You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "James B. Byrne" <by...@harte-lyne.ca> on 2014/09/26 18:24:50 UTC
[users@httpd] Q1. Apache httpd-2.4.9 configuration : client denied by server
configuration error
OS=CentOS-6.5
We have locally built and packaged this version of httpd to replace httpd-2.2
which ships with CentOS-6.5. Upon restarting the upgraded httpd server we
received the error message "client denied by server configuration". The
distributed conf/httpd.conf configuration file contains this:
<Directory />
AllowOverride none
Require all denied
</Directory>
The virtual server that reported the error contains this:
<VirtualHost 216.185.71.167:443>
DocumentRoot "/var/data/ca.harte-lyne/public_html"
. . .
<Directory "/var/data/ca.harte-lyne/public_html">
AllowOverride all
Options +Indexes -Multiviews
Require all granted
</Directory>
<Location />
Require all granted
SetEnv RAILS_ENV production
</Location>
. . .
The only way we could get this virtual server to respond instead of logging a
'client denied by server configuration' error was to comment out the
directives in httpd.conf as shown.
<Directory />
# AllowOverride none
# Require all denied
</Directory>
Is this in fact what we needed to do? If not then what should we have done?
--
*** E-Mail is NOT a SECURE channel ***
James B. Byrne mailto:ByrneJB@Harte-Lyne.ca
Harte & Lyne Limited http://www.harte-lyne.ca
9 Brockley Drive vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada L8E 3C3
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Q1. Apache httpd-2.4.9 configuration : client denied
by server configuration error
Posted by Edgar Pettijohn <ed...@pettijohn.no-ip.biz>.
Try:
|<Directory />
AllowOverride none
Require all denied
</Directory>
||<Directory ||"/var/data/ca.harte-lyne/public_html">
||Options +Indexes -Multiviews
AllowOverride All
Require all granted
</Directory>
|
On 09/26/2014 11:24 AM, James B. Byrne wrote:
> OS=CentOS-6.5
>
> We have locally built and packaged this version of httpd to replace httpd-2.2
> which ships with CentOS-6.5. Upon restarting the upgraded httpd server we
> received the error message "client denied by server configuration". The
> distributed conf/httpd.conf configuration file contains this:
>
>
> <Directory />
> AllowOverride none
> Require all denied
> </Directory>
>
>
> The virtual server that reported the error contains this:
> <VirtualHost 216.185.71.167:443>
> DocumentRoot "/var/data/ca.harte-lyne/public_html"
> . . .
> <Directory "/var/data/ca.harte-lyne/public_html">
> AllowOverride all
> Options +Indexes -Multiviews
> Require all granted
> </Directory>
>
> <Location />
> Require all granted
> SetEnv RAILS_ENV production
> </Location>
> . . .
>
> The only way we could get this virtual server to respond instead of logging a
> 'client denied by server configuration' error was to comment out the
> directives in httpd.conf as shown.
>
> <Directory />
> # AllowOverride none
> # Require all denied
> </Directory>
>
>
> Is this in fact what we needed to do? If not then what should we have done?
>
>
Re: [users@httpd] Q1. Apache httpd-2.4.9 configuration : client
denied by server configuration error
Posted by Eric Covener <co...@gmail.com>.
On Fri, Sep 26, 2014 at 7:12 PM, James B. Byrne <by...@harte-lyne.ca>
wrote:
> That would not explain why removing the Directory directives in httpd.conf
> allows the very same virtual host to then respond to the exact same url
> sent
> from the same client running on the same workstation as in the first
> instance.
>
Seems consistent to me. You had to make a change outside of the virtual
host to make it effective. That doesn't mean it's the problem, but strictly
by the numbers it's the most likely problem.
> /var/log/httpd/hll_www_public_ssl_error.log:[Fri Sep 26 15:54:13.332996
2014]
Is that log from the virtualhost you posted, or defined globally?
Re: [users@httpd] Q1. Apache httpd-2.4.9 configuration : client
denied by server configuration error
Posted by "James B. Byrne" <by...@harte-lyne.ca>.
On Fri, September 26, 2014 19:03, Eric Covener wrote:
> On Fri, Sep 26, 2014 at 6:44 PM, Edgar Pettijohn <ed...@pettijohn.no-ip.biz>
> wrote:
>
>> > The virtual server that reported the error contains this:
>> > <VirtualHost
>> ââ
>> 216.185.71.167:443>
>> > DocumentRoot "/var/data/ca.harte-lyne/public_html"
>> > . . .
