[gentoo-user] DBI connect dbname=template1 failed Permission denied

[gentoo-user] DBI connect dbname=template1 failed Permission denied

[Joseph]

I have postgresql up and running but when I try to connect via apache to postgresql I get an error:

[error] [client 127.0.0.1] DBI connect('dbname=template1','sql-ledger',...) failed: could not connect to server: Permission denied, referer: 
http://localhost/sql-ledger/admin.pl

Anybody knows what to look for?

-- 
Joseph

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Pandu Poluan]

[-- Attachment #1: Type: text/plain, Size: 430 bytes --]

On Dec 15, 2011 10:55 AM, "Joseph" <syscon780@gmail.com> wrote:
>
> I have postgresql up and running but when I try to connect via apache to
postgresql I get an error:
>
> [error] [client 127.0.0.1] DBI
connect('dbname=template1','sql-ledger',...) failed: could not connect to
server: Permission denied, referer: http://localhost/sql-ledger/admin.pl
>
> Anybody knows what to look for?
>
> --
> Joseph
>

Check pg_hba.conf

Rgds,

[-- Attachment #2: Type: text/html, Size: 651 bytes --]

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Joseph]

On 12/15/11 12:23, Pandu Poluan wrote:
>   On Dec 15, 2011 10:55 AM, "Joseph" <syscon780@gmail.com> wrote:
>   >
>   > I have postgresql up and running but when I try to connect via apache to
>   postgresql I get an error:
>   >
>   > [error] [client 127.0.0.1] DBI
>   connect('dbname=template1','sql-ledger',...) failed: could not connect to
>   server: Permission denied, referer: http://localhost/sql-ledger/admin.pl
>   >
>   > Anybody knows what to look for?
>   >
>   > --
>   > Joseph
>   >
>
>   Check pg_hba.conf
>
>   Rgds,

I did, it is identical to my other working systems:
local   all     all        trust

here are other details:

# psql -p 5432 -U postgres
psql (9.1.1)
Type "help" for help.

postgres=# 

Available PostgreSQL Slots
   9.1 *                      server-9.1.1 base-9.1.1

-- 
Joseph

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Pandu Poluan]

[-- Attachment #1: Type: text/plain, Size: 992 bytes --]

On Dec 15, 2011 12:52 PM, "Joseph" <syscon780@gmail.com> wrote:
>
> On 12/15/11 12:23, Pandu Poluan wrote:
>>
>>  On Dec 15, 2011 10:55 AM, "Joseph" <syscon780@gmail.com> wrote:
>>  >
>>  > I have postgresql up and running but when I try to connect via apache
to
>>  postgresql I get an error:
>>  >
>>  > [error] [client 127.0.0.1] DBI
>>  connect('dbname=template1','sql-ledger',...) failed: could not connect
to
>>  server: Permission denied, referer: http://localhost/sql-ledger/admin.pl
>>  >
>>  > Anybody knows what to look for?
>>  >
>>  > --
>>  > Joseph
>>  >
>>
>>  Check pg_hba.conf
>>
>>  Rgds,
>
>
> I did, it is identical to my other working systems:
> local   all     all        trust
>
> here are other details:
>
> # psql -p 5432 -U postgres
> psql (9.1.1)
> Type "help" for help.
>
> postgres=#
> Available PostgreSQL Slots
>  9.1 *                      server-9.1.1 base-9.1.1
>

Hmmm...

Have you GRANT the 'sql-ledger' user the CONNECT privilege to the database?

Rgds,

[-- Attachment #2: Type: text/html, Size: 1646 bytes --]

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Joseph]

On 12/15/11 16:11, Pandu Poluan wrote:
>   > here are other details:
>   >
>   > # psql -p 5432 -U postgres
>   > psql (9.1.1)
>   > Type "help" for help.
>   >
>   > postgres=#
>   > Available PostgreSQL Slots
>   > A 9.1 * A  A  A  A  A  A  A  A  A  A  A server-9.1.1 base-9.1.1
>   >
>
>   Hmmm...
>
>   Have you GRANT the 'sql-ledger' user the CONNECT privilege to the
>   database?
>
>   Rgds,

How do I check it?

