Apache Problem ( Permission )

[dctr]

#################################################
# ignore this post #
#################################################
Forbidden

You don't have permission to access / on this server.


That's what I get when I put localhost:80 / 127.0.0.1:80 into my browser. Not sure exactly why though.

I followed this,http://www.freebsdmadeeasy.com/tutor...on-freebsd.php . However I also would like to point out that I did not use apache22 but instead apache21 as I was getting errors installing apache22 ( something about where the files were going to be extracted another package was extracted there )

-dctr

[stukov]

By default Apache denies everything. Look at your <Directory> directives and make sure that your web root is "allowed". You can also post you httpd.conf if further help is needed.

[dctr]

I think I may be having some problems because I have the version from sysinstall, which is a different version than going straight from ports.

apache-2.2.6_2 Version 2.2 of Apache web server with prefork MPM.

And I also have 4 httpd.conf files, one in the /usr/local/etc/apache/ directory, one in the /usr/local/etc/apache2/ and one in the /usr/local/etc/apache22/ directory and another in the /usr/local/share/examples/apache22/ directory.

I am guessing /apache2/ is the one I should be editing, or am I wrong? How do I find out?

either way, here

http://apache.pastebin.com/m7e5ac150


-dctr

PS: Did I mention I am new to UNIX ;x

[businessgeeks]

I usually get this when I setup another VirtualHost so i can host virtual domains on a single freeBSD box. So assuming youre in the same situation, you might want to check what i did.

first based on your pastebin output, i need you to look at line 359 to 364.

<Directory />
    AllowOverride None
    Order Deny,Allow
    Deny from all
</Directory>

This the section that says that you cannot access anything outside your current virtualhost documentroot. on the default apache 2.2 install in freebsd, it is indicated as:

#
# DocumentRoot: The directory out of which you will serve your
# documents. By default, all requests are taken from this directory, but
# symbolic links and aliases may be used to point to other locations.
#
DocumentRoot "/usr/local/www/data"

No issues here, actually thats good security measure. Now all you need to do is to add a directory tag in your virtualhost entry that allows you overied the above statement

<Directory />
    AllowOverride All
    Order Allow,Deny
    Allow from All
</Directory>

here is an example virtualhost entry to give you a better picture:

<Virtualhost 111.222.333.444:80>
     ServerName domain.com
     DocumentRoot /path/to/documentroot
     <Directory /path/to/documentroot>
        AllowOverride All
        Order Allow,Deny
        Allow from All
     </Directory>
</VirtualHost>

Hope this helps, let me know if you got it running! cheers!

[stukov]

I have a port of Apache 2.2 installed and my httpd.conf resides in /usr/local/etc/apache22. I guess it is that one.

What are the lines related to this problem in you error log file?

[dctr]

[Tue May 20 18:39:23 2008] [notice] Apache/2.2.6 (FreeBSD) mod_ssl/2.2.6 OpenSSL/0.9.8e DAV/2 configured -- resuming normal operations
[Tue May 20 18:40:23 2008] [error] [client 127.0.0.1] client denied by server configuration: /usr/local/www/apache22/

Those are the newset.

err.

[Wed May 21 03:30:52 2008] [notice] Apache/2.2.6 (FreeBSD) mod_ssl/2.2.6 OpenSSL/0.9.8e DAV/2 PHP/5.2.6 with Suhosin-Patch configured -- resuming normal operations
[Wed May 21 03:30:53 2008] [error] [client 127.0.0.1] client denied by server configuration: /usr/local/www/apache22/
[Wed May 21 03:30:54 2008] [error] [client 127.0.0.1] client denied by server configuration: /usr/local/www/apache22/
[Wed May 21 03:31:02 2008] [error] [client 127.0.0.1] client denied by server configuration: /usr/local/www/apache22/data
[Wed May 21 04:05:36 2008] [error] [client 127.0.0.1] client denied by server configuration: /usr/local/www/apache22/data

those are the newest lines.

[stukov]

@businessgeeks:

Yeah but:

# DocumentRoot "/usr/local/www/data"
<Directory "/usr/local/www/data">
    Options Indexes FollowSymLinks
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

@dctr:
Just to make sure, you did restart the Apache process after editing the httpd.conf file?

[dctr]

Originally Posted by stukov

@businessgeeks:

Yeah but:

# DocumentRoot "/usr/local/www/data"
<Directory "/usr/local/www/data">
    Options Indexes FollowSymLinks
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

@dctr:
Just to make sure, you did restart the Apache process after editing the httpd.conf file?

Yup, I did.

I am very confused from the post above.

<Directory />
    AllowOverride None
    Order Deny,Allow
    Deny from all
</Directory>

#
# Note that from this point forward you must specifically allow
# particular features to be enabled - so if something's not working as
# you might expect, make sure that you have specifically enabled it
# below.
#

#
# This should be changed to whatever you set DocumentRoot to.
#
<Directory "/usr/local/www/data">

Do you want me to change that... to say..

##########
#comment all this out? since it will be below...
#<Directory />
#    AllowOverride None
#    Order Deny,Allow
#    Deny from all
#</Directory>

#
# Note that from this point forward you must specifically allow
# particular features to be enabled - so if something's not working as
# you might expect, make sure that you have specifically enabled it
# below.
#

#
# This should be changed to whatever you set DocumentRoot to.
#

<Virtualhost 111.222.333.444:80>
     ServerName domain.com
     DocumentRoot /path/to/documentroot
     <Directory /path/to/documentroot>
        AllowOverride All
        Order Allow,Deny
        Allow from All
     </Directory>
</VirtualHost>

It's so late (4:30am) and I am trying to do my best, bare with me.

[AlexDudko]

There's a mistake in your httpd.conf file in DocumentRoot.
Look up once more. If you really have <Directory "/usr/local/www/data">, then you wouldn't have this line:
[Wed May 21 03:31:02 2008] [error] [client 127.0.0.1] client denied by server configuration: /usr/local/www/apache22/data

You have ...apache22... directory, which could not be there.