On Sat, Apr 8, 2017 at 1:04 PM, Dominik 'Rathann' Mierzejewski <dominik@greysector.net> wrote:
On Saturday, 08 April 2017 at 15:32, Richard Shaw wrote:
[...]
> Currently, for the web interface to work the apache user needs to be added
> to the backuppc group so that /etc/BackupPC/apache.users can be read for
> the password protected login.

Does it support PAM or SSSD authentication? Or is it upstream default to
use a separate user database?

Perhaps, but this is the recommended way to setup BackupPC by upstream...



> Would it be a good idea to do this in %pre/post?
>
> usermod -a -G backuppc apache

Yes, it's a good idea. This is basically the same use case as user
creation: https://fedoraproject.org/wiki/Packaging:UsersAndGroups .

Well not exactly... There's no example of usermod, just creation of users and groups... 

I'm sure I  could come up with a variant of the example there, although in my case I'm not sure checking to see if apache is already in the backuppc group does much, it shouldn't hurt anything if it's already done or not.

Thanks,
Richard