Page 1 of 1

[RESOLVED] Permissions on remote/secondary repositories

Published: April 3, 2018 - 3:55 PM
by mart03
Good morning,

Following the installation of a WAPT 1.5.1.22 server on a Debian 9 machine and a main repository, I set up 4 other secondary servers allowing me to replicate, however the permissions "jump" when the data is replicated on the secondary repositories, it only changes the www-data group to wapt.
This causes errors, particularly when a machine that has a secondary repository as a parameter and the server tries to install a package, it refuses access.

Example of the error:

Code: Select all

Exception: Erreur lors de l'installation de alti-keepass (=2.38-24): erreurs dans les paquets [[(u'https://XXXXXXXX/wapt/alti-keepass_2.38-24_all.wapt', '403 Client Error: Forbidden for url: https://XXXXXXXXXXX/wapt/alti-keepass_2.38-24_all.wapt'), None], [u'alti-keepass (=2.38-24)', PackageEntry('alti-keepass','2.38-24') ]]
But when I add the correct group (www-data) to my packages on my remote servers it works.

My question is: How can we transfer packages/wapt-host without losing the permissions that are initially assigned?

Thank you for your help.

Martin

Re: Permissions on remote/secondary repositories

Published: April 5, 2018 - 6:39 PM
by sfonteneau
To be a little more specific, are you using the synthesizing solution for replication?

Re: Permissions on remote/secondary repositories

Published: April 6, 2018 - 9:56 AM
by mart03
Oops, yes, absolutely, I use the Syncthing solution.

Re: Permissions on remote/secondary repositories

Published: April 7, 2018 - 11:26 AM
by sfonteneau
What does the command return?

Code: Select all

groups wapt

Re: Permissions on remote/secondary repositories

Published: April 24, 2018 - 4:10 PM
by mart03
Hello,

Sorry for the late reply.
Here's what the `groups wapt` command gives me:

Regards,
Martin

Re: Permissions on remote/secondary repositories

Published: April 24, 2018 - 4:38 PM
by mart03
I did some research, so I added the www-data group using the command:

Code: Select all

adduser wapt www-data
And then change the primary group:

Code: Select all

usermod --gid www-data wapt
Now we need to see if we can leave the other groups affected: cdrom, floppy, audio...
Or can they be detached from the user?

Re: Permissions on remote/secondary repositories

Published: April 25, 2018 - 4:50 PM
by sfonteneau
Yes, normally in the current documentation, we install waptrepo (version 1.3).

This normally creates a wapt user with the www-data group

, and since we launch syncthing with the wapt user, normally the rights are correct.

[RESOLVED] Permissions on remote/secondary repositories

Published: April 26, 2018 - 09:04
by mart03
Okay, thank you very much!

I think my mistake stems from the fact that I created a wapt user during the machine installation, so waptrepo couldn't create it and assign it to the correct group (in my opinion).

Martin