>>
>
> â10:1 says you never made it into this virtualhost because the local
> interface the connection was made to wasn'tâ â216.185.71.167.
>
That would not explain why removing the Directory directives in httpd.conf
allows the very same virtual host to then respond to the exact same url sent
from the same client running on the same workstation as in the first instance.
--
*** E-Mail is NOT a SECURE channel ***
James B. Byrne mailto:ByrneJB@Harte-Lyne.ca
Harte & Lyne Limited http://www.harte-lyne.ca
9 Brockley Drive vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada L8E 3C3
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Q1. Apache httpd-2.4.9 configuration : client
denied by server configuration error
Posted by Eric Covener <co...@gmail.com>.
On Fri, Sep 26, 2014 at 6:44 PM, Edgar Pettijohn <ed...@pettijohn.no-ip.biz>
wrote:
> > The virtual server that reported the error contains this:
> > <VirtualHost
>
> 216.185.71.167:443>
> > DocumentRoot "/var/data/ca.harte-lyne/public_html"
> > . . .
>
10:1 says you never made it into this virtualhost because the local
interface the connection was made to wasn't 216.185.71.167.
Re: [users@httpd] Q1. Apache httpd-2.4.9 configuration : client
denied by server configuration error
Posted by "James B. Byrne" <by...@harte-lyne.ca>.
On Fri, September 26, 2014 18:44, Edgar Pettijohn wrote:
> Could you post the actual logs?
>
>
/var/log/httpd/hll_www_public_ssl_error.log:[Fri Sep 26 15:54:13.332996 2014]
[authz_core:error] [pid 5822:tid 139947878967040] [client 216.185.71.44:32777]
AH01630: client denied by server configuration:
/var/data/ca.harte-lyne/public_html/
/var/log/httpd/hll_www_public_ssl_error.log:[Fri Sep 26 15:54:17.955162 2014]
[authz_core:error] [pid 5824:tid 139947868477184] [client 216.185.71.44:32778]
AH01630: client denied by server configuration:
/var/data/ca.harte-lyne/public_html/
/var/log/httpd/hll_www_public_ssl_error.log:[Fri Sep 26 16:00:01.343067 2014]
[authz_core:error] [pid 5824:tid 139947847497472] [client
216.185.71.180:45058] AH01630: client denied by server configuration:
/var/data/ca.harte-lyne/public_html/
/var/log/httpd/hll_www_public_ssl_error.log:[Fri Sep 26 16:00:42.295683 2014]
[authz_core:error] [pid 6097:tid 140124985751296] [client 216.185.71.44:32791]
AH01630: client denied by server configuration:
/var/data/ca.harte-lyne/public_html/
/var/log/httpd/hll_www_public_ssl_error.log:[Fri Sep 26 16:00:43.623965 2014]
[authz_core:error] [pid 6099:tid 140124975261440] [client 216.185.71.44:32790]
AH01630: client denied by server configuration:
/var/data/ca.harte-lyne/public_html/
--
*** E-Mail is NOT a SECURE channel ***
James B. Byrne mailto:ByrneJB@Harte-Lyne.ca
Harte & Lyne Limited http://www.harte-lyne.ca
9 Brockley Drive vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada L8E 3C3
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Q1. Apache httpd-2.4.9 configuration : client denied
by server configuration error
Posted by Edgar Pettijohn <ed...@pettijohn.no-ip.biz>.
Could you post the actual logs?
On 09/26/2014 11:24 AM, James B. Byrne wrote:
> OS=CentOS-6.5
>
> We have locally built and packaged this version of httpd to replace httpd-2.2
> which ships with CentOS-6.5. Upon restarting the upgraded httpd server we
> received the error message "client denied by server configuration". The
> distributed conf/httpd.conf configuration file contains this:
>
>
> <Directory />
> AllowOverride none
> Require all denied
> </Directory>
>
>
> The virtual server that reported the error contains this:
> <VirtualHost 216.185.71.167:443>
> DocumentRoot "/var/data/ca.harte-lyne/public_html"
> . . .
> <Directory "/var/data/ca.harte-lyne/public_html">
> AllowOverride all
> Options +Indexes -Multiviews
> Require all granted
> </Directory>
>
> <Location />
> Require all granted
> SetEnv RAILS_ENV production
> </Location>
> . . .
>
> The only way we could get this virtual server to respond instead of logging a
> 'client denied by server configuration' error was to comment out the
> directives in httpd.conf as shown.
>
> <Directory />
> # AllowOverride none
> # Require all denied
> </Directory>
>
>
> Is this in fact what we needed to do? If not then what should we have done?
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org