Amanda-Users

Re: permission problem with amrecover

2006-04-27 08:59:50
Subject: Re: permission problem with amrecover
From: Thomas Ginestet <thomas.ginestet AT gpsa DOT fr>
To: Gene Heskett <gene.heskett AT verizon DOT net>
Date: Thu, 27 Apr 2006 13:56:51 +0200
Gene Heskett a écrit :

On Wednesday 26 April 2006 08:38, Thomas Ginestet wrote:
Hi list,

Thanks to your help, I've successful launched amcheck and amdump :-)
I've tried amrecover to check recovery too but some new problems
occured.

After playing with  access not allowed error, I'm still stuck on the
following one:

backup:/# amrecover DailySet

AMRECOVER Version 2.5.0. Contacting server on backup ...

220 backup AMANDA index server (2.5.0) ready.

200 Access OK

Setting restore date to today (2006-04-26)

200 Working date set to 2006-04-26.

501 Could not read config file /etc/amanda/DailySet/amanda.conf!


I've checked amindexd logs:

backup:/var/log/amanda# vi amindexd.20060426132954.debug

amindexd: debug 1 pid 12531 ruid 34 euid 34: start at Wed Apr 26
13:23:57 2006

amindexd: version 2.5.0

amindexd: < 220 backup AMANDA index server (2.5.0) ready.

amindexd: > SECURITY USER root

bsd security: remote host backup.gpsa.fr user root local user backup

amindexd: < 200 Access OK

amindexd: > FEATURES fffffeff9ffeffff07

amindexd: < 200 FEATURES fffffeff9ffeffff07

amindexd: > DATE 2006-04-26

amindexd: < 200 Working date set to 2006-04-26.

amindexd: > SCNF DailySet

could not open conf file "/etc/amanda/DailySet/amanda.conf":
Permission denied

amindexd: < 501 Could not read config file
/etc/amanda/DailySet/amanda.conf!



My permissions for /etc/amanda/DailySet/amanda.conf:

backup:/var/log/amanda# ls -al /etc/amanda/DailySet/amanda.conf
-rwxrwx---  1 root amanda 4451 2006-04-25 16:19
/etc/amanda/DailySet/amanda.conf

I don't understand why it complain about that...

You've apparently edited the amanda.conf as root (never do that, always become amanda to do that) and the perms are now fubar. It should look something like this:

-rw-r--r-- 1 amanda disk 22049 Apr 16 08:59 /usr/local/etc/amanda/Daily/amanda.conf

The user amanda should be a member of the group disk or backup. AFAIK, there is no group 'amanda', at least not here.

Is this a new install?


Any help would be appreciate


Thomas

Yes, I've tried to properly reconfigure Amanda but with Debian tools. I didn't find how to set --with-user=amanda --with-group=backup ..... options, that's why I've changed all permissions by hand. I'm so lost with permissions....following your advices, this is what I've set:

backup:~# ls -l /usr/sbin/am* => owner amanda group backup for all except for amcheck:

-rwSr--r-- 1 root backup 35164 2006-04-03 14:07 /usr/sbin/amcheck

backup:~# ls -al /usr/local/sbin/am* => owner amanda group backup for all except for amcheck:

-rwSr--r-- 1 root backup 93903 2006-04-03 10:09 /usr/local/sbin/amcheck

backup:~# ls -l /usr/local/libexec => owner amanda group backup for all except for:

-rwSr--r-- 1 root backup 86228 2006-04-03 10:09 dumper

-rwSr--r-- 1 root backup 40553 2006-04-03 10:08 killpgrp

-rwSr--r-- 1 root backup 100783 2006-04-03 10:09 planner

-rwSr--r-- 1 root backup 38055 2006-04-03 10:08 rundump

-rwSr--r-- 1 root backup 38062 2006-04-03 10:08 runtar

backup:~# ls -l /usr/lib/amanda => owner amanda group backup for all

backup:~# ls -l /var/log/amanda => owner amanda group backup for all


backup:~# ls -l /etc/amanda => owner amanda group backup for all


backup:~# ls -l /etc/amandahosts => owner amanda group backup for all


backup:~# ls -l /tmp/amanda => owner amanda group backup for all



My dumpuser on amanda.conf is amanda but I can't launch amcheck anymore:
backup:~# su amanda -c "/usr/sbin/amcheck DailySet" bash: /usr/sbin/amcheck: Permission non accordée (access not allowed for english guys ;-))
I must have forgotten something else but I don't know what...


Thomas



<Prev in Thread] Current Thread [Next in Thread>