Debian 12 (Supported): Permission Denied on License Activation

ckd

It doesn't matter whether you upload the certificate or enter the credentials to the supported repository. It keeps displaying "Permission Denied". Please see screenshot below, no errors in NGINX.

journalctl -f throws tons tons of uwsgi errors with error 500 and error 400:

Jan 06 17:24:48 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license? from 203.0.113.119 -> 400 '{"message":"Permission denied"}\n'
Jan 06 17:25:26 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license/creds? from 203.0.113.119 -> 500 '{"message":"Could not save credentials: Permission denied"}\n'
Jan 06 17:25:27 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license/creds? from 203.0.113.119 -> 500 '{"message":"Could not save credentials: Permission denied"}\n'
Jan 06 17:25:27 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license/creds? from 203.0.113.119 -> 500 '{"message":"Could not save credentials: Permission denied"}\n'
Jan 06 17:25:27 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license/creds? from 203.0.113.119 -> 500 '{"message":"Could not save credentials: Permission denied"}\n'
Jan 06 17:25:27 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license/creds? from 203.0.113.119 -> 500 '{"message":"Could not save credentials: Permission denied"}\n'
Jan 06 17:25:58 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license? from 203.0.113.119 -> 400 '{"message":"Permission denied"}\n'
Jan 06 17:25:59 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license/creds? from 203.0.113.119 -> 500 '{"message":"Could not save credentials: Permission denied"}\n'
Jan 06 17:26:14 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license/creds? from 203.0.113.119 -> 500 '{"message":"Could not save credentials: Permission denied"}\n'
Jan 06 17:28:36 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license? from 203.0.113.119 -> 400 '{"message":"Permission denied"}\n'
Jan 06 17:28:51 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license? from 203.0.113.119 -> 400 '{"message":"Permission denied"}\n'
Jan 06 17:30:07 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license? from 203.0.113.119 -> 400 '{"message":"Permission denied"}\n'

crpb

Check your directory permissions.

root@grom-deb:~# find /etc/grommunio-admin-common/license -ls
   655840      4 drwxr-xr-x   2 grommunio root         4096 Nov 24  2023 /etc/grommunio-admin-common/license
   656268      8 -rw-r--r--   1 grommunio www-data     5333 Nov 24  2023 /etc/grommunio-admin-common/license/license.crt
   655340      4 -rw-r--r--   1 grommunio grommunio       33 Jan  6 23:21 /etc/grommunio-admin-common/license/credentials.txt

So basically make sure with chown -vf grommunio /etc/grommunio-admin-common/license && chmod -vf u=rwx /etc/grommunio-admin-common/license and i guess umask 0750 or something.
I see now that the files are 0644 which i think is wrong as the license.crt/credentials.txt shouldn't be world-readable but that it's another story 😛

ckd

Yeah, wrong folder permissions after installing from scratch. The folder license is owned by root 0755. Please add this to your bug tracker for Debian 12 supported. 🙂

mx:/etc/grommunio-admin-common# ls -la
total 23
drwxr-xr-x  4 root root   6 Dec 31 22:27 .
drwxr-xr-x 89 root root 167 Jan  6 17:36 ..
-rw-r--r--  1 root root 280 Dec 31 22:26 config.json
drwxr-xr-x  2 root root   2 Nov 15 14:43 license
lrwxrwxrwx  1 root root  48 Dec 31 22:27 nginx-ssl.conf -> /etc/grommunio-common/nginx/ssl_certificate.conf
drwxr-xr-x  2 root root   3 Dec 31 22:26 nginx.d

crpb

ckd Please add this to your bug tracker for Debian 12 supported.

@mwilliams

ckd

Any update on this?

ckd

Still not fixed in Supported repository. Bump!

ckd

Problem still persists on Debian 12. Installing Grommunio from scratch on Debian 12 using the supported/official repository is still a pain in the arse. The file/folder permission issues have not been fixed either, the MGMT interface is inaccessible when following the official Grommunio Docs! No license can be uploaded, the API is throwing tons of Error 500s and much more!

Yes I know, I can easily fix this manually and it shouldn't bother me, but that's not the point. You cannot quickly deploy Grommunio on Debian 12, it's frustrating and takes a lot of time to keep track of all those quirks just to get a working system.

Once again I am offering you my voluntary help -- I would love to feed your bugtracker if it saves you time and makes your life easier.

Steakie

ckd if you know how to fix this (unlike me lol), you can open a PR in
https://github.com/grommunio/grommunio-setup/blob/master/setup.sh
which is probably the right repository and place to fix it

WalterH

Development only has limited resources. Set the rights yourself in the short term, in the long term this will be repaired by Development.

crpb

We use quite a lot of chown/chmod in https://github.com/eryx12o45/grommunio-setup/blob/main/grommunio-setup ^_^