You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Forrest Aldrich <fo...@forrie.com> on 2005/09/08 23:53:30 UTC

[users@httpd] Proper configuration of FollowSymLinks in 2.0.54

What is the proper way to configure FollowSymLinks in 2.0.54?

I'm having a problem getting this to work at all - after reading the 
manual, searching for examples, it seems fairly straightforward; 
however, every combination I try fails with: Symbolic link not allowed.

I am suspicious that I've hit a bug, and actually filed a bug report 
<http://issues.apache.org/bugzilla/show_bug.cgi?id=36364>, to which 
detractors insist there is no bug.

I tried a stripped-down httpd.conf that has basically this:

DocumentRoot /usr/local/www/data:

    <Directory />
        Options All
    </Directory>


The symlink is in the DocumentRoot as:

files -> /usr/local/shares/directory

I tried specifying the directory in different ways:

    <Direcotory "/files">

    <Direcotry "/usr/local/www/data/files">

    <Directory "/usr/local/shares/files">


the last option isn't valid, but I tried it anyway.

This does *not* work, and I'm completely puzzled.

What's more, the same configuration works fine under 1.3.x, using just a 
Directory pointer to /symlinkname.

I'd appreciate some clarification/examples of how to do this properly 
under 2.0.54.


Thanks.






Re: [users@httpd] Proper configuration of FollowSymLinks in 2.0.54

Posted by Forrest Aldrich <fo...@forrie.com>.
Here is the complete httpd.conf, feel free to comment beyond what I 
pointed out in my last message.

DocumentRoot "/usr/local/www/data"
ServerRoot "/usr/local"
Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15
PidFile /var/run/httpd.pid
User www
Group www
ServerAdmin webmaster@forrie.com
ServerName www.forrie.com:80
UseCanonicalName Off
DirectoryIndex index.html index.html.var index.php
AccessFileName .htaccess
TypesConfig etc/apache2/mime.types
DefaultType text/plain
HostnameLookups Off
ServerTokens Prod
ServerSignature Off

Listen 80

CustomLog /var/log/apache/forrie.com/access_log common env=!skip_log
ErrorLog /var/log/apache/forrie.com/error_log

LogLevel warn
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent

<IfModule prefork.c>
StartServers         5
MinSpareServers      5
MaxSpareServers     10
MaxClients         150
MaxRequestsPerChild  0
</IfModule>

<IfModule worker.c>
StartServers         2
MaxClients         150
MinSpareThreads     25
MaxSpareThreads     75 
ThreadsPerChild     25
MaxRequestsPerChild  0
</IfModule>

<IfModule perchild.c>
NumServers           5
StartThreads         5
MinSpareThreads      5
MaxSpareThreads     10
MaxThreadsPerChild  20
MaxRequestsPerChild  0
</IfModule>

LoadModule access_module libexec/apache2/mod_access.so
LoadModule auth_module libexec/apache2/mod_auth.so
LoadModule auth_anon_module libexec/apache2/mod_auth_anon.so
LoadModule auth_dbm_module libexec/apache2/mod_auth_dbm.so
LoadModule charset_lite_module libexec/apache2/mod_charset_lite.so
LoadModule include_module libexec/apache2/mod_include.so
LoadModule deflate_module libexec/apache2/mod_deflate.so
LoadModule log_config_module libexec/apache2/mod_log_config.so
LoadModule logio_module libexec/apache2/mod_logio.so
LoadModule env_module libexec/apache2/mod_env.so
LoadModule mime_magic_module libexec/apache2/mod_mime_magic.so
LoadModule cern_meta_module libexec/apache2/mod_cern_meta.so
LoadModule expires_module libexec/apache2/mod_expires.so
LoadModule headers_module libexec/apache2/mod_headers.so
LoadModule usertrack_module libexec/apache2/mod_usertrack.so
LoadModule unique_id_module libexec/apache2/mod_unique_id.so
LoadModule setenvif_module libexec/apache2/mod_setenvif.so
<IfDefine SSL>
LoadModule ssl_module libexec/apache2/mod_ssl.so
</IfDefine>
LoadModule mime_module libexec/apache2/mod_mime.so
LoadModule status_module libexec/apache2/mod_status.so
LoadModule autoindex_module libexec/apache2/mod_autoindex.so
LoadModule asis_module libexec/apache2/mod_asis.so
LoadModule info_module libexec/apache2/mod_info.so
LoadModule cgi_module libexec/apache2/mod_cgi.so
LoadModule vhost_alias_module libexec/apache2/mod_vhost_alias.so
LoadModule negotiation_module libexec/apache2/mod_negotiation.so
LoadModule dir_module libexec/apache2/mod_dir.so
LoadModule imap_module libexec/apache2/mod_imap.so
LoadModule actions_module libexec/apache2/mod_actions.so
LoadModule speling_module libexec/apache2/mod_speling.so
LoadModule userdir_module libexec/apache2/mod_userdir.so
LoadModule alias_module libexec/apache2/mod_alias.so
LoadModule rewrite_module libexec/apache2/mod_rewrite.so
LoadModule php5_module        libexec/apache2/libphp5.so

