You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "Joseph A. Nagy, Jr." <jn...@joseph-a-nagy-jr.homelinux.org> on 2004/05/02 05:05:08 UTC
[users@httpd] 403 Denied
[Sat May 01 21:45:25 2004] [error] [client 24.159.22.9] client denied by
server configuration: /home/c
sage/public_html/
[Sat May 01 21:51:32 2004] [error] [client 24.159.22.9] client denied by
server configuration: /home/c
sage/public_html/
[Sat May 01 21:54:21 2004] [error] [client 24.159.22.9] client denied by
server configuration: /home/c
sage/public_html/
[Sat May 01 21:54:43 2004] [error] [client 24.159.22.9] client denied by
server configuration: /home/c
sage/public_html/index.html
[Sat May 01 21:58:31 2004] [error] [client 24.159.22.9] client denied by
server configuration: /home/c
sage/public_html/index.html
<VirtualHost *>
ServerAdmin c_sage@root.you.aint.got.it
DocumentRoot /path/to/public_html/
ServerName charles-sage.homeip.net
CustomLog /path/to/logs/charles-sage.access.log combined
ErrorLog /path/to/logs/charles-sage.error.log
<Directory />
Options All Multiviews
</Directory>
</VirtualHost>
WTF is going on?
Apache version 2.0.49 on Gentoo Linux w/ PHP 4.3.6. The site in question
doesn't use index.php though.
The file and folder permissions in question is set to 755.
The access log isn't much help.
24.159.22.9 - - [01/May/2004:21:54:43 -0500] "GET /index.html HTTP/1.1" 403
359 "-" "Mozilla/5.0 (X11;
U; Linux i686; en-US; rv:1.6) Gecko/20040425 Firefox/0.8"
24.159.22.9 - - [01/May/2004:21:58:31 -0500] "GET /index.html HTTP/1.1" 403
359 "-" "Mozilla/5.0 (X11;
U; Linux i686; en-US; rv:1.6) Gecko/20040425 Firefox/0.8"
--
Joseph A. Nagy, Jr. http://joseph-a-nagy-jr.homelinux.org
Political Activist Extraordinaire Peace, Life, Liberty
"The only fallacy is the inaction on our part to stave off the worst of
horrors, the stripping of personal freedom." -- Joseph A. Nagy, Jr. January 2004
Re: [users@httpd] 403 Denied[solved]
Posted by Leif W <wa...@usa.net>.
No problem. Glad it worked. I ran out of ideas. :-D Weird though,
about the "seemingly" inconsistent behaviour. Like I said, maybe the
config file looks consistent, but maybe there's omissions of directives
where Apache is left to some internal default decisions? I'm not at all
familiar with these finer points. There's got to be some reason, even
if it's just "the way it is". However, regarding the current problem,
I've never seen a <Directory> without an Order and at least an Allow or
Deny directive, if not both, so maybe that had something to do with it.
You could perhaps try adding it to the other sites to make sure they
don't fall prey to the same problem in the future -- preemptive
troubleshooting.
Leif
----- Original Message -----
From: "Joseph A. Nagy, Jr." <jn...@joseph-a-nagy-jr.homelinux.org>
To: <us...@httpd.apache.org>
Sent: Sunday, May 02, 2004 8:17 AM
Subject: Re: [users@httpd] 403 Denied[solved]
On Sun, May 02, 2004 at 02:20:22AM -0400, Leif W wrote the following:
> Well, look, I'm not going to argue with you, you asked for help and
I'm
> just trying to help. You said "all the folders in question", but you
> failed to list explicitly which folders YOU consider to be in
question,
> as opposed to which folders someone else might realize that APACHE
> considers to be in question, which is what ultimately matters. Even
if
> it seems basic, it's best to start at the beginning and not make
> assumptions about what you're considering, what the software
considers,
> and how other people might interpret an ambiguous description. :-)
Sorry.
>
> From the description you provided, and from what Apache is saying in
the
> logs, and to the browser, it appears to be a problem where Apache is
> refusing to let the client see something. After playing with my file
> and directory permissions on the assumption that it
wasafilepermissions
> error, I noticed that the file permission error is differnt from the
> error log entry you reported. I found out that I can get this same
> error message as you in my log file, and the same error in my browser.
> This is probably your problem. What I did was set "Order deny,allow"
> and "Deny from all". It's an extreme case, but you may have something
> related to your deny vs. allow, or ordering, which may be more subtle?
