobody can sniff important
        # info from network traffic during editing of the BackupPC config or
        # when browsing/restoring backups.
        # Requires that you have your webserver set up for SSL (https) access.
        #SSLRequireSSL
                                        
        Options ExecCGI FollowSymlinks
        AddHandler cgi-script .cgi
        DirectoryIndex index.cgi
        AuthUserFile /etc/backuppc/htpasswd
        AuthType basic
        AuthName "BackupPC admin"
        require valid-user
        <RequireAll>
                # Comment out this line once you have setup HTTPS and 
uncommented SSLRequireSSL
                Require local
                # This line ensures that only authenticated users may access 
your backups
                Require valid-user
        </RequireAll>
</Directory>

/etc/backuppc/hosts changed:
host        dhcp    user    moreUsers     # <--- do not edit this line
localhost   0       backuppc
localhost   0       backuppc
peli        0       backuppc


-- debconf information:
* backuppc/configuration-note:
  backuppc/restart-webserver: true
* backuppc/reconfigure-webserver: apache2


-- 
Tapio Lehtonen
tapio.lehto...@iki.fi
http://www.iki.fi/tapio.lehtonen

Attachment: signature.asc
Description: PGP signature

Reply via email to