<Directory />
    Options All
    AllowOverride All
    Order Deny,Allow
    Deny from all 
</Directory>

<Directory "/usr/local/www">
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

<Files ~ "^\.ht">
    Order allow,deny
    Deny from all
</Files>

<IfModule mod_mime_magic.c>
    MIMEMagicFile etc/apache2/magic
</IfModule>

Alias /icons/ "/usr/local/www/icons/"

<Directory "/usr/local/www/icons">
    Options Indexes MultiViews
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

# ScriptAlias /cgi-bin/ "/usr/local/www/cgi-bin/"

# <Directory "/usr/local/www/cgi-bin">
#     AllowOverride None
#     Options None
#     Order allow,deny
#     Allow from all
# </Directory>

IndexOptions FancyIndexing VersionSort

AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip

AddIconByType (TXT,/icons/text.gif) text/*
AddIconByType (IMG,/icons/image2.gif) image/*
AddIconByType (SND,/icons/sound2.gif) audio/*
AddIconByType (VID,/icons/movie.gif) video/*

AddIcon /icons/binary.gif .bin .exe
AddIcon /icons/binhex.gif .hqx
AddIcon /icons/tar.gif .tar
AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
AddIcon /icons/a.gif .ps .ai .eps
AddIcon /icons/layout.gif .html .shtml .htm .pdf
AddIcon /icons/text.gif .txt
AddIcon /icons/c.gif .c
AddIcon /icons/p.gif .pl .py
AddIcon /icons/f.gif .for
AddIcon /icons/dvi.gif .dvi
AddIcon /icons/uuencoded.gif .uu
AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
AddIcon /icons/tex.gif .tex
AddIcon /icons/bomb.gif core

AddIcon /icons/back.gif ..
AddIcon /icons/hand.right.gif README
AddIcon /icons/folder.gif ^^DIRECTORY^^
AddIcon /icons/blank.gif ^^BLANKICON^^

DefaultIcon /icons/unknown.gif


ReadmeName README.html
HeaderName HEADER.html

IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t

# DefaultLanguage and AddLanguage allows you to specify the language of 
# language code is pl) may wish to use "AddLanguage pl .po" to
AddLanguage ca .ca
AddLanguage cs .cz .cs
AddLanguage da .dk
AddLanguage de .de
AddLanguage el .el
AddLanguage en .en
AddLanguage eo .eo
AddLanguage es .es
AddLanguage et .et
AddLanguage fr .fr
AddLanguage he .he
AddLanguage hr .hr
AddLanguage it .it
AddLanguage ja .ja
AddLanguage ko .ko
AddLanguage ltz .ltz
AddLanguage nl .nl
AddLanguage nn .nn
AddLanguage no .no
AddLanguage pl .po
AddLanguage pt .pt
AddLanguage pt-BR .pt-br
AddLanguage ru .ru
AddLanguage sv .sv
AddLanguage zh-CN .zh-cn
AddLanguage zh-TW .zh-tw

LanguagePriority en ca cs da de el eo es et fr he hr it ja ko ltz nl nn no pl pt pt-BR ru sv zh-CN zh-TW

