Friday, August 25, 2023
support@conference.yunohost.org
August
Mon Tue Wed Thu Fri Sat Sun
  1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22 23 24
25
26
27
28
29
30
31
     
             

[09:20:16] <nalla22> Hi, I'm having a problem with Debian and mounting an SSHFS volume. I have a storage server to which I have connected two machines with SSHFS ( Debian 11 and Linux-Mint 21.2), but the Debian 11 client machine has problems with group write permissions when creating a new folder or file, whereas the Linux-Mint machine does not have these problems. Both client machines are configured in the same way on the fuse group, with the `user_allow_other` parameter enabled in `/etc/fuse.conf`, and both use the same SSHFS mount command

`sshfs -o password_stdin,allow_other root@192.168.0.111:/zhdd /dossier_local <<< 'password'`

The problem is not with the server (Debian 12), since the Linux-Mint machine has no problem with group write permissions when creating files or folders. I did execute ACL rights on the server folder with the following command `setfacl -R -d -m g::rwx /zhdd` but it doesn't work for the Debian11 client!
[09:20:43] <nalla22> https://aria.im/_matrix/media/v1/download/matrix.org/fyxQBEvWyvBlGWJsQtTkBSXd
[09:21:07] <nalla22> How can this problem be solved so that the Debian 11 client can create files and folders in the SSHFS mount point by granting write rights to the group?
[10:03:46] <orhtej2> > <@nalla22:matrix.org> How can this problem be solved so that the Debian 11 client can create files and folders in the SSHFS mount point by granting write rights to the group?

what's the output of `umask` on both systems?
[10:03:50] <orhtej2> (oslo this seems like general Linux question rather than YNH specific issue :P)
[10:03:50] <nalla22> > what's the output of `umask` on both systems?

the unmask command returns the value 0022 on the Debian 11 client, 0002 on the Linux-Mint client and 0022 on the Debian 12 server.
[10:03:50] <orhtej2> because `sshfs` seems to be irrelevant as per https://unix.stackexchange.com/a/562599
[10:07:32] <orhtej2> https://wiki.archlinux.org/title/umask
[10:07:33] <nalla22> > there's your difference, `umask` <del>sets</del>affects default permissions for newly created folders

Okay, how do you redefine umask to allow group writing only in the SSHFS mount point folder?
[10:07:33] <orhtej2> there's your difference, `umask` <del>sets</del>affects default permissions for newly created folders
[10:12:40] <orhtej2> per https://askubuntu.com/a/217174 it should be `setfacl -d -m g:fuse:rwx /zhdd`
[10:12:40] <orhtej2> > <@nalla22:matrix.org> Okay, how do you redefine umask to allow group writing only in the SSHFS mount point folder?

¯\_(ツ)_/¯ IDK
[10:12:40] <orhtej2> > <@nalla22:matrix.org> Hi, I'm having a problem with Debian and mounting an SSHFS volume. I have a storage server to which I have connected two machines with SSHFS ( Debian 11 and Linux-Mint 21.2), but the Debian 11 client machine has problems with group write permissions when creating a new folder or file, whereas the Linux-Mint machine does not have these problems. Both client machines are configured in the same way on the fuse group, with the `user_allow_other` parameter enabled in `/etc/fuse.conf`, and both use the same SSHFS mount command
>
> `sshfs -o password_stdin,allow_other root@192.168.0.111:/zhdd /dossier_local <<< 'password'`
>
> The problem is not with the server (Debian 12), since the Linux-Mint machine has no problem with group write permissions when creating files or folders. I did execute ACL rights on the server folder with the following command `setfacl -R -d -m g::rwx /zhdd` but it doesn't work for the Debian11 client!

actually like that, you accidentality the group name here
[10:12:41] <nalla22> > per https://askubuntu.com/a/217174 it should be `setfacl -d -m g:fuse:rwx /zhdd`

I've already tried the ACL on the Debian client, but it says "Operation not supported"
[10:12:49] <nalla22> https://aria.im/_matrix/media/v1/download/matrix.org/JcPJabOxaHTCkGkBktiUExxH
[10:13:47] <nalla22> I have the impression that ACLs don't work on networked disk mount points!
[10:15:17] <orhtej2> have you considered asking your favourite search engine? 'sshfs set umask' yields https://stackoverflow.com/questions/28125638/setting-umask-for-sshfs-mount as a first result
[10:15:18] <nalla22> I've already found this result, which I'm currently studying: https://unix.stackexchange.com/questions/393919/proper-way-to-set-the-umask-for-sftp-transactions
[11:17:26] <nalla22> orhtej2: I found the solution by adding the umask parameter to the mount command for fuse `sshfs -o password_stdin,allow_other,umask=0002`. Thanks for your help :)
[12:27:12] <thatoo> Bonjour,
Lorsqu'on install riotchat (Element for Nexctcloud), il y a une option qui a l'air super chouette : 

