Topic: [ANNOUNCE] smeserver-backuppc-3.0-0

[alefattorini]

I have follow this howto,
http://sme.firewall-services.com/spip.php?article44

but in server-manager i have this error

The requested URL /backuppc/cgi-bin/BackupPC_Admin was not found on this server.

Anyone can help me?

[Daniel B.]

I don't know where the problem comes from, have a look at the log file:

Code: [Select]

tail -f /var/log/httpd/error_log

[Mon Aug 06 13:31:19 2007] [error] [client 192.168.5.9] File does not exist: /opt/backuppc/images/cgi-bin

Any other contrib installed? have you upgraded from 1.0-5 ?

No, fresh install on fresh smeserver

I know one or two person allready had this problem, but I really don't understand how it can happen. Can you try on another server?

[sonoracomm]

Hi, odd web display behavior on a new install of Backuppc on SME 7.1.3.  

The installation had no errors.  Accessing the https://server_name/backuppc directly or from server-manager gives the same result.  The page does not display any style sheets or graphics.  

All the links are broken.  When I click on a link Firefox gives "The page isn't redirecting properly. Firefox has detected that the server is redirecting the request for this address in a way that will never complete." response.  IE gives "page cannot be displayed".

Searching http logs did not produce any clues.

Any ideas?  Any help appreciated.  Thanks.

[Daniel B.]

Hi, odd web display behavior on a new install of Backuppc on SME 7.1.3. 

The installation had no errors.  Accessing the https://server_name/backuppc directly or from server-manager gives the same result.  The page does not display any style sheets or graphics. 

All the links are broken.  When I click on a link Firefox gives "The page isn't redirecting properly. Firefox has detected that the server is redirecting the request for this address in a way that will never complete." response.  IE gives "page cannot be displayed".

Searching http logs did not produce any clues.

Any ideas?  Any help appreciated.  Thanks.

Hi. I just had a problem which could look like yours. In fact, I've changed the language in the general cgi configuration, when I've clicked on 'save', all the stylesheet disapeared, as well as the admin options, no errors in the logs. In fact, it's the CGI which seems to have a bug, I still need to find out why it has happened, but it was just some settings which where flushed in the config.pl file. To correct that:

vim /etc/BackupPC/config.pl

and check these settings:

$Conf{CgiAdminUsers} = 'admin';

$Conf{CgiURL} = '/opt/backuppc/cgi-bin';

$Conf{CgiHeaders} = '<meta http-equiv="pragma" content="no-cache">';

$Conf{CgiCSSFile} = 'BackupPC_stnd.css';

Once you have checked that, restart backuppc:

Code: [Select]

/etc/init.d/backuppc restart
and everything should be back.

[sonoracomm]

Hello,

Upon checking the config.pl file, I found the $Conf{CgiURL} setting was wrong, so I fixed it.  Unfortunately, that didn't resolve the problem.

I then started troubleshooting by just adding the backuppc additions to a stock httpd.conf file.  It worked.  I then determined that the problem is caused specifically by the customized 27ManagerProxyPass fragment from the Selintra SAIL package.  If I move that fragment from templates-custom and expand httpd.conf, BackupPC_Admin seems to work fine.

I stared at the Selintra-customized frogment for a good while (it's perl), but I just don't understand it.  Perhaps I'll start a new thread and ask Selintra for help.

Thanks fo your help.

G

[alefattorini]

New install, same problem..

I have modified this line
Alias       /backuppc         /opt/backuppc/images

in this

Alias       /backuppc         /opt/backuppc


Problem of permission?
[Mon Aug 20 10:50:47 2007] [error] [client 192.168.5.9] client denied by server configuration: /opt/backuppc


Can you help me????

[alefattorini]

Can anyone help me? Is it possible it's not work?

[Daniel B.]

New install, same problem..

I have modified this line
Alias       /backuppc         /opt/backuppc/images

in this

Alias       /backuppc         /opt/backuppc


Problem of permission?
[Mon Aug 20 10:50:47 2007] [error] [client 192.168.5.9] client denied by server configuration: /opt/backuppc


Can you help me????