# ForceLanguagePriority allows you to serve a result page rather than
ForceLanguagePriority Prefer Fallback
#        LanguagePriority en cs de es fr it ja ko nl pl pt-br ro sv tr
#        ForceLanguagePriority Prefer Fallback
ForceLanguagePriority Prefer Fallback

AddCharset ISO-8859-1  .iso8859-1  .latin1
AddCharset ISO-8859-2  .iso8859-2  .latin2 .cen
AddCharset ISO-8859-3  .iso8859-3  .latin3
AddCharset ISO-8859-4  .iso8859-4  .latin4
AddCharset ISO-8859-5  .iso8859-5  .latin5 .cyr .iso-ru
AddCharset ISO-8859-6  .iso8859-6  .latin6 .arb
AddCharset ISO-8859-7  .iso8859-7  .latin7 .grk
AddCharset ISO-8859-8  .iso8859-8  .latin8 .heb
AddCharset ISO-8859-9  .iso8859-9  .latin9 .trk
AddCharset ISO-2022-JP .iso2022-jp .jis
AddCharset ISO-2022-KR .iso2022-kr .kis
AddCharset ISO-2022-CN .iso2022-cn .cis
AddCharset Big5        .Big5       .big5
AddCharset WINDOWS-1251 .cp-1251   .win-1251
AddCharset CP866       .cp866
AddCharset KOI8-r      .koi8-r .koi8-ru
AddCharset KOI8-ru     .koi8-uk .ua
AddCharset ISO-10646-UCS-2 .ucs2
AddCharset ISO-10646-UCS-4 .ucs4
AddCharset UTF-8       .utf8

AddCharset GB2312      .gb2312 .gb 
AddCharset utf-7       .utf7
AddCharset utf-8       .utf8
AddCharset big5        .big5 .b5
AddCharset EUC-TW      .euc-tw
AddCharset EUC-JP      .euc-jp
AddCharset EUC-KR      .euc-kr
AddCharset shift_jis   .sjis

AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz
AddType application/x-httpd-php .php
AddHandler type-map var

BrowserMatch "Mozilla/2" nokeepalive
BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
BrowserMatch "RealPlayer 4\.0" force-response-1.0
BrowserMatch "Java/1\.0" force-response-1.0
BrowserMatch "JDK/1\.0" force-response-1.0

BrowserMatch "Microsoft Data Access Internet Publishing Provider" redirect-carefully
BrowserMatch "^WebDrive" redirect-carefully
BrowserMatch "^WebDAVFS/1.[012]" redirect-carefully
BrowserMatch "^gnome-vfs" redirect-carefully

<IfModule mod_ssl.c>
    Include etc/apache2/Includes/ssl.conf
</IfModule>

<Directory "/usr/local/shares/forrie/mp3">
	Options All
</Directory>



Re: [users@httpd] Proper configuration of FollowSymLinks in 2.0.54

Posted by Joshua Slive <js...@gmail.com>.
On 9/9/05, Forrest Aldrich <fo...@forrie.com> wrote:
>  I stripped down the httpd.conf to barebones, using these directives:
>  
>  
> <Directory />
>      Options All
>      AllowOverride All
>      Order Deny,Allow
>      Deny from all 
>  </Directory>
>  
>  There is a symlink in DocumentRoot "mp3share" pointing to this:
>     
>  
> <Directory "/usr/local/shares/forrie/mp3">
>          Options All
>  </Directory>
>  
>  I created a symbolic link owned by root, by www, and by the id "forrie". 
> None of them work, they all provide this error in the log:
>  
>  
> Fri Sep 09 12:30:44 2005] [error] [client 192.168.1.99] Symbolic link not
> allowed: /usr/local/www/data/mp3share

The primary reason this thread is going on forever is because your
examples are terribly imprecise, and you are not following the
directions you are given.

For example, obviously what you posted was not your entire httpd.conf.
 Did you check your entire httpd.conf for other Options directives
like I asked?