-- 
Joseph

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Joseph]

On 12/15/11 16:11, Pandu Poluan wrote:
>
>   Hmmm...
>
>   Have you GRANT the 'sql-ledger' user the CONNECT privilege to the
>   database?
>
>   Rgds,

After installing postgresql I run:
emerge --config =dev-db/postgresql-server-9.1.1

started postgresql-9.1
# su - postgres
postgres@syscon5 ~ $ createuser -d sql-ledger
    y
    y
exit

that was it.

# psql -U postgres -l
                                   List of databases
    Name    |  Owner   | Encoding |   Collate   |    Ctype    |   Access privileges   
-----------+----------+----------+-------------+-------------+-----------------------
  postgres  | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 | 
  template0 | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 | =c/postgres          +
            |          |          |             |             | postgres=CTc/postgres
  template1 | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 | =c/postgres          +
            |          |          |             |             | postgres=CTc/postgres
-- 
Joseph

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Pandu Poluan]

[-- Attachment #1: Type: text/plain, Size: 1320 bytes --]

On Dec 15, 2011 8:52 PM, "Joseph" <syscon780@gmail.com> wrote:
>
> On 12/15/11 16:11, Pandu Poluan wrote:
>>
>>
>>  Hmmm...
>>
>>  Have you GRANT the 'sql-ledger' user the CONNECT privilege to the
>>  database?
>>
>>  Rgds,
>
>
> After installing postgresql I run:
> emerge --config =dev-db/postgresql-server-9.1.1
>
> started postgresql-9.1
> # su - postgres
> postgres@syscon5 ~ $ createuser -d sql-ledger
>   y
>   y
> exit
>
> that was it.
>
> # psql -U postgres -l
>                                  List of databases
>   Name    |  Owner   | Encoding |   Collate   |    Ctype    |   Access
privileges
-----------+----------+----------+-------------+-------------+-----------------------
>  postgres  | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 |  template0
| postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 | =c/postgres          +
>           |          |          |             |             |
postgres=CTc/postgres
>  template1 | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 |
=c/postgres          +
>           |          |          |             |             |
postgres=CTc/postgres
> --
> Joseph
>

Okay, according to the documentation on GRANT, "=c/postgres" means the
public is granted "CONNECT" privilege, granted by the user postgres. So no
problem there.

Hmm... wonder what's wrong...

Rgds,

[-- Attachment #2: Type: text/html, Size: 1862 bytes --]

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Pandu Poluan]

[-- Attachment #1: Type: text/plain, Size: 1563 bytes --]

On Dec 16, 2011 5:46 AM, "Pandu Poluan" <pandu@poluan.info> wrote:
>
>
> On Dec 15, 2011 8:52 PM, "Joseph" <syscon780@gmail.com> wrote:
> >
> > On 12/15/11 16:11, Pandu Poluan wrote:
> >>
> >>
> >>  Hmmm...
> >>
> >>  Have you GRANT the 'sql-ledger' user the CONNECT privilege to the
> >>  database?
> >>
> >>  Rgds,
> >
> >
> > After installing postgresql I run:
> > emerge --config =dev-db/postgresql-server-9.1.1
> >
> > started postgresql-9.1
> > # su - postgres
> > postgres@syscon5 ~ $ createuser -d sql-ledger
> >   y
> >   y
> > exit
> >
> > that was it.
> >
> > # psql -U postgres -l
> >                                  List of databases
> >   Name    |  Owner   | Encoding |   Collate   |    Ctype    |   Access
privileges
-----------+----------+----------+-------------+-------------+-----------------------
> >  postgres  | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 |
 template0 | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 | =c/postgres
         +
> >           |          |          |             |             |
postgres=CTc/postgres
> >  template1 | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 |
=c/postgres          +
> >           |          |          |             |             |
postgres=CTc/postgres
> > --
> > Joseph
> >
>
> Okay, according to the documentation on GRANT, "=c/postgres" means the
public is granted "CONNECT" privilege, granted by the user postgres. So no
problem there.
>
> Hmm... wonder what's wrong...
>

Okay, I'm grasping at straws currently... how does the offending line in
admin.pl look like?

