You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Jon Thor Williams <jw...@thinkstream.com> on 2004/08/26 20:49:28 UTC

[users@httpd] Need help troubleshooting FOLLOWSYMLINKS problem

Hello,

I have exhausted all the ideas I have for determining what is dis-allowing my
web server clients to follow symbolic links in the file system.

I have "AllowOverride None" set in all my Directory contexts....  and so i am
not using the .htaccess methods as far as i know.  i am using the default httpd
configuration that comes with Fedora Core 2/Redhat .  i do not have public_html
directories enabled either.

when i create any arbitrary symbolic link owned by a user called "jwilliams"
that points to a directory owned by the same user in the ~jwilliams home
directory the web server does not show me the symbolic links.  real directories
do show up but the symbolic links are invisible.

as far as i know i have FollowSymLinks enabled.  its possible that i am wrong
but unlikely.

all of the documentation i could possibly find on the internet does not tell you
how to troubleshoot this if its not working as expected.  i get the impression
that httpd , by default, enables the following of symbolic links.  what could i
have possibly done that nuked this?

Can anyone help?


-Jon
jwilliams@thinkstream.com


**********************************
Jon Thor Williams
Quality Assurance and Integration
Thinkstream
503.968.1656 x232
My weblog: http://djangology.net
**********************************


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


[users@httpd] RE: [work] Re: [users@httpd] Need help troubleshooting FOLLOWSYMLINKS problem

Posted by Jon Thor Williams <jw...@thinkstream.com>.
Thanks Joshua,

that was my problem.  i got it working with this config:

1.  the target directory needed to be owned by apache  ( possibly i can get it
working also if i add apache to the "users" group and make the target directory
owned by one of the normal users who are in that group??? )
2.  plus the symbolic link itself was owned by root, which seems to be ok

Sorry to bug you guys...

Thanks,
jon




> -----Original Message-----
> From: Joshua Slive [mailto:jslive@gmail.com]
> Sent: Friday, August 27, 2004 9:56 AM
> To: users@httpd.apache.org
> Subject: [work] Re: [users@httpd] Need help troubleshooting
> FOLLOWSYMLINKS problem
>
>
> On Fri, 27 Aug 2004 09:52:49 -0700, Jon Thor Williams
> <jw...@thinkstream.com> wrote:
> > Thanks Joshua,
> >
> > Well, my <Directory /> directive has something like this if thats
> what you mean:
> >
>
> No, I said "unix permissions" meaning filesystem permissions, not
> necessarily on the symlink itself, but on the target location and its
> parent directories.
>
> You also have not done what I suggested:
>
> > > If so, try accessing the relevant link directly without going through
> > > the directory listing.  Then look in the error log to see what message
> > > you get.
>
> Joshua.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Need help troubleshooting FOLLOWSYMLINKS problem

Posted by Joshua Slive <js...@gmail.com>.
On Fri, 27 Aug 2004 09:52:49 -0700, Jon Thor Williams
<jw...@thinkstream.com> wrote:
> Thanks Joshua,
> 
> Well, my <Directory /> directive has something like this if thats what you mean:
>

No, I said "unix permissions" meaning filesystem permissions, not
necessarily on the symlink itself, but on the target location and its
parent directories.

You also have not done what I suggested:

> > If so, try accessing the relevant link directly without going through
> > the directory listing.  Then look in the error log to see what message
> > you get. 

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Need help troubleshooting FOLLOWSYMLINKS problem

Posted by Jon Thor Williams <jw...@thinkstream.com>.
Thanks Joshua,

Well, my <Directory /> directive has something like this if thats what you mean:

<Directory /var/www/html>
   Options Indexes FollowSymLinks
</Directory>

This implies to me that symlinks should work.  All the files in that docs
directory are owned by the "apache" user AND group.  I created a symlink in
there and regular file, both owned by either a normal member of the "users"
group or by the "apache" user and in both cases the normal file displays fine
and the symlink never appears.  Ive tried make the symlink "777".

If you have a symlink working can you tell me what your permissions are on the
symlink, on the target dir, and also what your <Directory /> directives are set
to?

Thanks,

-Jon


> -----Original Message-----
> From: Joshua Slive [mailto:jslive@gmail.com]
> Sent: Friday, August 27, 2004 7:19 AM
> To: users@httpd.apache.org
> Subject: [work] Re: [users@httpd] Need help troubleshooting
> FOLLOWSYMLINKS problem
>
>
> On Thu, 26 Aug 2004 11:49:28 -0700, Jon Thor Williams
> <jw...@thinkstream.com> wrote:
> > Hello,
> >
> > I have exhausted all the ideas I have for determining what is
> dis-allowing my
> > web server clients to follow symbolic links in the file system.
> >
> > I have "AllowOverride None" set in all my Directory contexts....
> and so i am
> > not using the .htaccess methods as far as i know.  i am using the
> default httpd
> > configuration that comes with Fedora Core 2/Redhat .  i do not have
> public_html
> > directories enabled either.
> >
> > when i create any arbitrary symbolic link owned by a user called "jwilliams"
> > that points to a directory owned by the same user in the ~jwilliams home
> > directory the web server does not show me the symbolic links.  real
> directories
> > do show up but the symbolic links are invisible.
>
> "Does not show the symbolic links" seems to suggest that you are
> looking at a mod_autoindex created directory listing.  Is that
> correct?
>
> If so, try accessing the relevant link directly without going through
> the directory listing.  Then look in the error log to see what message
> you get.  A strong possibility is that your unix permissions are not
> set correctly to give the web server access.
>
> Joshua.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Need help troubleshooting FOLLOWSYMLINKS problem

Posted by Joshua Slive <js...@gmail.com>.
On Thu, 26 Aug 2004 11:49:28 -0700, Jon Thor Williams
<jw...@thinkstream.com> wrote:
> Hello,
> 
> I have exhausted all the ideas I have for determining what is dis-allowing my
> web server clients to follow symbolic links in the file system.
> 
> I have "AllowOverride None" set in all my Directory contexts....  and so i am
> not using the .htaccess methods as far as i know.  i am using the default httpd
> configuration that comes with Fedora Core 2/Redhat .  i do not have public_html
> directories enabled either.
> 
> when i create any arbitrary symbolic link owned by a user called "jwilliams"
> that points to a directory owned by the same user in the ~jwilliams home
> directory the web server does not show me the symbolic links.  real directories
> do show up but the symbolic links are invisible.

"Does not show the symbolic links" seems to suggest that you are
looking at a mod_autoindex created directory listing.  Is that
correct?

If so, try accessing the relevant link directly without going through
the directory listing.  Then look in the error log to see what message
you get.  A strong possibility is that your unix permissions are not
set correctly to give the web server access.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org