Applying Options directives to the target of the symlink does no good
whatsoever.  You need to have the appropriate Options in the directory
containing the symlink.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Proper configuration of FollowSymLinks in 2.0.54

Posted by Forrest Aldrich <fo...@forrie.com>.
[ snip ]

>Ok.  I think I've got it.
>
>Try this:
>mkdir /home/test2/test3/
>echo hello > /home/test2/test3/index.txt
>ln -s /home/test2/test3/ /home/test/test3
>chmod -x /home/test2
>lynx http://localhost:8091/index.txt
>
>A similar setup gave me the error you found.
>
>The problem is the file permissions on the target of the symlink. One
>of the parent directories of the path leading to your file does not
>give search permissions.
>
>So this was a configuration issue all along, but was made difficult to
>diagnose by an innacurate error message in the error log.  I believe
>the error message bug is reported here:
>http://issues.apache.org/bugzilla/show_bug.cgi?id=28515
>
>Joshua.
>
>  
>

I believe this is the problem.

It would have been immensely useful to have a better error message here.

Thank you!



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Proper configuration of FollowSymLinks in 2.0.54

Posted by Joshua Slive <js...@gmail.com>.
On 9/9/05, Forrest Aldrich <fo...@forrie.com> wrote:
>  Okay here's what happened.
>  
>  My config:
>  
>  
> User www
>  Group www
>  ServerName forrie.com
>  DocumentRoot /home/test
>  Listen *:8091
>  
>  <Directory />
>  Options All
>  </Directory>
>  
>  ErrorLog        /var/log/httpd-error.log
>  
>  If I do a "ln -s /usr/local/shares/forrie/files ." into the above
> DocumentRoot, I get the proper symlink:
>  
>  files -> /usr/local/shares/forrie/files
>  
>  And I get this error:
>  
>  [Fri Sep 09 13:49:33 2005] [error] [client 192.168.1.99] Symbolic link not
> allowed: /hom
>  e/test/files
>  
>  BUT...
>  
>  If I create a file "test2" in the ".." directory, containing "foo", then
> "ln -s /home/test2 ." which gives me:
>  
>  test2 -> /home/test2
>  
>  I can get to it via the browser.
>  
>  Now I'm suspicious of a filesystem item with FreeBSD-6.0 -- the symblic
> link to "files" is on the second hard drive, whereas the first is on the
> same disk.
>  
>  Other than that possibility, I'm at a loss here.

Ok.  I think I've got it.

Try this:
mkdir /home/test2/test3/
echo hello > /home/test2/test3/index.txt
ln -s /home/test2/test3/ /home/test/test3
chmod -x /home/test2
lynx http://localhost:8091/index.txt

A similar setup gave me the error you found.

The problem is the file permissions on the target of the symlink. One
of the parent directories of the path leading to your file does not
give search permissions.

So this was a configuration issue all along, but was made difficult to
diagnose by an innacurate error message in the error log.  I believe
the error message bug is reported here:
http://issues.apache.org/bugzilla/show_bug.cgi?id=28515

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Proper configuration of FollowSymLinks in 2.0.54

Posted by Forrest Aldrich <fo...@forrie.com>.
Okay here's what happened.

My config:

    User www
    Group www
    ServerName forrie.com
    DocumentRoot /home/test
    Listen *:8091

    <Directory />
    Options All
    </Directory>

    ErrorLog        /var/log/httpd-error.log


If I do a "ln -s /usr/local/shares/forrie/files ." into the above 
DocumentRoot, I get the proper symlink:

files -> /usr/local/shares/forrie/files

And I get this error:

[Fri Sep 09 13:49:33 2005] [error] [client 192.168.1.99] Symbolic link 
not allowed: /hom
e/test/files

BUT...

If I create a file "test2" in the ".." directory, containing "foo", then 
"ln -s /home/test2 ." which gives me:

test2 -> /home/test2

I can get to it via the browser.

Now I'm suspicious of a filesystem item with FreeBSD-6.0 -- the symblic 
link to "files" is on the second hard drive, whereas the first is on the 
same disk.

Other than that possibility, I'm at a loss here.


Thanks.


