Re: proxy-suite - problems at startup

On Thu, Mar 25, 2004 at 11:28:50PM +0100, Ralf Ronneburger wrote:
> Hi everyone,

Hi!

> I've got proxy-suite running on a SuSE 9.0 (up2date). I've set up 2 
> proxy-servers in their chroots. I can start them with rcftpproxytest1 
> (or -2) start without any problems. But when they are started after boot 
> via the startup-scripts I get the following error in boot.msg:
> 
> ftp-proxy-test1 (com-syslog.c:279): can't open logfile 
> '/var/log/ftp-proxy-test1.log' (errno=13 [Permission denied])
> ftp-proxy-test2 (com-syslog.c:279): can't open logfile 
> '/var/log/ftp-proxy-test2.log' (errno=13 [Permission denied])
> 
> The servers do not start. If I start them right afterwards manually 
> everything is O.K.. My config says:
> 
> 	LogDestination /var/log/ftp-proxy-test1.log
> 
> Any ideas?

Yes.
You have configured the proxy to drop privileges using User/Group
options, e.g.:

    User ftpproxy
    Group ftpproxy

This is fine!
But as soon as the proxy drops it, it can't write to /var/log,
that is (and should) be writeable only for root.

The solution is simple:

    mkdir -m0750 /var/log/ftp-proxy
    chown $User  /var/log/ftp-proxy
    chgrp $Group /var/log/ftp-proxy

using same values for $User / $Group as defined in the proxy
configuration file and change to:

    LogDestination /var/log/ftp-proxy/test1.log

Kind regards,
 Marius Tomaschewski <[email protected]>
--
 SUSE LINUX AG, Nuernberg  --  Product Developement
 PGP public key on:   http://www.suse.de/~mt/mt.pgp
 DF17 271A AD15 006A 5BB9  6C96 CA2F F3F7 373A 1CC0

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]