Bacula-users

[Bacula-users] webacula issues

2011-07-08 15:27:15
Subject: [Bacula-users] webacula issues
From: museikaze <bacula-forum AT backupcentral DOT com>
To: bacula-users AT lists.sourceforge DOT net
Date: Fri, 08 Jul 2011 12:23:30 -0700
Oh sorry, I normally just use nano to open up the sudoers file. Thanks for your 
help, I managed to get it working by changing the bconsole.conf file to run as 
the apache user instead of root and by removing "/usr/bin/sudo" from the 
webacula config file.

On Thu, Jul 07, 2011 at 02:21:28PM -0700, museikaze wrote:
Thanks for the reply. I tried running it in visudo and got the same result 
except it now sais "Error Command: /usr/sbin/visudo /usr/sbin/bconsole -n -c 
/etc/bacula/bconsole.conf". I've tried looking for the problem on google to no 
avail. Has anyone come across this issue before?

There is some missunderstanding here.
visudo is a tool to edit /etc/sudoers.
/etc/sudoers is the file declaring who may call sudo for which purposes.

A line in etc/sudoers like
%sudo ALL=(ALL) ALL
will allow everyone in unix group 'sudo' to become any user with sudo to
call any command after entering the own password.

user1 ALL=(ALL) NOPASSWD:/usr/sbin/bconsole -n -c /etc/bacula/bconsole.conf
allows the specific user1 to run "/usr/sbin/bconsole -n -c 
/etc/bacula/bconsole.conf"
without entering a password.
If your box is a dedicated backup server it may be acceptable to just
allow the webserver access to /etc/bacula/bconsole.conf and get rid of
the sudo-stuff. On my box this is done by adding www-data (the user
running apache here) to the group 'bacula', the actual group that owns
and has read access to the files in /etc/bacula. However, it would be
sufficient to have access to /etc/bacula/bconsole.conf.

It sais theres an error with that command, but the command produces no error 
output. So I tried running the command "/usr/bin/sudo /usr/sbin/bconsole -n -c 
/etc/bacula/bconsole.conf" and "sudo bconsole -n -c /etc/bacula/bconsole" as 
root and they both work. The only reason I can think of is perhaps I need a 
file permission somewhere? Im using FC12.

Try if it works as user 'www-data' 'apache' or whatever your system uses
for running the webserver. sudo runs stuff as 'root' by default, if you
already are root your debugging capabilities are limited regarding to
correct sudo setups.

Regards,
Adrian

+----------------------------------------------------------------------
|This was sent by museikaze AT hotmail DOT com via Backup Central.
|Forward SPAM to abuse AT backupcentral DOT com.
+----------------------------------------------------------------------



------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security 
threats, fraudulent activity, and more. Splunk takes this data and makes 
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users

<Prev in Thread] Current Thread [Next in Thread>