> I.e. default behaviour, as you have nothing specified in that
> <Directory> tag. Try the following example.Also note, 1) your
> DocumentRoot location must match your Directory location, 2) You
> directory location was / (root),which is probably a BAD idea (typo in
> the email?), 3) the <Directory> parameter should be double-quoted, and
> have no trailing / (which is impossible when you try to use / ). You
> probably need something like this, shown below.
>
> <Directory "/path/to/public_html">
> Options All Multiviews
> Order allow,deny
> Allow from all
> </Directory>
>
> Leif
>
That's odd because I don't have that problem elsewhere with the same
setup.
Hrm. *adjusts and tests*
<VirtualHost *>
ServerAdmin c_sage@charter.net
DocumentRoot /home/csage/public_html/
ServerName charles-sage.homeip.net
CustomLog /path/to/logs/charles-sage.access.log combined
ErrorLog /path/to/logs/charles-sage.error.log
<Directory "/home/csage/public_html">
Options All Multiviews
Order allow,deny
Allow from all
</Directory>
</VirtualHost>
<snip>
That worked oddly enough. I'm not sure why this vhost would need tha
allow,deny setup when the others don't but eh, it works. *waves dead
chicken* Thanks for the help and sorry that I was an ass.
--
Joseph A. Nagy, Jr. http://joseph-a-nagy-jr.homelinux.org
Political Activist Extraordinaire Peace, Life, Liberty
"The only fallacy is the inaction on our part to stave off the worst of
horrors, the stripping of personal freedom." -- Joseph A. Nagy, Jr.
January 2004
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] 403 Denied[solved]
Posted by "Joseph A. Nagy, Jr." <jn...@joseph-a-nagy-jr.homelinux.org>.
On Sun, May 02, 2004 at 02:20:22AM -0400, Leif W wrote the following:
> Well, look, I'm not going to argue with you, you asked for help and I'm
> just trying to help. You said "all the folders in question", but you
> failed to list explicitly which folders YOU consider to be in question,
> as opposed to which folders someone else might realize that APACHE
> considers to be in question, which is what ultimately matters. Even if
> it seems basic, it's best to start at the beginning and not make
> assumptions about what you're considering, what the software considers,
> and how other people might interpret an ambiguous description. :-)
Sorry.
>
> From the description you provided, and from what Apache is saying in the
> logs, and to the browser, it appears to be a problem where Apache is
> refusing to let the client see something. After playing with my file
> and directory permissions on the assumption that it wasafilepermissions
> error, I noticed that the file permission error is differnt from the
> error log entry you reported. I found out that I can get this same
> error message as you in my log file, and the same error in my browser.
> This is probably your problem. What I did was set "Order deny,allow"
> and "Deny from all". It's an extreme case, but you may have something
> related to your deny vs. allow, or ordering, which may be more subtle?
> I.e. default behaviour, as you have nothing specified in that
> <Directory> tag. Try the following example.Also note, 1) your
> DocumentRoot location must match your Directory location, 2) You
> directory location was / (root),which is probably a BAD idea (typo in
> the email?), 3) the <Directory> parameter should be double-quoted, and
> have no trailing / (which is impossible when you try to use / ). You
> probably need something like this, shown below.
>
> <Directory "/path/to/public_html">
> Options All Multiviews
> Order allow,deny
> Allow from all
> </Directory>
>
> Leif
>
That's odd because I don't have that problem elsewhere with the same setup.
Hrm. *adjusts and tests*
<VirtualHost *>
ServerAdmin c_sage@charter.net
DocumentRoot /home/csage/public_html/
ServerName charles-sage.homeip.net
CustomLog /path/to/logs/charles-sage.access.log combined
ErrorLog /path/to/logs/charles-sage.error.log
<Directory "/home/csage/public_html">
Options All Multiviews
Order allow,deny
Allow from all
</Directory>
</VirtualHost>
<snip>
That worked oddly enough. I'm not sure why this vhost would need tha
allow,deny setup when the others don't but eh, it works. *waves dead
chicken* Thanks for the help and sorry that I was an ass.
--
Joseph A. Nagy, Jr. http://joseph-a-nagy-jr.homelinux.org
Political Activist Extraordinaire Peace, Life, Liberty
"The only fallacy is the inaction on our part to stave off the worst of
horrors, the stripping of personal freedom." -- Joseph A. Nagy, Jr. January 2004
Re: [users@httpd] 403 Denied
Posted by Leif W <wa...@usa.net>.
