Re: How to fix Security Database corruption?

Hi,

I don't know if this helps, but I've seen this happen once or twice with eXist 5.2.0. But at the time I didn't find anything relevant in the log files.

-Outi
--
Outi Lehtinen, IT specialist
The Institute for the Languages of Finland
Hakaniemenranta 6, 00530 Helsinki

Lähettäjä: Loren Cahlander <[email protected]>
Lähetetty: keskiviikko 1. maaliskuuta 2023 23.20
Vastaanottaja: Lizzi, Vincent <[email protected]>
Kopio: Exist-open <[email protected]>
Aihe: Re: [Exist-open] How to fix Security Database corruption?

I found the following

I found a flaw in the restore of the /db/system/security collection.  If I do a restore of the whole collection, the accounts are being restored first and then the groups do not get restored.  I fixed it by restoring /db/system/security/exist/groups and then restored /db/system/security.  This is in 6.2.0



I need to figure out how far back this is before I write a bug report.  I need to take the time to test in previous versions.


On Mar 1, 2023, at 3:30 PM, Lizzi, Vincent <[email protected]<mailto:[email protected]>> wrote:

Hello eXist community,

I have had several instances where an eXist database's user accounts and groups revert to the defaults, wiping out the user accounts and groups that I've created and resetting the admin password to the default (blank). This just happened again. There is no indication in the logs about what happened except that the database shut down at the time of a planned operating system restart, started up again, and then there are errors about login attempts failing. In User Manager the accounts and groups are missing. The collection /db/system/security/exist still contains an XML document for each of the user accounts and groups, however attempts to login fail. In previous times this problem occurred the log file exist.log contained error messages such as this:

2023-01-12 18:07:24,049 [qtp897892154-30] FATAL (UnixStylePermission.java [getGroup]:175) - Detected a Security Database corruption. Could not find group for id: 14.
2023-01-12 18:07:24,049 [qtp897892154-30] FATAL (UnixStylePermission.java [getOwner]:93) - Detected a Security Database corruption. Could not find account for id: 14.

To repair the problem, I recreate the users and groups. However, the problem just occurs again.

Here are some details about the environment:

eXist Version:     6.0.1
eXist Build:          20220209234135
Operating System:           Windows Server 2012 R2 6.3 amd64
Java Version:      11.0.16.1

Is there any way to resolve this problem?

Thanks,
Vincent

______________________________________________
Vincent M. Lizzi
Head of Information Standards | Taylor & Francis Group
530 Walnut St., Suite 850, Philadelphia, PA 19106
E-Mail: [email protected]<mailto:[email protected]>
Web: www.tandfonline.com<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.tandfonline.com%2F&data=05%7C01%7Couti.lehtinen%40kotus.fi%7Cd11e72d80e65419bae0908db1a9acc25%7C7c14dfa4c0fc47259f0476a443deb095%7C0%7C0%7C638133024374611103%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=MUWBuxZ9jxg6ur3FV%2BPrRsFUDHTqVPJh87hXv3Ds1lA%3D&reserved=0>

Taylor & Francis is a trading name of Informa UK Limited,
registered in England under no. 1072954

"Everything should be made as simple as possible, but not simpler."




Information Classification: General
_______________________________________________
Exist-open mailing list
[email protected]<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/exist-open<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fexist-open&data=05%7C01%7Couti.lehtinen%40kotus.fi%7Cd11e72d80e65419bae0908db1a9acc25%7C7c14dfa4c0fc47259f0476a443deb095%7C0%7C0%7C638133024374611103%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=TyGIi5R5SS8U19tD3%2BVAy03jjGqD0XxYBQ7Vxv9OYrs%3D&reserved=0>

_______________________________________________
Exist-open mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/exist-open