_F



Joshua Slive wrote:

>On 9/9/05, Joshua Slive <js...@gmail.com> wrote:
>  
>
>>4. ln -s test2/index.txt test/symlink.txt
>>    
>>
>
>Oops.  That's obviously not exactly what I did, since it creates a
>broken symlink.  More like
>ln -s ../test2/index.txt test/symlink
>
>Joshua.
>
>---------------------------------------------------------------------
>The official User-To-User support forum of the Apache HTTP Server Project.
>See <URL:http://httpd.apache.org/userslist.html> for more info.
>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
>For additional commands, e-mail: users-help@httpd.apache.org
>
>  
>

Re: [users@httpd] Proper configuration of FollowSymLinks in 2.0.54

Posted by Joshua Slive <js...@gmail.com>.
On 9/9/05, Joshua Slive <js...@gmail.com> wrote:
> 4. ln -s test2/index.txt test/symlink.txt

Oops.  That's obviously not exactly what I did, since it creates a
broken symlink.  More like
ln -s ../test2/index.txt test/symlink

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Proper configuration of FollowSymLinks in 2.0.54

Posted by Joshua Slive <js...@gmail.com>.
On 9/9/05, Forrest Aldrich <fo...@forrie.com> wrote:
>  There is no .htaccess file there, I changed the config per below
> "AllowOverride None" and the same problem occurs:

>From httpd.conf there is one other place to check: ssl.conf.  But
assuming you don't find it there, lets try a different tactic.

I just did the following things. You should repeat them exactly
(changing /home/slive as appropriate, obviously):

1. cd /home/slive; mkdir test test2

2. cat > test/httpd.conf
Listen 8901
DocumentRoot /home/slive/test
<Directory />
Options All
</Directory>
^D

3. echo hello > test2/index.txt

4. ln -s test2/index.txt test/symlink.txt

5. /full/path/to/apachectl -f /home/slive/test/httpd.conf

6. lynx http://localhost:8901/symlink.txt

And I got "hello" in my browser.

(You may need to add ErrorLog to httpd.conf and perhaps a couple
others depending on your site's setup, but keep it minimal.)

Once you have that working, you can slowly change it to bring it in
line with your site until you find where the problem is.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Proper configuration of FollowSymLinks in 2.0.54

Posted by Forrest Aldrich <fo...@forrie.com>.
There is no .htaccess file there, I changed the config per below 
"AllowOverride None" and the same problem occurs:


  Forbidden

You don't have permission to access /mp3share on this server.

Additionally, a 403 Forbidden error was encountered while trying to use 
an ErrorDocument to handle the request.



Joshua Slive wrote:

>On 9/9/05, Forrest Aldrich <fo...@forrie.com> wrote:
>  
>
>> I stripped down the httpd.conf to barebones, using these directives:
>> 
>> 
>><Directory />
>>     Options All
>>     AllowOverride All
>>    
>>
>
>Another issue is there.  Do you have .htaccess files with Options
>directives?  Does it help to turn AllowOverride to none?
>
>Joshua.
>
>---------------------------------------------------------------------
>The official User-To-User support forum of the Apache HTTP Server Project.
>See <URL:http://httpd.apache.org/userslist.html> for more info.
>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
>For additional commands, e-mail: users-help@httpd.apache.org
>
>  
>

Re: [users@httpd] Proper configuration of FollowSymLinks in 2.0.54

Posted by Joshua Slive <js...@gmail.com>.
On 9/9/05, Forrest Aldrich <fo...@forrie.com> wrote:
>  I stripped down the httpd.conf to barebones, using these directives:
>  
>  
> <Directory />
>      Options All
>      AllowOverride All

Another issue is there.  Do you have .htaccess files with Options
directives?  Does it help to turn AllowOverride to none?