Rgds,

[-- Attachment #2: Type: text/html, Size: 2352 bytes --]

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Pandu Poluan]

[-- Attachment #1: Type: text/plain, Size: 1879 bytes --]

On Dec 16, 2011 5:49 AM, "Pandu Poluan" <pandu@poluan.info> wrote:
>
>
> On Dec 16, 2011 5:46 AM, "Pandu Poluan" <pandu@poluan.info> wrote:
> >
> >
> > On Dec 15, 2011 8:52 PM, "Joseph" <syscon780@gmail.com> wrote:
> > >
> > > On 12/15/11 16:11, Pandu Poluan wrote:
> > >>
> > >>
> > >>  Hmmm...
> > >>
> > >>  Have you GRANT the 'sql-ledger' user the CONNECT privilege to the
> > >>  database?
> > >>
> > >>  Rgds,
> > >
> > >
> > > After installing postgresql I run:
> > > emerge --config =dev-db/postgresql-server-9.1.1
> > >
> > > started postgresql-9.1
> > > # su - postgres
> > > postgres@syscon5 ~ $ createuser -d sql-ledger
> > >   y
> > >   y
> > > exit
> > >
> > > that was it.
> > >
> > > # psql -U postgres -l
> > >                                  List of databases
> > >   Name    |  Owner   | Encoding |   Collate   |    Ctype    |
Access privileges
-----------+----------+----------+-------------+-------------+-----------------------
> > >  postgres  | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 |
 template0 | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 | =c/postgres
         +
> > >           |          |          |             |             |
postgres=CTc/postgres
> > >  template1 | postgres | UTF8     | en_US.UTF-8 | en_US.UTF-8 |
=c/postgres          +
> > >           |          |          |             |             |
postgres=CTc/postgres
> > > --
> > > Joseph
> > >
> >
> > Okay, according to the documentation on GRANT, "=c/postgres" means the
public is granted "CONNECT" privilege, granted by the user postgres. So no
problem there.
> >
> > Hmm... wonder what's wrong...
> >
>
> Okay, I'm grasping at straws currently... how does the offending line in
admin.pl look like?
>
> Rgds,

Some thoughts : if the line is correct, the problem might be in how you
configured Apache. Here's a reference :

http://cpanforum.com/threads/1268

Rgds,

[-- Attachment #2: Type: text/html, Size: 2967 bytes --]

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Joseph]

On 12/16/11 05:49, Pandu Poluan wrote:
>   >
>   > Okay, according to the documentation on GRANT, "=c/postgres" means the
>   public is granted "CONNECT" privilege, granted by the user postgres. So no
>   problem there.
>   >
>   > Hmm... wonder what's wrong...
>   >
>
>   Okay, I'm grasping at straws currently... how does the offending line in
>   admin.pl look like?
>
>   Rgds,

Hi Pandu,

Thanks for helping out on this. I'm pulling my hair trying to figure it out and I'm getting nowhere.

The SQL-Ledger developer was helping me out on this and he can not figure it out either.
I'm sure it is not SQL-ledger as it is working perfectly on my other computers. It could be apache configuration, but I don't see how?
I've compared file (using meld) setup with my working server and they are the same. 
So it could be something do to with permission.  As I copied apache configuration file using "meld" and meld program does not preserve ownership.

