httpd returns 403 for no apperent reason all of a sudden

guardian653 · 11-03-2003, 03:54 PM

Hey all on this forum. I got a pretty bad problem to ask you about.

I run a web server for my own personal site. Its was running for about 57 days before it took a crap. I had just made a script that produces thumbnails and other stuff and I was showing it to a friend. All is going well.. then this happens.... He forgot to specify the targetto and ever since everything went down. First it shows my PHP page with a missing image (no brainer, didn't specify were to say it to so it just points to "") but also on the top I get an error saying it could not load my header (my header is another PHP page that gets included with every page on the site) and I was wondering to myself wtf?

Get home, login to my server, thinking the permissions were messed up go to change them and to my surprise.. they were intact. I still got 403 errors for no reason at all.

I seen this problem mention on serveral web pages on a lookup on google, but to no avial, no solutions....

The day before I enabled mod_auth_mysql to block my cgi-bin directory from non members on my site. Also I added my thumbnail maker and a couple of bug fixes..

The one thing I don't get is why for no apperatent reason it just dies! Producing an endless 403 page on no matter what, except my /manual (default directory for the apache manual) works. The permissions are almost identical.. (I have apache:apache on my directories)

Some facts:
PHP Based site
mod_auth_mysql enabled just recently (only /var/www/cgi-bin is set to protect)
Added/fixed pages using samba the night before
Server returns nothing but 403 errors for everthing except the /var/www/manual site
Permissions are setup correctly
AllowOverride was always set to All (setting to None doesn't help)
Rebooted twice, no results

Here is simplet from my error_log:
identify: Unable to open file (/var/www/html/https://66.188.56.27/pub/users/chris/TS/tgs_cg07.jpg) [No such file or directory].
identify: Missing an image file name [No such file or directory].
identify: Unable to open file (/var/www/html/https://66.188.56.27/pub/users/chris/TS/tgs_cg07.jpg) [No such file or directory].
identify: Missing an image file name [No such file or directory].
convert: Unable to resize image (image dimensions are zero).
convert: Unable to open file (/var/www/html/).
[Mon Nov 03 14:15:42 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 14:15:55 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 14:16:04 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 14:16:10 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 14:17:06 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 14:17:32 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 14:18:45 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 14:18:55 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 15:30:41 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 15:32:39 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 15:32:40 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 15:32:40 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 15:32:41 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 15:32:41 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 15:32:41 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 15:32:41 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 15:32:42 2003] [crit] [client 192.168.1.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 15:32:51 2003] [crit] [client 192.168.1.199] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable
[Mon Nov 03 15:33:05 2003] [crit] [client 127.0.0.1] (13)Permission denied: /var/www/html/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable

http://66.188.56.27:8888/
https://66.188.56.27

if you want to try your luck accessing it

Any help is
greatly
appericated!

Thanks

If you need any more info, just ask

david_ross · 11-03-2003, 03:58 PM

Do you have a ".htaccess" file in html? Post the output of:
ls -la /var/www/html/

guardian653 · 11-03-2003, 04:10 PM

There isn't one and there hasn't been a use for one. Adding one doesn't seem to help either.

(AllowOverrides All has always been that way)

Any more clues?

Thanks

unSpawn · 11-04-2003, 12:48 PM

I had just made a script that produces thumbnails and other stuff and I was showing it to a friend. All is going well.. then this happens.... He forgot to specify the targetto and ever since everything went down.
...makes this question not a security issue, probably misconfiguration, which is supported by error messages like: identify: Unable to open file (/var/www/html/https://66.188.56.27/pub/users/chris/TS/tgs_cg07.jpg). Note it sez "var/www/html/https://" instead of "/pub/users/chris" or /var/www/html/pub/users/chris/".
Review your Apache config, and if unsure, post the contents.
I'll be moving this thread to Linux - General.