You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Kevin O'Gorman <ko...@gmail.com> on 2009/02/16 17:00:02 UTC
[users@httpd] Error log entries about CGI script
Running apache 2.2.10 on gentoo linux, with a python CGI script, I'm
getting error-log entries although the script runs just fine.
The entries look like this
[Mon Feb 16 07:53:53 2009] [error] [client 74.6.22.153] client denied
by server configuration: /usr/htdocs/10
The corresponding access log entries are like this:
66.249.67.149 - - [16/Feb/2009:07:55:53 -0800] "GET
/hex-bin/board/10/da:/Bc/H7 HTTP/1.1" 200 12153
which as you can see, succeeded. The only thing special is that
"hex-bin" has been redirected with ScriptAlias
to another place, where the script is.
Maybe this is normal, but I do think it odd. Am I doing something wrong?
--
Kevin O'Gorman, PhD
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Error log entries about CGI script
Posted by Kevin O'Gorman <ko...@gmail.com>.
On Mon, Feb 16, 2009 at 1:53 PM, Kevin O'Gorman <ko...@gmail.com> wrote:
> On Mon, Feb 16, 2009 at 8:09 AM, Karel Kubat <ka...@e-tunity.com> wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Kevin,
>>
>> On Feb 16, 2009, at 5:00 PM, Kevin O'Gorman wrote:
>>
>>> The entries look like this
>>> [Mon Feb 16 07:53:53 2009] [error] [client 74.6.22.153] client denied
>>> by server configuration: /usr/htdocs/10
>>>
>>> The corresponding access log entries are like this:
>>> 66.249.67.149 - - [16/Feb/2009:07:55:53 -0800] "GET
>>> /hex-bin/board/10/da:/Bc/H7 HTTP/1.1" 200 12153
>>> which as you can see, succeeded. The only thing special is that
>>> "hex-bin" has been redirected with ScriptAlias
>>> to another place, where the script is.
>>>
>>> Maybe this is normal, but I do think it odd. Am I doing something wrong?
>>
>> From your previous mail I think that the CGI name /hex-bin/ was the absolute
>> directory /hex/bin/. I therefore don't understand who is accessing
>> /usr/htdocs/10 and why... Is that maybe the docroot of the server? What
>> happens if you direct the browser to / ?
>>
>
> "You don't have permission to access / on this server."
>
> Try it at http://hex.kosmanor.com/
> or http://hex.kosmanor.com/hex-bin/board
>
And yes, /usr/htdocs/ is the docroot. Permissions are 755. Do I need
to have anything
about it in the config files?
--
Kevin O'Gorman, PhD
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Error log entries about CGI script
Posted by Kevin O'Gorman <ko...@gmail.com>.
On Tue, Feb 17, 2009 at 12:27 AM, Karel Kubat <ka...@e-tunity.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Kevin,
>
> On Feb 16, 2009, at 10:53 PM, Kevin O'Gorman wrote:
>
>>>> The entries look like this
>>>> [Mon Feb 16 07:53:53 2009] [error] [client 74.6.22.153] client denied
>>>> by server configuration: /usr/htdocs/10
>>>>
>>>> The corresponding access log entries are like this:
>>>> 66.249.67.149 - - [16/Feb/2009:07:55:53 -0800] "GET
>>>> /hex-bin/board/10/da:/Bc/H7 HTTP/1.1" 200 12153
>>>> which as you can see, succeeded. The only thing special is that
>>>> "hex-bin" has been redirected with ScriptAlias
>>>> to another place, where the script is.
>>>>
>>>> Maybe this is normal, but I do think it odd. Am I doing something
>>>> wrong?
>>>
>>> From your previous mail I think that the CGI name /hex-bin/ was the
>>> absolute
>>> directory /hex/bin/. I therefore don't understand who is accessing
>>> /usr/htdocs/10 and why... Is that maybe the docroot of the server? What
>>> happens if you direct the browser to / ?
>>>
>>
>> "You don't have permission to access / on this server."