Well, look, I'm not going to argue with you, you asked for help and I'm
just trying to help. You said "all the folders in question", but you
failed to list explicitly which folders YOU consider to be in question,
as opposed to which folders someone else might realize that APACHE
considers to be in question, which is what ultimately matters. Even if
it seems basic, it's best to start at the beginning and not make
assumptions about what you're considering, what the software considers,
and how other people might interpret an ambiguous description. :-)
>From the description you provided, and from what Apache is saying in the
logs, and to the browser, it appears to be a problem where Apache is
refusing to let the client see something. After playing with my file
and directory permissions on the assumption that it wasafilepermissions
error, I noticed that the file permission error is differnt from the
error log entry you reported. I found out that I can get this same
error message as you in my log file, and the same error in my browser.
This is probably your problem. What I did was set "Order deny,allow"
and "Deny from all". It's an extreme case, but you may have something
related to your deny vs. allow, or ordering, which may be more subtle?
I.e. default behaviour, as you have nothing specified in that
<Directory> tag. Try the following example.Also note, 1) your
DocumentRoot location must match your Directory location, 2) You
directory location was / (root),which is probably a BAD idea (typo in
the email?), 3) the <Directory> parameter should be double-quoted, and
have no trailing / (which is impossible when you try to use / ). You
probably need something like this, shown below.
<Directory "/path/to/public_html">
Options All Multiviews
Order allow,deny
Allow from all
</Directory>
Leif
----- Original Message -----
From: "Joseph A. Nagy, Jr." <jn...@joseph-a-nagy-jr.homelinux.org>
To: <us...@httpd.apache.org>
Sent: Sunday, May 02, 2004 1:09 AM
Subject: Re: [users@httpd] 403 Denied
On Sat, May 01, 2004 at 11:24:32PM -0400, Leif W wrote the following:
> When I point a browser (Mozilla Firefox 0.8) at
> http://charles-sage.homeip.net/ I get an 403 error, "Forbidden: You
> don't have permission to access / on this server."
>
> Quick things to check: Is / (root) 755? Is /home 755? Is /home/csage
> 755? Is /home/csage/public_html 755?
>
> ls -ld /
> ls -ld /home
> ls -ld /home/csage
> ld -ld /home/csage/public_html
I told you, all the folders in question are chmod'd 755.
>
> Is there any AllowOverride AuthConfig in the vhost config for that
dir?
> If yes, is there an .htaccess in the public_html directory with any
> restrctive settings? Any AllowOverride Limit? Any Allow, Deny,
Order?
No and no and no. The config info I sent with the original email is
complete.
>
> I've never put a virtual host inside the user space dirs. Is there
any
> UserDir defined? Is there any known conflict when using UserDir and
> also a NBVH (i.e. which has precedence: when, how and why)? To rule
> this out, have you tried putting the site in another location, outside
> /home entirely? Have you tried putting it in another location, inside
> /home/csage, (i.e. /home/csage/vhost/public_html,
/home/sage/vhost/logs,
> etc?).
>
I have userdirs turned off and am only turning them on for specific
usrdirs.
> Leif
>
> ----- Original Message -----
> From: "Joseph A. Nagy, Jr." <jn...@joseph-a-nagy-jr.homelinux.org>
> To: <us...@httpd.apache.org>
> Sent: Saturday, May 01, 2004 11:05 PM
> Subject: [users@httpd] 403 Denied
>
> [Sat May 01 21:45:25 2004] [error] [client 24.159.22.9] client denied
by
> server configuration: /home/c
> sage/public_html/
> [Sat May 01 21:51:32 2004] [error] [client 24.159.22.9] client denied
by
> server configuration: /home/c
> sage/public_html/
> [Sat May 01 21:54:21 2004] [error] [client 24.159.22.9] client denied
by
> server configuration: /home/c
> sage/public_html/
> [Sat May 01 21:54:43 2004] [error] [client 24.159.22.9] client denied
by
> server configuration: /home/c
> sage/public_html/index.html
> [Sat May 01 21:58:31 2004] [error] [client 24.159.22.9] client denied
by
> server configuration: /home/c
> sage/public_html/index.html
>
> <VirtualHost *>
> ServerAdmin c_sage@root.you.aint.got.it
> DocumentRoot /path/to/public_html/
> ServerName charles-sage.homeip.net
> CustomLog /path/to/logs/charles-sage.access.log combined
> ErrorLog /path/to/logs/charles-sage.error.log
> <Directory />
> Options All Multiviews
> </Directory>
> </VirtualHost>
>
> WTF is going on?
>
> Apache version 2.0.49 on Gentoo Linux w/ PHP 4.3.6. The site in
question
> doesn't use index.php though.
>
> The file and folder permissions in question is set to 755.
>
> The access log isn't much help.
