topic Re: Site Engine Backup Export in ExtremeCloud IQ- Site Engine Management Center

Site Engine Backup Export

jonchill — Tue, 11 Jun 2024 09:30:42 GMT

We're just in the process of building out SE and Control and have configured SE to do a backup.

I've created an SSH user with non admin access which works but when I try and open subfolders in the backup folder on SE I get access denied.

I don't really want to give my SSH account Root access so I can export these folders, is there a way round this?

What protocol works best for connecting to SE from a remote server so I can export off a copy of the SE backup?

Any help would be much appreciated.

Thanks

Jon

Re: Site Engine Backup Export

Robert_Haynes — Tue, 11 Jun 2024 12:52:10 GMT

The NetSight sub-directory and all its children are owned by the system account, be it root or the alternative 'netsight' (if used during initial setup). The ownership of the sub-directories created for a backup have Other not set which I suspect your non-admin user falls to.

Your non-admin account needs to be a member of the group and the group that owns the backup sub-directory is "root".

Did you use the Administration -> Users -> Manage SSH Connections -> Add function to create your user or did you do it manually via CLI?

Re: Site Engine Backup Export

jonchill — Wed, 12 Jun 2024 12:35:53 GMT

I did it through the GUI as you've said above.

Re: Site Engine Backup Export

Robert_Haynes — Thu, 13 Jun 2024 13:13:56 GMT

Thank you.

I have quickly tested this and it appears for both manually and scheduled backups the permissions on the sub-directories are set only for access by the system account. This to me is not expected.

For now it looks like only only owner privileges apply.

Re: Site Engine Backup Export

jonchill — Fri, 14 Jun 2024 09:11:15 GMT

Will this be rectified in a future version of SE so a non system owner account can export off the backups?

Re: Site Engine Backup Export

Robert_Haynes — Fri, 14 Jun 2024 13:48:35 GMT

That is unknown. I have put the change in behavior question to our development team pending a response. If this issue is a functional concern / something you want to see working may I suggest you open a formal case for it to be tracked.