You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by James Moe <ji...@sohnen-moe.com> on 2015/07/14 00:52:24 UTC

[users@httpd] 403 and I don't understand why

httpd v2.4.10
linux v3.16.7-21-desktop x86_64

  Access to this site used to work oh-so-long ago. I have had no need
to access the (local) site for many months (at least). The Apache
server has been updated regularly since then.
  The directories and files are not read-protected (See below).

  What other mis-configurations could cause the error?

  Opening <http://courses.sma.com/moodle1xx/> yields:
----[ error message ]----
Access forbidden!
You don't have permission to access the requested directory. There is
either no index document or the directory is read-protected.
Error 403
courses.sma.com
Apache/2.4.10 (Linux/SUSE)
----[ end ]----

----[ error log ]----
[Mon Jul 13 14:50:47.209712 2015] [authz_core:error] [pid 25337]
[client 192.168.69.115:53650] AH01630: client denied by server
configuration: /d500g/www/courses/moodle1xx/, referer: http://www.sma.com/
----[ end ]----

  User "wwwrun" is a member of the "users" group.
  The index file exists:
$ ll /d500g/www/courses/moodle1xx/index.php
-rw-rw-r--  1 jmoe users 12032 Jul 26  2010
/d500g/www/courses/moodle1xx/index.php
drwxr-xr-x 15 root  root  4096 Nov 19  2013 d500g/
drwxrwxrwx  7 jmoe  users 4096 Jan 20  2012 www/
drwxrwxr-x  9 jmoe  users 4096 Jan 20  2012 courses/
drwxrwxr-x 35 jmoe  users 4096 Apr  4  2014 moodle1xx/

----[ vhost ]----
<VirtualHost *:80>
    ServerAdmin jimoe@sohnen-moe.com
    ServerName courses.sma.com

    DocumentRoot /d500g/www/courses

    ErrorLog /d500g/www/log/courses.sma.com-error_log
    CustomLog /d500g/www/log/courses.sma.com-access_log combined

    HostnameLookups Off
    UseCanonicalName Off
    ServerSignature Off

    Include /etc/apache2/conf.d/*.conf

    ScriptAlias /cgi-bin/ "/d500g/www/courses/cgi-bin/"
    <Directory "/d500g/www/courses/cgi-bin">
	AllowOverride None
	Options +ExecCGI -Includes
	Order allow,deny
	Allow from all
    </Directory>
    <Directory "/d500g/www/courses">
	Options Indexes FollowSymLinks

	AllowOverride all

	Order allow,deny
	Allow from all
    </Directory>
----[ end ]----

-- 
James Moe
moe dot james at sohnen-moe dot com
520.743.3936


Re: [users@httpd] 403 and I don't understand why

Posted by James Moe <ji...@sohnen-moe.com>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/13/2015 04:06 PM, Richard wrote:
> Your apache access control directives are from pre-2.4, and likely 
> causing your problems now that your apache is 2.4.x. See:
> 
> <http://httpd.apache.org/docs/2.4/upgrading.html>
> 
  Thank you. That provided the information I needed to repair the
configuration.
  I replaced:
Order allow,deny
Allow from all

with:

Require all granted

  It's all good again.


- -- 
James Moe
moe dot james at sohnen-moe dot com
520.743.3936
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlWlWiUACgkQzTcr8Prq0ZMnpACeLlj8OCrW0JobASsZyX2indxW
GD0An0k/exqMIzwGr+arkBg6cySYm9g/
=Qlyv
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] 403 and I don't understand why

Posted by Richard <li...@listmail.innovate.net>.

------------ Original Message ------------
> Date: Monday, July 13, 2015 03:52:24 PM -0700
> From: James Moe <ji...@sohnen-moe.com>
>
> httpd v2.4.10
> linux v3.16.7-21-desktop x86_64
> 
>   Access to this site used to work oh-so-long ago. I have had no
> need to access the (local) site for many months (at least). The
> Apache server has been updated regularly since then.
>   The directories and files are not read-protected (See below).
> 
>   What other mis-configurations could cause the error?
> 
>   Opening <http://courses.sma.com/moodle1xx/> yields:
> ----[ error message ]----
> Access forbidden!
> You don't have permission to access the requested directory. There
> is either no index document or the directory is read-protected.
> Error 403
> courses.sma.com
> Apache/2.4.10 (Linux/SUSE)
> ----[ end ]----
> 
> ----[ error log ]----
> [Mon Jul 13 14:50:47.209712 2015] [authz_core:error] [pid 25337]
> [client 192.168.69.115:53650] AH01630: client denied by server
> configuration: /d500g/www/courses/moodle1xx/, referer:
> http://www.sma.com/ ----[ end ]----
> 
>   User "wwwrun" is a member of the "users" group.
>   The index file exists:
> $ ll /d500g/www/courses/moodle1xx/index.php
> -rw-rw-r--  1 jmoe users 12032 Jul 26  2010
> /d500g/www/courses/moodle1xx/index.php
> drwxr-xr-x 15 root  root  4096 Nov 19  2013 d500g/
> drwxrwxrwx  7 jmoe  users 4096 Jan 20  2012 www/
> drwxrwxr-x  9 jmoe  users 4096 Jan 20  2012 courses/
> drwxrwxr-x 35 jmoe  users 4096 Apr  4  2014 moodle1xx/
> 
> ----[ vhost ]----
> <VirtualHost *:80>
>     ServerAdmin jimoe@sohnen-moe.com
>     ServerName courses.sma.com
> 
>     DocumentRoot /d500g/www/courses
> 
>     ErrorLog /d500g/www/log/courses.sma.com-error_log
>     CustomLog /d500g/www/log/courses.sma.com-access_log combined
> 
>     HostnameLookups Off
>     UseCanonicalName Off
>     ServerSignature Off
> 
>     Include /etc/apache2/conf.d/*.conf
> 
>     ScriptAlias /cgi-bin/ "/d500g/www/courses/cgi-bin/"
>     <Directory "/d500g/www/courses/cgi-bin">
> 	AllowOverride None
> 	Options +ExecCGI -Includes
> 	Order allow,deny
> 	Allow from all
>     </Directory>
>     <Directory "/d500g/www/courses">
> 	Options Indexes FollowSymLinks
> 
> 	AllowOverride all
> 
> 	Order allow,deny
> 	Allow from all
>     </Directory>
> ----[ end ]----

Your apache access control directives are from pre-2.4, and likely
causing your problems now that your apache is 2.4.x. See:

  <http://httpd.apache.org/docs/2.4/upgrading.html>

for 2.2->2.4 changes.



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org