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Proper configuration of FollowSymLinks in 2.0.54

Posted by Forrest Aldrich <fo...@forrie.com>.
I stripped down the httpd.conf to barebones, using these directives:

    <Directory />
        Options All
        AllowOverride All
        Order Deny,Allow
        Deny from all
    </Directory>


There is a symlink in DocumentRoot "mp3share" pointing to this:
  

    <Directory "/usr/local/shares/forrie/mp3">
            Options All
    </Directory>


I created a symbolic link owned by root, by www, and by the id 
"forrie".  None of them work, they all provide this error in the log:

    Fri Sep 09 12:30:44 2005] [error] [client 192.168.1.99] Symbolic
    link not allowed: /usr/local/www/data/mp3share


As far as I can tell, this is correct.   Again, I had no problem on my 
1.3.x server using this:

    Alias /mp3/ "/usr/local/shares/forrie/mp3"

    <Directory "/usr/local/shares/forrie/mp3">
        Options All
    </Directory>

I note someone else posted a response, indicating a similar problem with 
symlinks and apache-2.0.54.



_F



Joshua Slive wrote:

>On 9/8/05, Forrest Aldrich <fo...@forrie.com> wrote:
>  
>
>> What is the proper way to configure FollowSymLinks in 2.0.54?
>> 
>> I'm having a problem getting this to work at all - after reading the
>>manual, searching for examples, it seems fairly straightforward; however,
>>every combination I try fails with: Symbolic link not allowed.
>> 
>> I am suspicious that I've hit a bug, and actually filed a bug report, to
>>which detractors insist there is no bug.
>>
>>    
>>
>
>They didn't insist there was no bug.  They pointed out repeated
>inconsistencies and errors in your examples that made it impossible to
>recreate any problem.
> 
>  
>
>> I tried a stripped-down httpd.conf that has basically this:
>> 
>> DocumentRoot /usr/local/www/data:
>> 
>> 
>><Directory />
>>     Options All
>> </Directory>
>> 
>> The symlink is in the DocumentRoot as:
>> 
>> files -> /usr/local/shares/directory
>> 
>> I tried specifying the directory in different ways:
>> 
>> 
>><Direcotory "/files"> 
>> 
>> <Direcotry "/usr/local/www/data/files">
>>
>>    
>>
>
><Directory> sections must always use full file-system paths.
>
>The first thing to do is to look through httpd.conf (and any Include'd
>config files) for EVERY SINGLE OCCURENCE of the Options directive, and
>make sure they all include FollowSymlinks or All.  (The other posters
>comment about needing to specify FollowSymLinks explicitly is not
>correct; this option is included in All.)
>
>Once you have it working like that, you can start removing some of
>them to see where it breaks.
>
>Joshua.
>
>---------------------------------------------------------------------
>The official User-To-User support forum of the Apache HTTP Server Project.
>See <URL:http://httpd.apache.org/userslist.html> for more info.
>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
>For additional commands, e-mail: users-help@httpd.apache.org
>
>  
>

Re: [users@httpd] Proper configuration of FollowSymLinks in 2.0.54

Posted by Joshua Slive <js...@gmail.com>.
On 9/8/05, Forrest Aldrich <fo...@forrie.com> wrote:
>  What is the proper way to configure FollowSymLinks in 2.0.54?
>  
>  I'm having a problem getting this to work at all - after reading the
> manual, searching for examples, it seems fairly straightforward; however,
> every combination I try fails with: Symbolic link not allowed.
>  
>  I am suspicious that I've hit a bug, and actually filed a bug report, to
> which detractors insist there is no bug.
> 

They didn't insist there was no bug.  They pointed out repeated
inconsistencies and errors in your examples that made it impossible to
recreate any problem.
 
>  I tried a stripped-down httpd.conf that has basically this:
>  
>  DocumentRoot /usr/local/www/data:
>  
>  
> <Directory />
>      Options All
>  </Directory>
>  
>  The symlink is in the DocumentRoot as:
>  
>  files -> /usr/local/shares/directory
>  
>  I tried specifying the directory in different ways:
>  
>  
> <Direcotory "/files"> 
>  
>  <Direcotry "/usr/local/www/data/files">
>

<Directory> sections must always use full file-system paths.

The first thing to do is to look through httpd.conf (and any Include'd
config files) for EVERY SINGLE OCCURENCE of the Options directive, and
make sure they all include FollowSymlinks or All.  (The other posters
comment about needing to specify FollowSymLinks explicitly is not
correct; this option is included in All.)

Once you have it working like that, you can start removing some of
them to see where it breaks.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org