You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "Dave [Hawk-Systems]" <da...@hawk-systems.com> on 2003/06/03 00:58:10 UTC

[users@httpd] Symbolic link not allowed

apache 1.3.19 installed on two servers.
all logs go into user's root directory /home/JoeSchmoe/.logs
we run web stats analyzer against their logs and put into
/home/JoeSchmoe/.stats/JoeDomain.com
their DocumentRoot is /home/JoeSchmoe/JoeDomain

we wish to give them access to view the web stats online

on one server we simply symlink /home/JoeSchmoe/JoeDomain/webstats to
/home/JoeSchmoe/.stats/JoeDomain.com and it works like a charm

on the other server we get Forbidden error, and checking the log files "Symbolic
link not allowed"

what I don't understand is all this logging, stats, and linking is performed by
a priveledged user, with all the group ownerships set to JoeSchmoe's private
group on both servers.  Changing the ownership of the files and links to nobody
(web user) doesn't help matters.  At a loss only because the servers are
virtually identical other than that and a 8 month build time seperation.

Any insight or suggestions would be apprecaited.

Dave



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


RE: [users@httpd] Symbolic link not allowed

Posted by "Dave [Hawk-Systems]" <da...@hawk-systems.com>.
>> on one server we simply symlink /home/JoeSchmoe/JoeDomain/webstats to
>> /home/JoeSchmoe/.stats/JoeDomain.com and it works like a charm
>>
>> on the other server we get Forbidden error, and checking the log files
>> "Symbolic link not allowed"
>
>How about the options SymLinksIfOwnerMatch and FollowSymLinks?
>
>e.g.
>  Options -SymLinksIfOwnerMatch +FollowSymLinks

have that set at the server conf level, but inadvertantly overrode it in the
virtual host container with an "Options ExecCGI" rather than using "Options
+ExecCGI"

Couldn't see the forest for the trees...

thanks.

Dave



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Symbolic link not allowed

Posted by Kirk Jackson <ki...@mcs.vuw.ac.nz>.
On Mon, 2 Jun 2003 18:58:10 -0400 "Dave [Hawk-Systems]"
<da...@hawk-systems.com> wrote:
> on one server we simply symlink /home/JoeSchmoe/JoeDomain/webstats to
> /home/JoeSchmoe/.stats/JoeDomain.com and it works like a charm
> 
> on the other server we get Forbidden error, and checking the log files
> "Symbolic link not allowed"

How about the options SymLinksIfOwnerMatch and FollowSymLinks?

e.g.
  Options -SymLinksIfOwnerMatch +FollowSymLinks

Kirk

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org