Here is amdin.pl script from SQL-Ledger

#!/usr/bin/perl -X
#
######################################################################
# SQL-Ledger ERP
# Copyright (C) 2006
#
#  Author: DWS Systems Inc.
#     Web: http://www.sql-ledger.com
#
#######################################################################
#
# this script sets up the terminal and runs the scripts
# in bin/$terminal directory
# admin.pl is linked to this script
#
#######################################################################


# setup defaults, DO NOT CHANGE
$userspath = "users";
$spool = "spool";
$templates = "templates";
$images = "images";
$memberfile = "users/members";
$sendmail = "| /usr/sbin/sendmail -t";
%printer = ();
########## end ###########################################


$| = 1;

eval { require "sql-ledger.conf"; };


if ($ENV{CONTENT_LENGTH}) {
   read(STDIN, $_, $ENV{CONTENT_LENGTH});
}

if ($ENV{QUERY_STRING}) {
   $_ = $ENV{QUERY_STRING};
}

if ($ARGV[0]) {
   $_ = $ARGV[0];
}


%form = split /[&=]/;

# fix for apache 2.0 bug
map { $form{$_} =~ s/\\$// } keys %form;

# name of this script
$0 =~ tr/\\/\//;
$pos = rindex $0, '/';
$script = substr($0, $pos + 1);

@scripts = qw(login.pl admin.pl custom_login.pl custom_admin.pl);

if (grep !/^\Q$form{script}\E/, @scripts) {
   print "Content-Type: text/html\n\n" if $ENV{HTTP_USER_AGENT};
   print "\nAccess denied!\n";
   exit;
}

if (-f "$userspath/nologin" && $script ne 'admin.pl') {
   print "Content-Type: text/html\n\n" if $ENV{HTTP_USER_AGENT};
   if (-s "$userspath/nologin") {
     open(FH, "$userspath/nologin");
     $message = <FH>;
     close(FH);
     print "\n$message\n";
   } else {
     print "\nLogin disabled!\n";
   }
   exit;
}


if ($form{path}) {
   $form{path} =~ s/%2f/\//gi;
   $form{path} =~ s/\.\.//g;

   if ($form{path} !~ /^bin\//) {
     print "Content-Type: text/html\n\n" if $ENV{HTTP_USER_AGENT};
     print "\nInvalid path!\n";
     exit;
   }


   $ARGV[0] = "$_&script=$script";
   require "$form{path}/$script";
} else {

   if (!$form{terminal}) {
     if ($ENV{HTTP_USER_AGENT}) {
       # web browser
       $form{terminal} = "lynx";
       if ($ENV{HTTP_USER_AGENT} !~ /lynx/i) {
	$form{terminal} = "mozilla";
       }
     } else {
       if ($ENV{TERM} =~ /xterm/) {
	$form{terminal} = "xterm";
       }
       if ($ENV{TERM} =~ /(console|linux|vt.*)/i) {
	$form{terminal} = "console";
       }
     }
   }


   if ($form{terminal}) {
     $form{terminal} =~ s/%2f/\//gi;
     $form{terminal} =~ s/\.\.//g;

     $ARGV[0] = "path=bin/$form{terminal}&script=$script";
     map { $ARGV[0] .= "&${_}=$form{$_}" } keys %form;

     require "bin/$form{terminal}/$script";
     
   } else {

     print "Content-Type: text/html\n\n" if $ENV{HTTP_USER_AGENT};
     print qq|\nUnknown terminal\n|;
   }

}

# end of main

-- 
Joseph

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Joseph]

On 12/16/11 06:09, Pandu Poluan wrote:
>
>   Some thoughts : if the line is correct, the problem might be in how you
>   configured Apache. Here's a reference :
>
>   http://cpanforum.com/threads/1268
>
>   Rgds,

Thanks for the pointer, that is interesting!
How do I check if apache loaded multithreaded MPM module?

This is a new machine and everthing is possible.