>
> 24.159.22.9 - - [01/May/2004:21:54:43 -0500] "GET /index.html
HTTP/1.1"
> 403
> 359 "-" "Mozilla/5.0 (X11;
> U; Linux i686; en-US; rv:1.6) Gecko/20040425 Firefox/0.8"
> 24.159.22.9 - - [01/May/2004:21:58:31 -0500] "GET /index.html
HTTP/1.1"
> 403
> 359 "-" "Mozilla/5.0 (X11;
> U; Linux i686; en-US; rv:1.6) Gecko/20040425 Firefox/0.8"
> --
> Joseph A. Nagy, Jr. http://joseph-a-nagy-jr.homelinux.org
> Political Activist Extraordinaire Peace, Life, Liberty
> "The only fallacy is the inaction on our part to stave off the worst
of
> horrors, the stripping of personal freedom." -- Joseph A. Nagy, Jr.
> January 2004
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server
Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
--
Joseph A. Nagy, Jr. http://joseph-a-nagy-jr.homelinux.org
Political Activist Extraordinaire Peace, Life, Liberty
"The only fallacy is the inaction on our part to stave off the worst of
horrors, the stripping of personal freedom." -- Joseph A. Nagy, Jr.
January 2004
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] 403 Denied
Posted by "Joseph A. Nagy, Jr." <jn...@joseph-a-nagy-jr.homelinux.org>.
On Sat, May 01, 2004 at 11:24:32PM -0400, Leif W wrote the following:
> When I point a browser (Mozilla Firefox 0.8) at
> http://charles-sage.homeip.net/ I get an 403 error, "Forbidden: You
> don't have permission to access / on this server."
>
> Quick things to check: Is / (root) 755? Is /home 755? Is /home/csage
> 755? Is /home/csage/public_html 755?
>
> ls -ld /
> ls -ld /home
> ls -ld /home/csage
> ld -ld /home/csage/public_html
I told you, all the folders in question are chmod'd 755.
>
> Is there any AllowOverride AuthConfig in the vhost config for that dir?
> If yes, is there an .htaccess in the public_html directory with any
> restrctive settings? Any AllowOverride Limit? Any Allow, Deny, Order?
No and no and no. The config info I sent with the original email is
complete.
>
> I've never put a virtual host inside the user space dirs. Is there any
> UserDir defined? Is there any known conflict when using UserDir and
> also a NBVH (i.e. which has precedence: when, how and why)? To rule
> this out, have you tried putting the site in another location, outside
> /home entirely? Have you tried putting it in another location, inside
> /home/csage, (i.e. /home/csage/vhost/public_html, /home/sage/vhost/logs,
> etc?).
>
I have userdirs turned off and am only turning them on for specific usrdirs.
> Leif
>
> ----- Original Message -----
> From: "Joseph A. Nagy, Jr." <jn...@joseph-a-nagy-jr.homelinux.org>
> To: <us...@httpd.apache.org>
> Sent: Saturday, May 01, 2004 11:05 PM
> Subject: [users@httpd] 403 Denied
>
> [Sat May 01 21:45:25 2004] [error] [client 24.159.22.9] client denied by
> server configuration: /home/c
> sage/public_html/
> [Sat May 01 21:51:32 2004] [error] [client 24.159.22.9] client denied by
> server configuration: /home/c
> sage/public_html/
> [Sat May 01 21:54:21 2004] [error] [client 24.159.22.9] client denied by
> server configuration: /home/c
> sage/public_html/
> [Sat May 01 21:54:43 2004] [error] [client 24.159.22.9] client denied by
> server configuration: /home/c
> sage/public_html/index.html
> [Sat May 01 21:58:31 2004] [error] [client 24.159.22.9] client denied by
> server configuration: /home/c
> sage/public_html/index.html
>
> <VirtualHost *>
> ServerAdmin c_sage@root.you.aint.got.it
> DocumentRoot /path/to/public_html/
> ServerName charles-sage.homeip.net
> CustomLog /path/to/logs/charles-sage.access.log combined
> ErrorLog /path/to/logs/charles-sage.error.log
> <Directory />
> Options All Multiviews
> </Directory>
> </VirtualHost>
>
> WTF is going on?
>
> Apache version 2.0.49 on Gentoo Linux w/ PHP 4.3.6. The site in question
> doesn't use index.php though.
>
> The file and folder permissions in question is set to 755.
>
> The access log isn't much help.