>>
>> Try it at http://hex.kosmanor.com/
>> or http://hex.kosmanor.com/hex-bin/board
>
> In that case I'd start by adding:
> <Location />
> Order allow,deny
> Allow from all
> </Location>
That did it. Thanks....
++ kevin
>
> Alternatively use the <Directory> directive and see if that helps.
>
>
--
Kevin O'Gorman, PhD
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Error log entries about CGI script
Posted by Karel Kubat <ka...@e-tunity.com>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Kevin,
On Feb 16, 2009, at 10:53 PM, Kevin O'Gorman wrote:
>>> The entries look like this
>>> [Mon Feb 16 07:53:53 2009] [error] [client 74.6.22.153] client
>>> denied
>>> by server configuration: /usr/htdocs/10
>>>
>>> The corresponding access log entries are like this:
>>> 66.249.67.149 - - [16/Feb/2009:07:55:53 -0800] "GET
>>> /hex-bin/board/10/da:/Bc/H7 HTTP/1.1" 200 12153
>>> which as you can see, succeeded. The only thing special is that
>>> "hex-bin" has been redirected with ScriptAlias
>>> to another place, where the script is.
>>>
>>> Maybe this is normal, but I do think it odd. Am I doing something
>>> wrong?
>>
>> From your previous mail I think that the CGI name /hex-bin/ was the
>> absolute
>> directory /hex/bin/. I therefore don't understand who is accessing
>> /usr/htdocs/10 and why... Is that maybe the docroot of the server?
>> What
>> happens if you direct the browser to / ?
>>
>
> "You don't have permission to access / on this server."
>
> Try it at http://hex.kosmanor.com/
> or http://hex.kosmanor.com/hex-bin/board
In that case I'd start by adding:
<Location />
Order allow,deny
Allow from all
</Location>
Alternatively use the <Directory> directive and see if that helps.
- --
Best regards / met vriendelijke groet, Karel Kubat
Mob +31 6 2956 4861
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
iEYEARECAAYFAkmadN4ACgkQ23FrzRzybNXTIQCgj+YjAncIaf2rB8mfbsI2Iae2
lf4AoJ7jWgj4xqhYDc4g8fH8B6f9bRFv
=8EWC
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Error log entries about CGI script
Posted by Kevin O'Gorman <ko...@gmail.com>.
On Mon, Feb 16, 2009 at 2:37 PM, Nick Kew <ni...@webthing.com> wrote:
> On Mon, 16 Feb 2009 13:53:13 -0800
> "Kevin O'Gorman" <ko...@gmail.com> wrote:
>
>> On Mon, Feb 16, 2009 at 8:09 AM, Karel Kubat <ka...@e-tunity.com>
>> wrote:
>> > -----BEGIN PGP SIGNED MESSAGE-----
>> > Hash: SHA1
>> >
>> > Kevin,
>> >
>> > On Feb 16, 2009, at 5:00 PM, Kevin O'Gorman wrote:
>> >
>> >> The entries look like this
>> >> [Mon Feb 16 07:53:53 2009] [error] [client 74.6.22.153] client
>> >> denied by server configuration: /usr/htdocs/10
>> >>
>> >> The corresponding access log entries are like this:
>> >> 66.249.67.149 - - [16/Feb/2009:07:55:53 -0800] "GET
>> >> /hex-bin/board/10/da:/Bc/H7 HTTP/1.1" 200 12153
>
> That doesn't look like the same request.
It is, though. The differences are part of what's confusing me.
>
>> Try it at http://hex.kosmanor.com/
>> or http://hex.kosmanor.com/hex-bin/board
>
> FWIW, that returns a "Pragma: no-cache", which tends to be a
> warning sign that the CGI script is based on cargo-cult cookery.
Why? I wrote that in because this is dynamic HTML that depends on a
volatile database.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Error log entries about CGI script
Posted by Nick Kew <ni...@webthing.com>.