I just don't understand why you've changed this, it's normal that it doesn't work with Alias /backuppc /opt/backuppc.
I still cannot reproduce the bug, so I don't really know where to start. I run backuppc on about 20 servers without a problem (exept the one I explain before, but it's seems to be completly different). Please, give some more info about:
- the version you're running (SME and backuppc)
- any customization on the server

[Jabka]

First off, this is by far my FAVORITE contrib! Congrats and thanks to everyone involved, including those writing how-tos as well. Truly nice work guys. So far, everything's running like clockwork with this contrib and I'm really impressed.

I do have one question though, but I'm not sure if this is the right place to ask. BackupPC has the capability to allow a user access to his/her files through the web interface at https://servername.domain.tld/backuppc, as long as proper credentials are supplied. SME server allows this as long as the user is accessing the login page from INSIDE the network. However, in some cases, a user may want to retrieve files while OUTSIDE the network, ie from the WAN interface. Is there a way to allow this for the /backuppc folder without also exposing /server-manager to the WAN interface? Right now, if I want to let a user get files from outside the network, the only way I know how to do it is through server-manager in Security-> Remote Access -> Remote Management by adding their current IP to the list of allowed remote management networks. I'm surely missing something fundamental here, but could someone point me in the right direction? Ideally, though this may be frowned upon by some, I'd like to expose the user interface for backuppc to anyone accessing it from the WAN interface, as long as they have to login to access it.

Any help much appreciated... Thanks.

[Daniel B.]

HI.
I'm glade my works helps others.
To achieve what you want, you have to create a custom template, copy the original one with these commands

Code: [Select]

mkdir -p /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf
cp -a /etc/e-smith/templtes/etc/httpd/conf/httpd.conf/99BackupPC /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf

Then, edit it like you want. Something like this should do the trick

Code: [Select]

ScriptAlias /backuppc/cgi-bin /opt/backuppc/cgi-bin
Alias       /backuppc         /opt/backuppc/images

<Directory /opt/backuppc/images>
    Options None
    Options +Indexes
    Options +Includes
    AllowOverride None
    order deny,allow
    deny from all
    allow from { "$localAccess $externalSSLAccess"; }
</Directory>

<Directory /opt/backuppc/cgi-bin>
        SSLRequireSSL on
        Options ExecCGI
        AllowOverride None
        order deny,allow
        deny from all
        allow from all
        AuthName "Administration du serveur de sauvegarde"
        Satisfy all
        AuthType Basic
        AuthExternal pwauth
        Require valid-user
</Directory>


[CharlieBrady]

You should not use rpm -Uvh this command is obsolete and replaced by yum localinstall like suggested by Daniel.

The command is not obsolete - it just won't automatically find any dependencies, whereas 'yum localinstall' will. But what was really wrong with Jeff's proposed command was --force. --force should only be used in very exceptional circumstances, when you know exactly why you are doing it. That doesn't apply here.

[Jabka]

Daniel,

Thanks for the quick response to my question about external access. Unfortunately, it did not seem to change the access restrictions for external users. From your post, it seems the only thing different about the custom template you proposed for 99BackupPC is the line for the cgi-bin directory, changing

allow from { "$localAccess $externalSSLAccess"; }

to

allow from all

I expanded the template, restarted httpd, and rebooted the server, but access from the WAN is still denied "HTTP 403 Forbidden". Any other things I should try? The goal is to allow users authenticated access to their backups from OUTSIDE the local lan. Sorry again for such an entry-level question but I'm clueless about where else to look. Thanks in advance for any additional ideas you might have.

[CharlieBrady]

Unfortunately, it did not seem to change the access restrictions for external users.

Please report any problems with Contribs via the Contribs section of the bug tracker. Thanks.

[Jabka]

OK, I'll report the issue with external access in the bug tracker. I just assumed the problem was that I didn't know what I was doing. Thanks Charlie.

[Jabka]

Looks like smeserver-backuppc is not listed as an SME Contrib Component in the bug tracker. I don't see a way to add that component. Does the package maintainer need to do this? Let me know if I should post a bug under Component "Unknown" or wait for Daniel to put something in place.