>
> 24.159.22.9 - - [01/May/2004:21:54:43 -0500] "GET /index.html HTTP/1.1"
> 403
> 359 "-" "Mozilla/5.0 (X11;
> U; Linux i686; en-US; rv:1.6) Gecko/20040425 Firefox/0.8"
> 24.159.22.9 - - [01/May/2004:21:58:31 -0500] "GET /index.html HTTP/1.1"
> 403
> 359 "-" "Mozilla/5.0 (X11;
> U; Linux i686; en-US; rv:1.6) Gecko/20040425 Firefox/0.8"
> --
> Joseph A. Nagy, Jr. http://joseph-a-nagy-jr.homelinux.org
> Political Activist Extraordinaire Peace, Life, Liberty
> "The only fallacy is the inaction on our part to stave off the worst of
> horrors, the stripping of personal freedom." -- Joseph A. Nagy, Jr.
> January 2004
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
--
Joseph A. Nagy, Jr. http://joseph-a-nagy-jr.homelinux.org
Political Activist Extraordinaire Peace, Life, Liberty
"The only fallacy is the inaction on our part to stave off the worst of
horrors, the stripping of personal freedom." -- Joseph A. Nagy, Jr. January 2004
Re: [users@httpd] 403 Denied
Posted by Leif W <wa...@usa.net>.
When I point a browser (Mozilla Firefox 0.8) at
http://charles-sage.homeip.net/ I get an 403 error, "Forbidden: You
don't have permission to access / on this server."
Quick things to check: Is / (root) 755? Is /home 755? Is /home/csage
755? Is /home/csage/public_html 755?
ls -ld /
ls -ld /home
ls -ld /home/csage
ld -ld /home/csage/public_html
Is there any AllowOverride AuthConfig in the vhost config for that dir?
If yes, is there an .htaccess in the public_html directory with any
restrctive settings? Any AllowOverride Limit? Any Allow, Deny, Order?
I've never put a virtual host inside the user space dirs. Is there any
UserDir defined? Is there any known conflict when using UserDir and
also a NBVH (i.e. which has precedence: when, how and why)? To rule
this out, have you tried putting the site in another location, outside
/home entirely? Have you tried putting it in another location, inside
/home/csage, (i.e. /home/csage/vhost/public_html, /home/sage/vhost/logs,
etc?).
Leif
----- Original Message -----
From: "Joseph A. Nagy, Jr." <jn...@joseph-a-nagy-jr.homelinux.org>
To: <us...@httpd.apache.org>
Sent: Saturday, May 01, 2004 11:05 PM
Subject: [users@httpd] 403 Denied
[Sat May 01 21:45:25 2004] [error] [client 24.159.22.9] client denied by
server configuration: /home/c
sage/public_html/
[Sat May 01 21:51:32 2004] [error] [client 24.159.22.9] client denied by
server configuration: /home/c
sage/public_html/
[Sat May 01 21:54:21 2004] [error] [client 24.159.22.9] client denied by
server configuration: /home/c
sage/public_html/
[Sat May 01 21:54:43 2004] [error] [client 24.159.22.9] client denied by
server configuration: /home/c
sage/public_html/index.html
[Sat May 01 21:58:31 2004] [error] [client 24.159.22.9] client denied by
server configuration: /home/c
sage/public_html/index.html
<VirtualHost *>
ServerAdmin c_sage@root.you.aint.got.it
DocumentRoot /path/to/public_html/
ServerName charles-sage.homeip.net
CustomLog /path/to/logs/charles-sage.access.log combined
ErrorLog /path/to/logs/charles-sage.error.log
<Directory />
Options All Multiviews
</Directory>
</VirtualHost>
WTF is going on?
Apache version 2.0.49 on Gentoo Linux w/ PHP 4.3.6. The site in question
doesn't use index.php though.
The file and folder permissions in question is set to 755.
The access log isn't much help.
24.159.22.9 - - [01/May/2004:21:54:43 -0500] "GET /index.html HTTP/1.1"
403
359 "-" "Mozilla/5.0 (X11;
U; Linux i686; en-US; rv:1.6) Gecko/20040425 Firefox/0.8"
24.159.22.9 - - [01/May/2004:21:58:31 -0500] "GET /index.html HTTP/1.1"
403
359 "-" "Mozilla/5.0 (X11;
U; Linux i686; en-US; rv:1.6) Gecko/20040425 Firefox/0.8"
--
Joseph A. Nagy, Jr. http://joseph-a-nagy-jr.homelinux.org
Political Activist Extraordinaire Peace, Life, Liberty
"The only fallacy is the inaction on our part to stave off the worst of
horrors, the stripping of personal freedom." -- Joseph A. Nagy, Jr.
January 2004
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org