On Mon, 16 Feb 2009 13:53:13 -0800
"Kevin O'Gorman" <ko...@gmail.com> wrote:
> On Mon, Feb 16, 2009 at 8:09 AM, Karel Kubat <ka...@e-tunity.com>
> wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Kevin,
> >
> > On Feb 16, 2009, at 5:00 PM, Kevin O'Gorman wrote:
> >
> >> The entries look like this
> >> [Mon Feb 16 07:53:53 2009] [error] [client 74.6.22.153] client
> >> denied by server configuration: /usr/htdocs/10
> >>
> >> The corresponding access log entries are like this:
> >> 66.249.67.149 - - [16/Feb/2009:07:55:53 -0800] "GET
> >> /hex-bin/board/10/da:/Bc/H7 HTTP/1.1" 200 12153
That doesn't look like the same request.
> Try it at http://hex.kosmanor.com/
> or http://hex.kosmanor.com/hex-bin/board
FWIW, that returns a "Pragma: no-cache", which tends to be a
warning sign that the CGI script is based on cargo-cult cookery.
--
Nick Kew
Application Development with Apache - the Apache Modules Book
http://www.apachetutor.org/
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Error log entries about CGI script
Posted by Kevin O'Gorman <ko...@gmail.com>.
On Mon, Feb 16, 2009 at 8:09 AM, Karel Kubat <ka...@e-tunity.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Kevin,
>
> On Feb 16, 2009, at 5:00 PM, Kevin O'Gorman wrote:
>
>> The entries look like this
>> [Mon Feb 16 07:53:53 2009] [error] [client 74.6.22.153] client denied
>> by server configuration: /usr/htdocs/10
>>
>> The corresponding access log entries are like this:
>> 66.249.67.149 - - [16/Feb/2009:07:55:53 -0800] "GET
>> /hex-bin/board/10/da:/Bc/H7 HTTP/1.1" 200 12153
>> which as you can see, succeeded. The only thing special is that
>> "hex-bin" has been redirected with ScriptAlias
>> to another place, where the script is.
>>
>> Maybe this is normal, but I do think it odd. Am I doing something wrong?
>
> From your previous mail I think that the CGI name /hex-bin/ was the absolute
> directory /hex/bin/. I therefore don't understand who is accessing
> /usr/htdocs/10 and why... Is that maybe the docroot of the server? What
> happens if you direct the browser to / ?
>
"You don't have permission to access / on this server."
Try it at http://hex.kosmanor.com/
or http://hex.kosmanor.com/hex-bin/board
++ kevin
--
Kevin O'Gorman, PhD
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Error log entries about CGI script
Posted by Karel Kubat <ka...@e-tunity.com>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Kevin,
On Feb 16, 2009, at 5:00 PM, Kevin O'Gorman wrote:
> The entries look like this
> [Mon Feb 16 07:53:53 2009] [error] [client 74.6.22.153] client denied
> by server configuration: /usr/htdocs/10
>
> The corresponding access log entries are like this:
> 66.249.67.149 - - [16/Feb/2009:07:55:53 -0800] "GET
> /hex-bin/board/10/da:/Bc/H7 HTTP/1.1" 200 12153
> which as you can see, succeeded. The only thing special is that
> "hex-bin" has been redirected with ScriptAlias
> to another place, where the script is.
>
> Maybe this is normal, but I do think it odd. Am I doing something
> wrong?
From your previous mail I think that the CGI name /hex-bin/ was the
absolute directory /hex/bin/. I therefore don't understand who is
accessing /usr/htdocs/10 and why... Is that maybe the docroot of the
server? What happens if you direct the browser to / ?
- --
Best regards / met vriendelijke groet, Karel Kubat
Mob +31 6 2956 4861
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
iEYEARECAAYFAkmZj7gACgkQ23FrzRzybNXdJgCgqclZQcUDY8PyBtHoUppaU6T+
xvoAoM+yDrqn+ATFZTOwa8g8BzrGDRcD
=InMf
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org