[RESOLVED] Permissions on remote/secondary repositories

[mart03]

Good morning,

Following the installation of a WAPT 1.5.1.22 server on a Debian 9 machine and a main repository, I set up 4 other secondary servers allowing me to replicate, however the permissions "jump" when the data is replicated on the secondary repositories, it only changes the www-data group to wapt.
This causes errors, particularly when a machine that has a secondary repository as a parameter and the server tries to install a package, it refuses access.

Example of the error:

Code: Select all

Exception: Erreur lors de l'installation de alti-keepass (=2.38-24): erreurs dans les paquets [[(u'https://XXXXXXXX/wapt/alti-keepass_2.38-24_all.wapt', '403 Client Error: Forbidden for url: https://XXXXXXXXXXX/wapt/alti-keepass_2.38-24_all.wapt'), None], [u'alti-keepass (=2.38-24)', PackageEntry('alti-keepass','2.38-24') ]]

But when I add the correct group (www-data) to my packages on my remote servers it works.

My question is: How can we transfer packages/wapt-host without losing the permissions that are initially assigned?

Thank you for your help.

Martin

[sfonteneau]

To be a little more specific, are you using the synthesizing solution for replication?

[mart03]

Oops, yes, absolutely, I use the Syncthing solution.

[sfonteneau]

What does the command return?

Code: Select all

groups wapt

[mart03]

Hello,

Sorry for the late reply.
Here's what the `groups wapt` command gives me:

Regards,
Martin

[mart03]

I did some research, so I added the www-data group using the command:

Code: Select all

adduser wapt www-data

And then change the primary group:

Code: Select all

usermod --gid www-data wapt

Now we need to see if we can leave the other groups affected: cdrom, floppy, audio...
Or can they be detached from the user?

[sfonteneau]

Yes, normally in the current documentation, we install waptrepo (version 1.3).

This normally creates a wapt user with the www-data group

, and since we launch syncthing with the wapt user, normally the rights are correct.

[mart03]

Okay, thank you very much!

I think my mistake stems from the fact that I created a wapt user during the machine installation, so waptrepo couldn't create it and assign it to the correct group (in my opinion).

Martin