RE: {bb} 403 Forbidden error

["Shannon M. Anderson" <sanderson@ecalton.com>]

Runners of Fedora Core 3, Here's the skinny.. A the bottom half of this
page shows we had a server not allowing us to sever pages via Apache out
of users home dirs. Of course Big Brother' s webs resided in the home
directory of the BB user used to run BB.  So when we symlinked the
/hom/bb/bb19e/www dir to /var/www/html root directory we received a 403
Forbidden error. After hours of resetting permissions and triple
checking apache configs we were no closer to fixing problems.

Come to find out the flunky in our worker pool that installed the
server, during the install left as default the SELinux [Active] which
had adverse effects on apache and symlinks.

If you not sure how to use SELinux or are in a segment that does not
warrant SELinux. Turn it off and all will work as indicated in INSTALL
files.

I hope this tidbit of info helps someone out there, May you not spend 6
hours beating your head against the desk. Also you be surprised what you
come up with after a good nights sleep.



##############
 
Shannon Anderson
eCalton Inc
sanderson@ecalton.com

-----Original Message-----
From: Leandro Sant'ana [TEAM] [mailto:lsantana@voeteam.com.br] 
Sent: Friday, January 28, 2005 7:37 PM
To: bb@bb4.com
Subject: RES: {bb} 403 Forbidden error

Try change owner and group to this file: > lrwxrwxrwx   1 root   root
7 Jan 28 12:50 index.html -> bb.html
chown apache:users index.html

After make other "link" in directory /var/www/html
Use this:  #ln -s /<bbdirectory>/www /var/www/html/bb



-----Mensagem original-----
De: owner-bb@bb4.com [mailto:owner-bb@bb4.com] Em nome de Galen Johnson
Enviada em: sexta-feira, 28 de janeiro de 2005 21:17
Para: bb@bb4.com
Assunto: Re: {bb} 403 Forbidden error

Shannon M. Anderson wrote:

> Hey all,
>
>  
>
> I been running BB on redhat 8 for awhile until system went in to 
> meltdown, I upgraded server to FedorCore3 and apache 2.0.53
>
> I reinstalled BB19c to new system as per the instructions. I can not 
> view the htmls in apache.
>
>  
>
> I flip-flopped permissions to ever conceivable setting and still get 
> same error.  Am am starting to believe apache has some thing aginst 
> me.  Any one have a idea why apache does not like the permissions?
>
>  
>
>  
>
>
>   *###error =*
>
>
>   *Forbidden*
>
> You don't have permission to access /bb/bb.html on this server.
>
> Additionally, a 403 Forbidden error was encountered while trying to 
> use an ErrorDocument to handle the request.
>
> ----------------------------------------------------------------------
> --
> /Apache/2.0.52 (Fedora) Server at ec-titan.ecalton.com Port 80/
>
>  
>
>  
>
> Here is what I have
>
> BBweb = /bb
>
> BBWEBHOST = http://ec-titan.ecalton.com
>
> BBHOME = /home/bb/bb19c
>
>  
>
> # ls of /home
>
> drwxrwxrwx   4 root       root          4096 Jan 28 09:04 .
>
> drwxr-xr-x     23 root      root          4096 Jan 28 10:43 ..
>
> drwxrwxrwx   7 apache   apache    4096 Jan 28 12:50 bb
>
>  
>
>  
>
> # ls of /home/bb
>
> drwxrwxrwx   4 apache apache  4096 Jan 28 14:15 .
>
> drwxrwxrwx   4 root   root          4096 Jan 28 09:04 ..
>
> drwxr-xr-x     10 apache users   4096 Jan 28 12:57 bb19c
>
> drwxr-xr-x      9 bb     bb           4096 Jan 28 11:03 bbvar
>
>  
>
> # ls of /home/bb/bb19c
>
> drwxr-xr-x  10 apache users   4096 Jan 28 12:57 .
>
> drwxrwxrwx   4 apache apache  4096 Jan 28 14:15 ..
>
> -rwxr-xr-x   1 apache root    2192 Jan 28 14:12 BBOUT
>
> drwxr-xr-x   2 apache users   4096 Jan 28 12:53 bin
>
> drwxr-xr-x   2 apache users   4096 Jan 28 12:54 etc
>
> drwxr-xr-x   6 apache users   4096 May  3  2002 ext
>
> -rwxr-xr-x   1 apache users  29432 May 16  2002 FILES.LIST
>
> drwxr-xr-x   2 apache users   4096 May  3  2002 install
>
> -rwxr-xr-x   1 apache users   2533 Mar 12  2002 LICENSE
>
> -rwxr-xr-x   1 apache users  16019 May 15  2002 README
>
> -rwxr-xr-x   1 apache users  87534 May 15  2002 README.CHANGES
>
> -rwxr-xr-x   1 apache users  10077 May 15  2002 README.INSTALL
>
> -rwxr-xr-x   1 apache users   2880 May 15  2002 README.SECURITY
>
> -rwxr-xr-x   1 apache users   1140 May 15  2002 README.SUPPORT
>
> -rwxr-xr-x   1 apache root    8012 Jan 28 12:52 runbb.sh
>
> -rwxr-xr-x   1 apache users   8005 May 15  2002 runbb.sh.DIST
>
> drwxr-xr-x   2 apache users   4096 Jan 28 12:53 src
>
> drwxr-xr-x   2 apache users   4096 Jan 28 14:13 tmp
>
> drwxr-xr-x   2 apache users   4096 May  3  2002 web
>
> drwxr-xr-x   9 apache users   4096 Jan 28 12:58 www
>
>  
>
>  
>
> #ls of  bb19c/www
>
>  
>
> drwxr-xr-x   9 apache users   4096 Jan 28 12:58 .
>
> drwxr-xr-x  10 apache users   4096 Jan 28 12:57 ..
>
> -rw-r--r--   1 apache root   24617 Jan 28 14:23 bb2.html
>
> -rw-r--r--   1 apache root   42553 Jan 28 14:23 bb.html
>
> drwxr-xr-x   2 apache users   4096 May 13  2002 gifs
>
> drwxr-xr-x   2 apache users   4096 May  3  2002 gifs-bb13
>
> drwxr-xr-x   2 apache users   4096 Jan 28 12:52 help
>
> drwxr-xr-x   2 apache users  12288 Jan 28 13:02 html
>
> lrwxrwxrwx   1 root   root       7 Jan 28 12:50 index.html -> bb.html
>
> drwxr-xr-x   2 apache users   4096 May  3  2002 notes
>
> drwxr-xr-x   2 apache users   4096 May  3  2002 psy
>
> drwxrwxr-x   2 apache apache  4096 May  3  2002 rep
>
>  
>
> My Apache httpd.conf
>
>  
>
> ###########BigBrother###
>
>  
>
> Alias /bb/ "/home/bb/bb19c/www/"
>
>  
>
> <Directory "/home/bb/bb19c/www">
>
>     Options FollowSymLinks
>
>     AllowOverride None
>
>     Order allow,deny
>
>     Allow from all
>
> </Directory>
>
>  
>
> ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
>
> <Directory "/var/www/cgi-bin">
>
>     AllowOverride None
>
>     Options FollowSymLinks
>
>     Order allow,deny
>
>     Allow from all
>
> </Directory>
>
>
What do your apache logs tell you?  Did you stop and start apache after
adding the changes to the conf?

=G=
--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send
e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe
bb-digest in the BODY of the message.


--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.