-- 
Joseph

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Joseph]

On 12/15/11 20:28, Joseph wrote:
>On 12/16/11 06:09, Pandu Poluan wrote:
>>
>>   Some thoughts : if the line is correct, the problem might be in how you
>>   configured Apache. Here's a reference :
>>
>>   http://cpanforum.com/threads/1268
>>
>>   Rgds,
>
>Thanks for the pointer, that is interesting!
>How do I check if apache loaded multithreaded MPM module?
>
>This is a new machine and everthing is possible.
>
>-- 
>Joseph

It seems to me that my apache is loading both modules:
./httpd.conf:LoadModule cgi_module modules/mod_cgi.so
./httpd.conf:LoadModule cgid_module modules/mod_cgid.so

but this is identical with my other working server that is functioning correctly.

dbh = DBI->connect( 'DBI:Pg:dbname=DBNAME','USERNAME','PASSWORD');

I was trying to test this line, but I don't think so I can as I did not even created the database.
I'm trying to create dataset using SQL-Ledger apacher web-interface.

-- 
Joseph

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Pandu Poluan]

[-- Attachment #1: Type: text/plain, Size: 521 bytes --]

On Dec 16, 2011 10:28 AM, "Joseph" <syscon780@gmail.com> wrote:
>
> On 12/16/11 06:09, Pandu Poluan wrote:
>>
>>
>>  Some thoughts : if the line is correct, the problem might be in how you
>>  configured Apache. Here's a reference :
>>
>>  http://cpanforum.com/threads/1268
>>
>>  Rgds,
>
>
> Thanks for the pointer, that is interesting!
> How do I check if apache loaded multithreaded MPM module?
>
> This is a new machine and everthing is possible.
>

I'm not sure either, haven't deployed Apache ever before...

Rgds,

[-- Attachment #2: Type: text/html, Size: 838 bytes --]

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Pandu Poluan]

[-- Attachment #1: Type: text/plain, Size: 1214 bytes --]

On Dec 16, 2011 10:42 AM, "Joseph" <syscon780@gmail.com> wrote:
>
> On 12/15/11 20:28, Joseph wrote:
>>
>> On 12/16/11 06:09, Pandu Poluan wrote:
>>>
>>>
>>>  Some thoughts : if the line is correct, the problem might be in how you
>>>  configured Apache. Here's a reference :
>>>
>>>  http://cpanforum.com/threads/1268
>>>
>>>  Rgds,
>>
>>
>> Thanks for the pointer, that is interesting!
>> How do I check if apache loaded multithreaded MPM module?
>>
>> This is a new machine and everthing is possible.
>>
>> --
>> Joseph
>
>
> It seems to me that my apache is loading both modules:
> ./httpd.conf:LoadModule cgi_module modules/mod_cgi.so
> ./httpd.conf:LoadModule cgid_module modules/mod_cgid.so
>
> but this is identical with my other working server that is functioning
correctly.
>

Honestly, I have no idea whether that's good or ungood. But if the other
servers have no problem...

> dbh = DBI->connect( 'DBI:Pg:dbname=DBNAME','USERNAME','PASSWORD');
>
> I was trying to test this line, but I don't think so I can as I did not
even created the database.
> I'm trying to create dataset using SQL-Ledger apacher web-interface.
>

Hmmm... try GRANTing the user sql-ledger ALL privileges to the database.

Rgds,

[-- Attachment #2: Type: text/html, Size: 1766 bytes --]

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Stroller]

On 16 December 2011, at 03:20, Joseph wrote:
> …
> The SQL-Ledger developer was helping me out on this and he can not figure it out either.
> I'm sure it is not SQL-ledger as it is working perfectly on my other computers. It could be apache configuration, but I don't see how?

Wait. Stop. This is your (first) problem.

Use Ledger-SMB.

