Re: proxy-suite - problems at startup

Hi Marius,

thanks for your reply, I did only today get to try this. Unfortunately 
that did not work out. Now I have a dir ftp-proxy writeable to 
nobody/nogroup in /var/log, but the ftp-proxys log to 
/var/lib/ftp-proxy-test1/rundir/var/log/ftp-proxy and they still don't 
want to start up at boot. Any other ideas?

Greetings,

Ralf


Marius Tomaschewski wrote:

>On Thu, Mar 25, 2004 at 11:28:50PM +0100, Ralf Ronneburger wrote:
>  
>
>>Hi everyone,
>>    
>>
>
>Hi!
>
>  
>
>>I've got proxy-suite running on a SuSE 9.0 (up2date). I've set up 2 
>>proxy-servers in their chroots. I can start them with rcftpproxytest1 
>>(or -2) start without any problems. But when they are started after boot 
>>via the startup-scripts I get the following error in boot.msg:
>>
>>ftp-proxy-test1 (com-syslog.c:279): can't open logfile 
>>'/var/log/ftp-proxy-test1.log' (errno=13 [Permission denied])
>>ftp-proxy-test2 (com-syslog.c:279): can't open logfile 
>>'/var/log/ftp-proxy-test2.log' (errno=13 [Permission denied])
>>
>>The servers do not start. If I start them right afterwards manually 
>>everything is O.K.. My config says:
>>
>>	LogDestination /var/log/ftp-proxy-test1.log
>>
>>Any ideas?
>>    
>>
>
>Yes.
>You have configured the proxy to drop privileges using User/Group
>options, e.g.:
>
>    User ftpproxy
>    Group ftpproxy
>
>This is fine!
>But as soon as the proxy drops it, it can't write to /var/log,
>that is (and should) be writeable only for root.
>
>The solution is simple:
>
>    mkdir -m0750 /var/log/ftp-proxy
>    chown $User  /var/log/ftp-proxy
>    chgrp $Group /var/log/ftp-proxy
>
>using same values for $User / $Group as defined in the proxy
>configuration file and change to:
>
>    LogDestination /var/log/ftp-proxy/test1.log
>
>Kind regards,
> Marius Tomaschewski <[email protected]>
>--
> SUSE LINUX AG, Nuernberg  --  Product Developement
> PGP public key on:   http://www.suse.de/~mt/mt.pgp
> DF17 271A AD15 006A 5BB9  6C96 CA2F F3F7 373A 1CC0
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: [email protected]
>For additional commands, e-mail: [email protected]
>
>
>  
>


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]