[tor-bugs] #6996 [Obfsproxy]: Problems with starting managed Obfsproxy server when installed via debian package and with Tor as service

[Tor Bug Tracker & Wiki]

#6996: Problems with starting managed Obfsproxy server when installed via debian
package and with Tor as service
-----------------------+----------------------------------------------------
 Reporter:  linda      |          Owner:  asn             
     Type:  defect     |         Status:  new             
 Priority:  normal     |      Milestone:                  
Component:  Obfsproxy  |        Version:  Tor: 0.2.3.22-rc
 Keywords:             |         Parent:                  
   Points:             |   Actualpoints:                  
-----------------------+----------------------------------------------------

Comment(by arma):

 Replying to [comment:4 linda]:
 > Now I'm trying to add all the options in {{{/usr/share/tor/tor-service-
 defaults-torrc}}} to the command line to see if it reproduces the error.
 It works if I leave out {{{User debian-tor}}}:

 > linda at vm05:~$ sudo -u debian-tor tor -f /etc/tor/torrc DataDirectory
 /var/lib/tor RunAsDaemon 1 Log "notice file /var/log/tor/log"
 ControlSocket /var/run/tor/control ControlSocketsGroupWritable 1 PidFile
 /var/run/tor/tor.pid CookieAuthentication 1 CookieAuthFileGroupReadable 1
 CookieAuthFile /var/run/tor/control.authcookie User debian-tor
 > Oct 01 07:47:37.335 [warn] Error setting groups to gid 115: "Operation
 not permitted".
 > Oct 01 07:47:37.335 [warn] Tor is already running as debian-tor.  You do
 not need the "User" option if you are already running as the user you want
 to be.  (If you did not set the User option in your torrc, check whether
 it was specified on the command line by a startup script.)
 > Oct 01 07:47:37.335 [warn] Failed to parse/validate config: Problem with
 User value. See logs for details.

 > Does this give you any clues?

 The init script starts Tor as root, and then Tor drops privs to the
 debian-tor user. If you start Tor as debian-tor, you shouldn't ask it to
 change user. Hopefully the above explanation by Tor makes sense?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6996#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online