The security vulnerabilities have demonstrated that Dieter cannot be trusted. When they were pointed out to him he showed that his understanding of the problem did not meet the expectations one would have of a first- or second-year student, never mind those we have of a developer who charges a considerable amount for supporting his product. Dieter tried to dismiss the problems and suppress the disclosure of the vulnerabilities, banning people from his mailing list.

Ledger-SMB has (I assume) a public bug tracker, and excellent support in its own mailing lists and on IRC. PostgreSQL developers contribute to Ledger-SMB and use it themselves.

Stroller.

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Joseph]

On 12/16/11 18:57, Stroller wrote:
>
>On 16 December 2011, at 03:20, Joseph wrote:
>> …
>> The SQL-Ledger developer was helping me out on this and he can not figure it out either.
>> I'm sure it is not SQL-ledger as it is working perfectly on my other computers. It could be apache configuration, but I don't see how?
>
>Wait. Stop. This is your (first) problem.
>
>Use Ledger-SMB.
>
>The security vulnerabilities have demonstrated that Dieter cannot be trusted. When they were pointed out to him he showed that his understanding of the problem did not meet the expectations one would have of a first- or second-year student, never mind those we have of a developer who charges a considerable amount for supporting his product. Dieter tried to dismiss the problems and suppress the disclosure of the vulnerabilities, banning people from his mailing list.
>
>Ledger-SMB has (I assume) a public bug tracker, and excellent support in its own mailing lists and on IRC. PostgreSQL developers contribute to Ledger-SMB and use it themselves.
>
>Stroller.

I was not able to find any support or good pointer so not being able to fix it I scrap Gentoo on this box and trying Debian. I'll post an update.
I have tried to use Ledger-SMB at the time I was using SQL-Ledger-2.6.12 so it was still compatible with Ledger-SMB but I could not find anybody who would 
help me with data transition to Ledger-SMB last year.  
So I couldn't wait any longer and upgraded to SQL-Ledger now 2.8.35 I think it is too late as this data is not compatible with Ledger-SMB 

The instruction on Ledger-SMB were less than helpful in data transition, when I asked question on a the forum I hardly got any rely. 

-- 
Joseph

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Joseph]

On 12/16/11 18:57, Stroller wrote:
>
>On 16 December 2011, at 03:20, Joseph wrote:
>> …
>> The SQL-Ledger developer was helping me out on this and he can not figure it out either.
>> I'm sure it is not SQL-ledger as it is working perfectly on my other computers. It could be apache configuration, but I don't see how?
>
>Wait. Stop. This is your (first) problem.
>
>Use Ledger-SMB.
>
>The security vulnerabilities have demonstrated that Dieter cannot be trusted. When they were pointed out to him he showed that his understanding of the problem did not meet the expectations one would have of a first- or second-year student, never mind those we have of a developer who charges a considerable amount for supporting his product. Dieter tried to dismiss the problems and suppress the disclosure of the vulnerabilities, banning people from his mailing list.
>
>Ledger-SMB has (I assume) a public bug tracker, and excellent support in its own mailing lists and on IRC. PostgreSQL developers contribute to Ledger-SMB and use it themselves.
>
>Stroller.

I see that LedgerSMB is 1.3 is it stable?
Is there direct migration from SQL-Ledger 2.8.35

-- 
Joseph

Re: [gentoo-user] DBI connect dbname=template1 failed Permission denied

[Stroller]

On 17 December 2011, at 02:13, Joseph wrote:
> ...
> I see that LedgerSMB is 1.3 is it stable?

Any version of LedgerSMB will be better than any version of SQL-Ledger. 

> Is there direct migration from SQL-Ledger 2.8.35

No idea off the top of my head.

The plan for LedgerSMB was to be compatible to allow that migration for as long as possible. 

These are great questions for: http://lists.sourceforge.net/lists/listinfo/ledger-smb-users

I believe the Ledger-SMB guys also have a separate list for SQL-Ledger questions, but I have no idea how active it is. Dieter's SQL-Ledger list used to be pretty good.

Stroller.