You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Albert Greinoecker <al...@uibk.ac.at> on 2007/10/11 23:53:16 UTC
mod_jk - no permission to access index file
Hi,
I'm currently running a tomcat application within apache2.
To do so, I added the following lines to jk.conf...
Alias /<my_app> "/usr/share/tomcat6/webapps/<my_app>"
<Directory "/usr/share/tomcat6/webapps/<my_app>">
Options Indexes FollowSymLinks
DirectoryIndex index.html
allow from all
When I now try to access the application only using the alias
(http://<host>/<my_app>), I get the following error:
You don't have permission to access /qsys on this server.
Additionally, a 403 Forbidden error was encountered while trying to use
an ErrorDocument to handle the request.
Same when index.html is added (http://<host>/<my_app>/index.html), but
when I call any serlvet path directly, everything works fine. So how
should my configuration look like?
thx,
Albert
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: [OT] mod_jk - no permission to access index file
Posted by Albert Greinoecker <al...@uibk.ac.at>.
exactly, that was it. thanks a lot!
albert
> >> Is there anything interesting in httpd's error.log file?
> > Symbolic link not allowed: /usr/share/tomcat6
>
> There you go. You have "Options FollowSymLinks" listed for
> /usr/share/tomcat6/webapps/my_app, but not for either "/" or
> "/usr/share" or something like that.
>
> You'll need to enable the FollowSymLinks option further up the directory
> structure so that /usr/share/tomcat6 (a symlnk) is followable.
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: [OT] mod_jk - no permission to access index file
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Albert,
Albert Greinoecker wrote:
>> Is there anything interesting in httpd's error.log file?
> Symbolic link not allowed: /usr/share/tomcat6
There you go. You have "Options FollowSymLinks" listed for
/usr/share/tomcat6/webapps/my_app, but not for either "/" or
"/usr/share" or something like that.
You'll need to enable the FollowSymLinks option further up the directory
structure so that /usr/share/tomcat6 (a symlnk) is followable.
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFHD4AH9CaO5/Lv0PARAiScAJ9kfP8cX07KyFyiC0A/22hXsFegJQCgt3Kf
sgNj6Yu1EgcRH0Mk/uZDkgk=
=2Qai
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: [OT] mod_jk - no permission to access index file
Posted by Albert Greinoecker <al...@uibk.ac.at>.
thanks for the answer.
> What are the permissions on each of:
> /usr
> /usr/share
> /usr/share/tomcat6
> /usr/share/tomcat6/webapps
> /usr/share/tomcat6/webapps/<my_app>
all have the following permission
drwxr-xr-x 12 root root
tomcat and apache2 are run as root (I know they should'nt, shame on
me :/)
> Is there anything interesting in httpd's error.log file?
Symbolic link not allowed: /usr/share/tomcat6
is listed multiple times. I'm using a symbolic link
tomcat6 -> apache-tomcat-6.0.10/ , but can this cause troubles in my
case?
albert
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: [OT] mod_jk - no permission to access index file
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Albert,
Note that this has nothing to do with mod_jk. In fact, mod_jk appears to
be working properly according to your report.
Albert Greinoecker wrote:
> I'm currently running a tomcat application within apache2.
> To do so, I added the following lines to jk.conf...
>
> Alias /<my_app> "/usr/share/tomcat6/webapps/<my_app>"
> <Directory "/usr/share/tomcat6/webapps/<my_app>">
> Options Indexes FollowSymLinks
> DirectoryIndex index.html
> allow from all
You might need:
Order Allow,Deny
But probably not (I think this is the default).
What are the permissions on each of:
/usr
/usr/share
/usr/share/tomcat6
/usr/share/tomcat6/webapps
/usr/share/tomcat6/webapps/<my_app>
?
> You don't have permission to access /qsys on this server.
> Additionally, a 403 Forbidden error was encountered while trying to use
> an ErrorDocument to handle the request.
Is there anything interesting in httpd's error.log file?
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFHDp0W9CaO5/Lv0PARAh/UAJ0WTF+9c+0IR5N44fWMOCv2AVkxrACglnld
jOKa5EPW1UXTzhqw15UZ9DY=
=tAtZ
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org