On Thu, Apr 27, 2006 at 01:56:51PM +0200, Thomas Ginestet enlightened us:
> Gene Heskett a écrit :
> 
> >On Wednesday 26 April 2006 08:38, Thomas Ginestet wrote:
> > 
> >
> >>Hi list,
> >>
> >>Thanks to your help, I've successful launched amcheck and amdump :-)
> >>I've tried amrecover to check recovery too but some new problems
> >>occured.
> >>
> >>After playing with  access not allowed error, I'm still stuck on the
> >>following one:
> >>
> >>backup:/# amrecover DailySet
> >>
> >>AMRECOVER Version 2.5.0. Contacting server on backup ...
> >>
> >>220 backup AMANDA index server (2.5.0) ready.
> >>
> >>200 Access OK
> >>
> >>Setting restore date to today (2006-04-26)
> >>
> >>200 Working date set to 2006-04-26.
> >>
> >>501 Could not read config file /etc/amanda/DailySet/amanda.conf!
> >>
> >>
> >>I've checked amindexd logs:
> >>
> >>backup:/var/log/amanda# vi amindexd.20060426132954.debug
> >>
> >>amindexd: debug 1 pid 12531 ruid 34 euid 34: start at Wed Apr 26
> >>13:23:57 2006
> >>
> >>amindexd: version 2.5.0
> >>
> >>amindexd: < 220 backup AMANDA index server (2.5.0) ready.
> >>
> >>amindexd: > SECURITY USER root
> >>
> >>bsd security: remote host backup.gpsa.fr user root local user backup
> >>
> >>amindexd: < 200 Access OK
> >>
> >>amindexd: > FEATURES fffffeff9ffeffff07
> >>
> >>amindexd: < 200 FEATURES fffffeff9ffeffff07
> >>
> >>amindexd: > DATE 2006-04-26
> >>
> >>amindexd: < 200 Working date set to 2006-04-26.
> >>
> >>amindexd: > SCNF DailySet
> >>
> >>could not open conf file "/etc/amanda/DailySet/amanda.conf":
> >>Permission denied
> >>
> >>amindexd: < 501 Could not read config file
> >>/etc/amanda/DailySet/amanda.conf!
> >>
> >>
> >>
> >>My permissions for /etc/amanda/DailySet/amanda.conf:
> >>
> >>backup:/var/log/amanda# ls -al /etc/amanda/DailySet/amanda.conf
> >>-rwxrwx---  1 root amanda 4451 2006-04-25 16:19
> >>/etc/amanda/DailySet/amanda.conf
> >>
> >>I don't understand why it complain about that...
> >>   
> >>
> >
> >You've apparently edited the amanda.conf as root (never do that, always 
> >become amanda to do that) and the perms are now fubar.  It should look 
> >something like this:
> >
> >-rw-r--r--  1 amanda disk 22049 Apr 16 
> >08:59 /usr/local/etc/amanda/Daily/amanda.conf
> >
> >The user amanda should be a member of the group disk or backup. AFAIK, 
> >there is no group 'amanda', at least not here.
> >
> >Is this a new install?
> >
> >
> > 
> >
> >>Any help would be appreciate
> >>
> >>
> >>Thomas
> >>   
> >>
> >
> > 
> >
> Yes, I've tried to properly reconfigure Amanda but with Debian tools. I 
> didn't find how to set --with-user=amanda --with-group=backup ..... 
> options, that's why I've changed all permissions by hand.
> I'm so lost with permissions....following your advices, this is what 
> I've set:
> 
> backup:~# ls -l /usr/sbin/am* => owner amanda group backup for all 
> except for amcheck:
> 
> -rwSr--r-- 1 root backup 35164 2006-04-03 14:07 /usr/sbin/amcheck
> 
> backup:~# ls -al /usr/local/sbin/am* => owner amanda group backup for 
> all except for amcheck:
> 
> -rwSr--r-- 1 root backup 93903 2006-04-03 10:09 /usr/local/sbin/amcheck
> 
> backup:~# ls -l /usr/local/libexec => owner amanda group backup for all 
> except for:
> 
> -rwSr--r-- 1 root backup 86228 2006-04-03 10:09 dumper
> 
> -rwSr--r-- 1 root backup 40553 2006-04-03 10:08 killpgrp
> 
> -rwSr--r-- 1 root backup 100783 2006-04-03 10:09 planner
> 
> -rwSr--r-- 1 root backup 38055 2006-04-03 10:08 rundump
> 
> -rwSr--r-- 1 root backup 38062 2006-04-03 10:08 runtar
> 
> backup:~# ls -l /usr/lib/amanda => owner amanda group backup for all
> 
> backup:~# ls -l /var/log/amanda => owner amanda group backup for all
> 
> 
> backup:~# ls -l /etc/amanda => owner amanda group backup for all
> 
> 
> backup:~# ls -l /etc/amandahosts => owner amanda group backup for all
> 
> 
> backup:~# ls -l /tmp/amanda => owner amanda group backup for all
> 
> 
> 
> My dumpuser on amanda.conf is amanda but I can't launch amcheck anymore:
> backup:~# su amanda -c "/usr/sbin/amcheck DailySet" bash: 
> /usr/sbin/amcheck: Permission non accordée (access not allowed for 
> english guys ;-))
> I must have forgotten something else but I don't know what...
> 
> 

You're missing the execute bit on all of those files...

Matt

-- 
Matt Hyclak
Department of Mathematics 
Department of Social Work
Ohio University
(740) 593-1263