On Sat, 2006-01-14 at 18:07 -0500, Dan Langille wrote:
> On 14 Jan 2006 at 18:00, James P. Kinney III wrote:
> 
> > On Sat, 2006-01-14 at 19:20 +0100, Kern Sibbald wrote:
> > > On Saturday 14 January 2006 18:14, James P. Kinney III wrote:
> > > > On Sat, 2006-01-14 at 15:31 +0100, Kern Sibbald wrote:
> > > > > > So it looks like the mtx-changer is not being touched.
> > > > >
> > > > > More likely, there is a problem with paths (i.e. Bacula is using a
> > > > > different path from the one you are using), or a problem of 
> > > > > permissions
> > > > > ...
> > > >
> > > > Hmm. There is only one copy of mtx-changer and one copy of mtx. The
> > > > bacula-sd.conf points to the correct (and only) version. I have tried
> > > > perms of 755 on mtx-changer and mtx. I even set mtx to suid root.
> > > 
> > > Yes, those permissions seem OK, but your SD is probably running as user 
> > > bacula 
> > > rather than root and that is likely to create problems. 
> > 
> > BINGO!! I now have slots.
> > 
> > I'll look at editing the src.rpm so the bacula-sd gets setup to run as
> > root in the init.d file.
> 
> I suggest another option.
> 
> Find out what permissions exist on the changer/tape drive and adjust 
> bacula to suit that. I advise against running as root if you have 
> other options.
> 
> For example, on FreeBSD, we do this:
> 
> $ grep bacula /etc/group
> operator:*:5:root,bacula
> 
> Why?  Because of this:
> 
> $ ls -l /dev/sa0
> crw-rw----  4 root  operator   14,   0 Mar 13  2005 /dev/sa0
> 
> The operater has access to the tape drive.
> 
> I *seem* to recall I might have had to do a chmod g+w on that device.

With the Fedora Linux world, the tape devices are owned by root with
group disk. The default settings for the device are ug+rw. The system
this is on is not running SELinux so the perm are quite a bit looser
than they could be. bacula is a member of the disk group. The default
install from a compiled src.rpm had the user and group as bacula. But
the bacula user has no write privs on /dev/sg* as it's all owned by
root.

I guess I need to poke around in /etc/udev/* and come up with some
better rules than owned by root. That's where it would need to be
changed so the perm will survive a reboot. Hmm. Now that I think about
it, the change needs to happen in the bacula-sd init script. That where
the device name and ownership can be found and set since the start up is
run by root. So the plan for now is to use the init script to parse the
bacula-sd.conf file, extract the devices to be used and chown them to
user bacula. On shutdown, they will need to be changed back to the
original settings. I'll look at dumping that data in /var/bacula.
> 
-- 
James P. Kinney III          \Changing the mobile computing world/
CEO & Director of Engineering \          one Linux user         /
Local Net Solutions,LLC        \           at a time.          /
770-493-8244                    \.___________________________./
http://www.localnetsolutions.com

GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
<[EMAIL PROTECTED]>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to