BackupPC-users

[BackupPC-users] SOLVED: Error: auth required, but service web_backup is open/insecure

2009-03-21 10:48:17
Subject: [BackupPC-users] SOLVED: Error: auth required, but service web_backup is open/insecure
From: "Clint Alexander" <clint AT cdalexander DOT net>
To: <backuppc-users AT lists.sourceforge DOT net>
Date: Sat, 21 Mar 2009 10:15:33 -0400
- BackupPC: v3.1.0
- File-RsyncP: v0.68
- Rsync  v2.6.8  protocol version 29
I've tracked down another bug with RsyncP.pm
 
When your rsync server is using a MOTD file, RsyncP does not take this under consideration and when recieves the first line of the MOTD banner and not the "AUTHREQD" it expected, it chokes.
 
 
Not a bad FAQ item here. :)
 
 
//Clint
----- Original Message -----
Sent: Thursday, March 19, 2009 8:32 PM
Subject: Error: auth required, but service web_backup is open/insecure

Hi everyone.
 
As the subject says, I've run into this issue where BackupPC believes the connection is unsecure when it is not. I did some general debugging and info collection...
 
####
#### ON BACKUPPC CLIENT
####
 
# cat /etc/hosts.allow
<empty>
 
# cat /etc/hosts.deny
<empty>
 
# /usr/bin/rsync --version
rsync  version 2.6.8  protocol version 29
Copyright (C) 1996-2006 by Andrew Tridgell, Wayne Davison, and others.

# cat /etc/rsyncd.conf
motd file           = /etc/rsyncd/rsyncd.motd
log file            = /var/log/rsyncd.log
pid file            = /var/run/rsyncd.pid
lock file           = /var/run/rsyncd.lock
port                = 873
syslog facility     = local5
max connections     = 4
use chroot          = no
uid                 = root
gid                 = root
 
[web_backup]
  comment         = Backups & Restores
  path            = /websites
  auth users      = backuppc
  secrets file    = /etc/rsyncd/rsyncd.secrets
 

# cat /etc/rsyncd/rsyncd.secrets
backuppc:password
 
 

####
#### ON BACKUPPC SERVER
####
 
Software versions are:
- Red Hat Enterprise Linux Server release 5.3
- BackupPC: v3.1.0
- File-RsyncP: v0.68
 

$ id
uid=101(backuppc) gid=102(backuppc) groups=102(backuppc)
 
$ cat /etc/hosts
192.168.0.67    myserver
 
$ pwd
/var/lib/BackupPC/temp
 
$ ls -la
total 8
drwxr-xr-x 2 backuppc backuppc 4096 Mar 19 20:24 .
drwxr-x--- 8 backuppc root     4096 Mar 19 20:01 ..
 
$ rsync -qazrt --delete backuppc@myserver::web_backup /var/lib/BackupPC/temp
Password: <entered password>
 
(a few seconds passed and then back to prompt)

$ ls -la
total 16
drwxr-xr-x 4 backuppc backuppc 4096 Mar 19 19:50 .
drwxr-x--- 8 backuppc root     4096 Mar 19 19:45 ..
drwxr-x--- 4 backuppc backuppc 4096 Mar 19 19:48 test_folder_1
drwsrws--- 4 backuppc backuppc 4096 Mar 19 19:48 www.mysite1.com
 
 
(Confirmed rsync was working and authentication was required)
 

$ ./BackupPC_dump -f -v myserver
cmdSystemOrEval: about to system /bin/ping -c 1 -w 3 myserver
cmdSystemOrEval: finished: got output PING myserver (192.168.0.67) 56(84) bytes of data.
64 bytes from myserver (192.168.0.67): icmp_seq=1 ttl=64 time=0.101 ms
 
--- myserver ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.101/0.101/0.101/0.000 ms
 
cmdSystemOrEval: about to system /bin/ping -c 1 -w 3 myserver
cmdSystemOrEval: finished: got output PING myserver (192.168.0.67) 56(84) bytes of data.
64 bytes from myserver (192.168.0.67): icmp_seq=1 ttl=64 time=0.081 ms
 
--- myserver ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.081/0.081/0.081/0.000 ms
 
CheckHostAlive: returning 0.081
full backup started for directory web_backup
started full dump, share=web_backup
Connected to myserver:873, remote version 29
Negotiated protocol version 28
Error connecting to module web_backup at myserver:873: auth required, but service web_backup is open/insecure
Got fatal error during xfer (auth required, but service web_backup is open/insecure)
cmdSystemOrEval: about to system /bin/ping -c 1 -w 3 myserver
cmdSystemOrEval: finished: got output PING myserver (192.168.0.67) 56(84) bytes of data.
64 bytes from myserver (192.168.0.67): icmp_seq=1 ttl=64 time=0.095 ms
 
--- myserver ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.095/0.095/0.095/0.000 ms
 
cmdSystemOrEval: about to system /bin/ping -c 1 -w 3 myserver
cmdSystemOrEval: finished: got output PING myserver (192.168.0.67) 56(84) bytes of data.
64 bytes from myserver (192.168.0.67): icmp_seq=1 ttl=64 time=0.082 ms
 
--- myserver ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.082/0.082/0.082/0.000 ms
 
CheckHostAlive: returning 0.082
Backup aborted (auth required, but service web_backup is open/insecure)
Not saving this as a partial backup since it has fewer files than the prior one (got 0 and 0 files versus 0)
dump failed: auth required, but service web_backup is open/insecure
-bash-3.2$
 
 
Now, I changed this to not require authentication just for testing...
$Conf{RsyncdAuthRequired} = 0
 
... and I got this error (snipped only relevant info...)
 
$ ./BackupPC_dump -f -v myserver
...
full backup started for directory web_backup
started full dump, share=web_backup
Connected to myserver:873, remote version 29
Negotiated protocol version 28
Error connecting to module web_backup at myserver:873: unexpected response: ''
Got fatal error during xfer (unexpected response: '')
cmdSystemOrEval: about to system /bin/ping -c 1 -w 3 myserver
cmdSystemOrEval: finished: got output PING myserver (192.168.0.67) 56(84) bytes of data.
64 bytes from myserver (192.168.0.67): icmp_seq=1 ttl=64 time=0.094 ms
....
 
 
So, I've confirmed everything is working on the outside of BackupPC. I found this thread which touches on what may be the issue: http://www.adsm.org/lists/html/BackupPC-users/2008-06/msg00295.html
 
However, this "patch" did not work for me.
 
 
Does anyone have a clue on what I could be doing wrong?
 
 
Thanks!
 
 
//Clint Alexander
 
------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/
<Prev in Thread] Current Thread [Next in Thread>
  • [BackupPC-users] SOLVED: Error: auth required, but service web_backup is open/insecure, Clint Alexander <=