> Désaciver la redirection vers la version sans iframe pour l'authentification unique ( assurez-vous de configurer les en-têtes pour permettre à l'authentification unique, SSO, ou centralisée, CAS, d'être embarquée dans une iframe)

En installant riotchat dans Nextcloud dans Yunohost, cette option ne sert à rien et donc quand on ouvre riotchat, on nous demande d'ouvrir une nouvelle fenêtre pour s'authentifier alors que ce serait top si ça pouvait se faire en restant dans le cadre de l'app ce que je crois que cette option peut faire.
Du coup, sauriez-vous comment configurer les en-têtes pour permettre à l'authentification unique, SSO/CAS de Yunohost d'être embarquée dans une iframe?
[12:27:37] <thatoo> Bonjour,
Lorsqu'on install riotchat (Element for Nexctcloud), il y a une option qui a l'air super chouette : 

> Désaciver la redirection vers la version sans iframe pour l'authentification unique ( assurez-vous de configurer les en-têtes pour permettre à l'authentification unique, SSO, ou centralisée, CAS, d'être embarquée dans une iframe)


En installant riotchat dans Nextcloud dans Yunohost, cette option ne sert à rien et donc quand on ouvre riotchat, on nous demande d'ouvrir une nouvelle fenêtre pour s'authentifier alors que ce serait top si ça pouvait se faire en restant dans le cadre de l'app ce que je crois que cette option peut faire.
Du coup, sauriez-vous comment configurer les en-têtes pour permettre à l'authentification unique, SSO/CAS de Yunohost d'être embarquée dans une iframe?
[12:54:41] <(⊙_◎)> aaah finally the room conversion worked (I hope)
[12:54:54] <(⊙_◎)> anyone using airsonic advanced?
[12:55:39] <(⊙_◎)> I'm having trouble with android client ultrasonic, it's saying network error - and I think it might be related to some yunohost specific setting since in the airsonic room people are reporting ultrasonic to work ! nothing in issue tracker either
[12:56:07] <(⊙_◎)> I was thinking even to move towards funkwhale but lol now the otter client also can't connect ☹️
[12:57:57] <Chatpitaine Caverne> (⊙_◎): https://forum.yunohost.org/t/airsonic-impossible-de-connecter-un-client-android-resolu/10739

You should put the permission in visitor access autorized. (Visitor group in Yunohost permissions).
[13:02:50] <(⊙_◎)> whuut
[13:03:11] <(⊙_◎)> NO WAY
[13:03:42] <(⊙_◎)> ah no it is in this group
[13:04:16] <Chatpitaine Caverne> (⊙_◎): There still be the authentification process. And to what I know, it's the only way to get it working with Android clients.
[13:04:44] <(⊙_◎)> damn it I was almost super happy
[14:19:27] <nalla22> https://aria.im/_matrix/media/v1/download/matrix.org/kmqfkbfeSAkWXGsQbPDJnudl
[14:19:39] <nalla22> https://aria.im/_matrix/media/v1/download/matrix.org/CdiKcOxOuyXGPqJhJLLglaGW
[14:33:33] <nalla22> <del>J'ai installé jellyfin et ajouter une bibliothèque à l'application (d'ailleurs elle semble avoir trouver la jacket de Kamelott), mais rien ne s'affiche sur l'accueil de Jellyfin !</del>
[14:33:40] <nalla22> <del>Comment ça se fait que la bibliothèque n'est pas affichée ?</del>
[14:33:46] <nalla22> <del>Est-ce que c'est un bug d'intégration de l'application dans YunoHost ?</del>
[14:34:03] <nalla22> Je n'ai rien dit, fausse manipulation de ma part ! ^^
[18:51:51] <basti> ich habe probleme apps zu installieren…
[18:54:34] <yunohelper> Hi! To help us volunteers help you, read about <a href="https://yunohost.org/en/community/help#how-to-ask-for-help">how to ask for help</a>.<br />Notably, explain your problem and avoid sentences like "it does not work". Share any displayed error, use YunoPaste buttons, describe what is not working.<br />Thank you for you patience, and thank you for using YunoHost!