Re: [Health] Problems with back and restore from Tryton client

[Christoph H. Larsen]

Dear All,
First of al, zodman, thanks a lot for your advice on this matter.

On 21/02/12 01:06, Christoph H. Larsen wrote:
> Dear All,
> 
> Sorry for cross-posting. The following has been submitted to the Tryton
> list on 21 January 2012. No reply so far, so maybe you can help:
> 
> -----------------------------------------------------------------------
> On a recent install of Tryton 2.2.1 inside a jail located inside a
> well-established multi-jail server running FreeBSD 8.2. PostgreSQL
> (version 9.1.2 used for server and clients throughout the jails) is
> happily churning away on in a diffferent jail (and used by other
> application in other jails, too). Packet Filter (pf) firewall is in
> place and working nicely.
You pointed out that the Tryton client backup and restore features only
work, if the database user (in my case: tryton) is superuser. As I was a
bit paranoid when I set up the trytond srerver ad PostgreSQL database, I
only gave the tryton role "create databases" privileges.
I am not entirely sure, whether I really like to give tryton full
superuser privileges - any security advise on that one?
Thanks a lot!
Chris
> 
> I seem to encounter the dreaded OpenERP backup/restore problem, albeit
> partially:
> I CANNOT do any backup using the Tryton client database management
> faciltiies, unless I have been logged into the respective Tryton
> instance. When logged in, I do strike luck.
> 
> So, if I am not logged into the respective Tryton database via the
> Tryton cient, and try to do a backup using the correct Tryton
> superuser password, I get:
> -----------------------------------------------------------------------------------------------------------------
> [Sat Jan 21 22:34:15 2012] INFO:database:DUMP DB: hmis_dkgmdc
> ----------------------------------------
> Exception happened during processing of request from ('192.168.0.71',
> 34096)
> Traceback (most recent call last):
>   File "/usr/local/lib/python2.7/SocketServer.py", line 582, in
> process_request_thread
>     self.finish_request(request, client_address)
>   File "/usr/local/lib/python2.7/SocketServer.py", line 323, in
> finish_request
>     self.RequestHandlerClass(request, client_address, self)
>   File "/usr/local/lib/python2.7/SocketServer.py", line 639, in
> __init__
>     self.handle()
>   File "/usr/local/lib/python2.7/BaseHTTPServer.py", line 345, in
> handle
>     self.handle_one_request()
>   File "/usr/local/lib/python2.7/BaseHTTPServer.py", line 313, in
> handle_one_request
>     self.raw_requestline = self.rfile.readline(65537)
>   File "/usr/local/lib/python2.7/socket.py", line 476, in readline
>     data = self._sock.recv(self._rbufsize)
> SysCallError: (-1, 'Unexpected EOF')
> ----------------------------------------
> Exception in thread Thread-6:
> Traceback (most recent call last):
>   File "/usr/local/lib/python2.7/threading.py", line 552, in
> __bootstrap_inner
>     self.run()
>   File "/usr/local/lib/python2.7/threading.py", line 505, in run
>     self.__target(*self.__args, **self.__kwargs)
>   File "/usr/local/lib/python2.7/SocketServer.py", line 586, in
> process_request_thread
>     self.shutdown_request(request)
>   File "/usr/local/lib/python2.7/SocketServer.py", line 459, in
> shutdown_request
>     request.shutdown(socket.SHUT_WR)
> TypeError: shutdown() takes exactly 0 arguments (1 given)
> -----------------------------------------------------------------------------------------------------------------
> 
> Restores of the backed-up file via the Tryton client are entirely
> impossible and give this error message:
> ---------------------------------------------------------------------------------------------------------------------------------
> [Sat Jan 21 22:11:32 2012] INFO:database:connect to "template1"
> pg_restore: [archiver (db)] Error while PROCESSING TOC:
> pg_restore: [archiver (db)] Error from TOC entry 5370; 0 0 COMMENT
> EXTENSION plpgsql
> pg_restore: [archiver (db)] could not execute query: ERROR:  must be
> owner of extension plpgsql
>     Command was: COMMENT ON EXTENSION plpgsql IS 'PL/pgSQL procedural
> language';
> 
> pg_restore: WARNING:  no privileges could be revoked for "public"
> pg_restore: WARNING:  no privileges could be revoked for "public"
> pg_restore: WARNING:  no privileges were granted for "public"
> pg_restore: WARNING:  no privileges were granted for "public"
> WARNING: errors ignored on restore: 1
> ----------------------------------------
> Exception happened during processing of request from ('192.168.0.71',
> 60833)
> Traceback (most recent call last):
>   File "/usr/local/lib/python2.7/SocketServer.py", line 582, in
> process_request_thread
>     self.finish_request(request, client_address)
>   File "/usr/local/lib/python2.7/SocketServer.py", line 323, in
> finish_request
>     self.RequestHandlerClass(request, client_address, self)
>   File "/usr/local/lib/python2.7/SocketServer.py", line 639, in
> __init__
>     self.handle()
>   File "/usr/local/lib/python2.7/BaseHTTPServer.py", line 345, in
> handle
>     self.handle_one_request()
>   File "/usr/local/lib/python2.7/BaseHTTPServer.py", line 313, in
> handle_one_request
>     self.raw_requestline = self.rfile.readline(65537)
>   File "/usr/local/lib/python2.7/socket.py", line 476, in readline
>     data = self._sock.recv(self._rbufsize)
> SysCallError: (-1, 'Unexpected EOF')
> ----------------------------------------
> Exception in thread Thread-1:
> Traceback (most recent call last):
>   File "/usr/local/lib/python2.7/threading.py", line 552, in
> __bootstrap_inner
>     self.run()
>   File "/usr/local/lib/python2.7/threading.py", line 505, in run
>     self.__target(*self.__args, **self.__kwargs)
>   File "/usr/local/lib/python2.7/SocketServer.py", line 586, in
> process_request_thread
>     self.shutdown_request(request)
>   File "/usr/local/lib/python2.7/SocketServer.py", line 459, in
> shutdown_request
>     request.shutdown(socket.SHUT_WR)
> TypeError: shutdown() takes exactly 0 arguments (1 given)
> ---------------------------------------------------------------------------------------------------------------------------------
> Given the strange error message (python-PgSQL is nowhere mentioned as
> a dependency for Trytond) I did install in both client and server for
> testing purposes, but did not get any different error message. The
> unexpected EOF error might also indicate a defective backup file...
> 
> Anybody with any ideas how to approach this problem? (Please note that
> I do NOT PostgreSQL on localhost with trust credentials, but via SSL
> in a different jail.)
> -----------------------------------------------------------------------
> 
> Thanks a lot, indeed -
> 
> Chris

-- 
Dr. Christoph H. Larsen
synaLinQ (Vietnam)
P.O. Box 55, Bưu điện NT, 01 Pasteur
Nha Trang, Khánh Hòa
Vietnam 
Mobile: +84-98-9607357 (Vietnam)
        +254-753-632481 (Kenya)
        +49-176-96456254 (Germany)
Fax:    +49-231-292734790
Email:  address@hidden