Debian 12 (Supported): Permission Denied on License Activation

ckd · 6 Jan

It doesn't matter whether you upload the certificate or enter the credentials to the supported repository. It keeps displaying "Permission Denied". Please see screenshot below, no errors in NGINX.

journalctl -f throws tons tons of uwsgi errors with error 500 and error 400:

Jan 06 17:24:48 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license? from 203.0.113.119 -> 400 '{"message":"Permission denied"}\n'
Jan 06 17:25:26 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license/creds? from 203.0.113.119 -> 500 '{"message":"Could not save credentials: Permission denied"}\n'
Jan 06 17:25:27 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license/creds? from 203.0.113.119 -> 500 '{"message":"Could not save credentials: Permission denied"}\n'
Jan 06 17:25:27 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license/creds? from 203.0.113.119 -> 500 '{"message":"Could not save credentials: Permission denied"}\n'
Jan 06 17:25:27 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license/creds? from 203.0.113.119 -> 500 '{"message":"Could not save credentials: Permission denied"}\n'
Jan 06 17:25:27 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license/creds? from 203.0.113.119 -> 500 '{"message":"Could not save credentials: Permission denied"}\n'
Jan 06 17:25:58 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license? from 203.0.113.119 -> 400 '{"message":"Permission denied"}\n'
Jan 06 17:25:59 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license/creds? from 203.0.113.119 -> 500 '{"message":"Could not save credentials: Permission denied"}\n'
Jan 06 17:26:14 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license/creds? from 203.0.113.119 -> 500 '{"message":"Could not save credentials: Permission denied"}\n'
Jan 06 17:28:36 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license? from 203.0.113.119 -> 400 '{"message":"Permission denied"}\n'
Jan 06 17:28:51 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license? from 203.0.113.119 -> 400 '{"message":"Permission denied"}\n'
Jan 06 17:30:07 grm uwsgi[978]: [WARNING] (grommunio Admin API) PUT /api/v1/system/license? from 203.0.113.119 -> 400 '{"message":"Permission denied"}\n'

crpb · 6 Jan

Check your directory permissions.

root@grom-deb:~# find /etc/grommunio-admin-common/license -ls
   655840      4 drwxr-xr-x   2 grommunio root         4096 Nov 24  2023 /etc/grommunio-admin-common/license
   656268      8 -rw-r--r--   1 grommunio www-data     5333 Nov 24  2023 /etc/grommunio-admin-common/license/license.crt
   655340      4 -rw-r--r--   1 grommunio grommunio       33 Jan  6 23:21 /etc/grommunio-admin-common/license/credentials.txt

So basically make sure with chown -vf grommunio /etc/grommunio-admin-common/license && chmod -vf u=rwx /etc/grommunio-admin-common/license and i guess umask 0750 or something.
I see now that the files are 0644 which i think is wrong as the license.crt/credentials.txt shouldn't be world-readable but that it's another story

ckd · 7 Jan

Yeah, wrong folder permissions after installing from scratch. The folder license is owned by root 0755. Please add this to your bug tracker for Debian 12 supported.

mx:/etc/grommunio-admin-common# ls -la
total 23
drwxr-xr-x  4 root root   6 Dec 31 22:27 .
drwxr-xr-x 89 root root 167 Jan  6 17:36 ..
-rw-r--r--  1 root root 280 Dec 31 22:26 config.json
drwxr-xr-x  2 root root   2 Nov 15 14:43 license
lrwxrwxrwx  1 root root  48 Dec 31 22:27 nginx-ssl.conf -> /etc/grommunio-common/nginx/ssl_certificate.conf
drwxr-xr-x  2 root root   3 Dec 31 22:26 nginx.d

crpb · 7 Jan

ckd Please add this to your bug tracker for Debian 12 supported.

@mwilliams

ckd · 14 Jan

Any update on this?

ckd · 2025-02-20T15:35:36+00:00

Still not fixed in Supported repository. Bump!