<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "http://bugs.gentoo.org/bugzilla.dtd">

<bugzilla version="2.22.7"
          urlbase="http://bugs.gentoo.org/"
          maintainer="bugzilla@gentoo.org"
>

    <bug>
          <bug_id>147063</bug_id>
          
          <creation_ts>2006-09-10 06:59 0000</creation_ts>
          <short_desc>app-backup/backuppc User Interface not accessible</short_desc>
          <delta_ts>2007-07-06 09:23:29 0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>Gentoo Linux</product>
          <component>Ebuilds</component>
          <version>2006.1</version>
          <rep_platform>All</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>CLOSED</bug_status>
          <resolution>FIXED</resolution>
          
          
          
          <priority>P2</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>hen_mail@web.de</reporter>
          <assigned_to>seemant@gentoo.org</assigned_to>
          <cc>app-backup@gentoo.org</cc>
    
    <cc>jakub@gentoo.org</cc>

      

      
          <long_desc isprivate="0">
            <who>hen_mail@web.de</who>
            <bug_when>2006-09-10 06:59:01 0000</bug_when>
            <thetext>Generally, two ways of using the backuppc Userinterface exist.
A) Requires setuid
B) Requires mod_perl

As apparently setuid is not installed with perl/mod_perl/Apache, I chose B).

This fails though, as Apache/Backuppc cannot find the file Apache/Response.pm.

Thus, with the current Ebuilds, there is no way of running the Userinterface of Backuppc.

Greets,
Hendrik</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jakub@gentoo.org</who>
            <bug_when>2006-09-10 07:06:03 0000</bug_when>
            <thetext>1/ Is not a mod_perl issue, you need perl compiled w/ USE=&quot;perlsuid&quot; (caveat emptor).

2/ If you are not using suid perl, your webserver needs to run as backuppc user (i.e., you need a dedicated server/port for this, you can&apos;t share e.g. your current Apache instance for backuppc).

Works just fine here (using a dedicated lighttpd on port 8080 for this).
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>hen_mail@web.de</who>
            <bug_when>2006-09-10 08:02:15 0000</bug_when>
            <thetext>Thanks for the reply,

shouldn&apos;t require the ebuild USE=&quot;perlsuid&quot; then?

The thing is, that by just emergeing you don&apos;t get backuppc running. There are no comments stateing that perlsuid is required during the emerge.

What&apos;s the correct way to get it running for me as a user now?

Regards,
Hendrik</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jakub@gentoo.org</who>
            <bug_when>2006-09-10 08:32:23 0000</bug_when>
            <thetext>(In reply to comment #2)
&gt; shouldn&apos;t require the ebuild USE=&quot;perlsuid&quot; then?

Uh no... perlsuid is definitely not the preferred way of running this thing, suid perl is not safe (see the use flag description). Besides, there&apos;s no way to specify such dependency.
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>hen_mail@web.de</who>
            <bug_when>2006-09-10 10:35:22 0000</bug_when>
            <thetext>So in that case, mod_perl would be a requirement.

Using this, I get an error in the Apache error log:
The file Apache/Response.pm could not be found.

So still something is messed up.

Greets,
Hendrik</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>hen_mail@web.de</who>
            <bug_when>2006-09-10 10:58:31 0000</bug_when>
            <thetext>I&apos;ve figured out a way to get backuppc running:

In /etc/conf.d/backuppc
And /etc/backuppc/config.pl

The backuppc user must be set to apache.

In this case, neither mod_perl nor setuid are required.

Could someone change this in the Ebuild?

Greets,
Hendrik</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jakub@gentoo.org</who>
            <bug_when>2006-09-10 11:09:00 0000</bug_when>
            <thetext>(In reply to comment #5)
&gt; I&apos;ve figured out a way to get backuppc running:
&gt; 
&gt; In /etc/conf.d/backuppc
&gt; And /etc/backuppc/config.pl
&gt; 
&gt; The backuppc user must be set to apache.

I told you in Comment #1 that webserver must run under the same account as backuppc.

&gt; Could someone change this in the Ebuild?

No, because that&apos;s wrong. You should _not_ run backuppc as apache user, you should run your apache (or another webserver) as backuppc user. Please, read the documentation, this is not (and should not be) an out-of-the-box ebuild, you need to consider lots of things when setting this up.
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>hen_mail@web.de</who>
            <bug_when>2006-09-10 11:33:55 0000</bug_when>
            <thetext>Hello,

the thing is, that I *did* read the configuration intensively. I did not have a clue about this issue.
There should really be some post install Remarkts stating that the webserver must run as backuppc and how to do that.

Greets,
Hendrik</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>seemant@gentoo.org</who>
            <bug_when>2006-10-10 07:45:59 0000</bug_when>
            <thetext>postinst added, thanks.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jcrml@mxm.eu</who>
            <bug_when>2007-07-06 09:21:01 0000</bug_when>
            <thetext>(In reply to comment #6)
&gt; 
&gt; I told you in Comment #1 that webserver must run under the same account as
&gt; backuppc.
&gt; 
&gt; &gt; Could someone change this in the Ebuild?
&gt; 
&gt; No, because that&apos;s wrong. You should _not_ run backuppc as apache user, you
&gt; should run your apache (or another webserver) as backuppc user. Please, read
&gt; the documentation, this is not (and should not be) an out-of-the-box ebuild,
&gt; you need to consider lots of things when setting this up.

Sorry, but I don&apos;t understand : as soon as backuppc and apache are running as the same user, why does it matter that the user is called apache or backuppc ? 

</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jakub@gentoo.org</who>
            <bug_when>2007-07-06 09:23:29 0000</bug_when>
            <thetext>(In reply to comment #9)
&gt; Sorry, but I don&apos;t understand : as soon as backuppc and apache are running as
&gt; the same user, why does it matter that the user is called apache or backuppc ? 

Security, for starters.

 

</thetext>
          </long_desc>
      
    </bug>

</bugzilla>