apache access forbidden

linuxlover.chaitanya · 08-10-2009, 06:37 AM

access_log is a file. do not cd into it. open it using your favorite text editor like vi.
and once you move the directory have you checked that permissions are intact? or else chown sarge directory to apache user. Your web server will usually run as user apache.

qwertyjjj · 08-10-2009, 06:40 AM

Quote:

Originally Posted by linuxlover.chaitanya

access_log is a file. do not cd into it. open it using your favorite text editor like vi.
and once you move the directory have you checked that permissions are intact? or else chown sarge directory to apache user. Your web server will usually run as user apache.

tail -f /var/log/httpd/access_log gives this when I access the page
86.xxx.xxx.xx - - [10/Aug/2009:12:36:38 +0100] "GET /sarg HTTP/1.1" 403 281 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11"

[root@localhost ~]# apachectl -S
VirtualHost configuration:
wildcard NameVirtualHosts and _default_ servers:
_default_:443 localhost.localdomain (/etc/httpd/conf.d/ssl.conf:81)
Syntax OK
[root@localhost ~]#

created some test files:
http://88.xxx.xxx.xxx/index.html works and gives me hello world
http://88.xxx.xxx.xxx/sarg/test.html still 403 error

chown -R apache /var/www/sarg - still error 403

error_log:
[Mon Aug 10 12:48:06 2009] [error] [client 86.163.103.36] client denied by server configuration: /var/www/sarg

linuxlover.chaitanya · 08-10-2009, 06:43 AM

also check the error_log file as well.

qwertyjjj · 08-10-2009, 06:48 AM

Quote:

Originally Posted by qwertyjjj

tail -f /var/log/httpd/access_log gives this when I access the page
86.xxx.xxx.xx - - [10/Aug/2009:12:36:38 +0100] "GET /sarg HTTP/1.1" 403 281 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11"

[root@localhost ~]# apachectl -S
VirtualHost configuration:
wildcard NameVirtualHosts and _default_ servers:
_default_:443 localhost.localdomain (/etc/httpd/conf.d/ssl.conf:81)
Syntax OK
[root@localhost ~]#

created some test files:
http://88.xxx.xxx.xxx/index.html works and gives me hello world
http://88.xxx.xxx.xxx/sarg/test.html still 403 error

chown -R apache /var/www/sarg - still error 403

error_log:
[Mon Aug 10 12:48:06 2009] [error] [client 86.xxx.xxx.xxx] client denied by server configuration: /var/www/sarg

error log gives:
[Mon Aug 10 12:48:06 2009] [error] [client 86.xxx.xxx.xxx] client denied by server configuration: /var/www/sarg

copied to sarg to the html folder but still the error:
[root@localhost ~]# cp -r /var/www/sarg /var/www/html
[root@localhost ~]# chown -R apache /var/www/html/sarg
[root@localhost ~]#

qwertyjjj · 08-10-2009, 07:15 AM

GOT IT...finally

had to change the deny and allow from in the sarg.conf file to:

Alias /sarg /var/www/sarg

<Directory /var/www/sarg>
DirectoryIndex index.html
Order deny,allow
#Deny from all
#Allow from 127.0.0.1
#Allow from ::1
# Allow from your-workstation.com
</Directory>

zhjim · 08-10-2009, 07:34 AM

Quote:

Originally Posted by qwertyjjj

GOT IT...finally

Congrats

unSpawn · 08-10-2009, 07:35 AM

Quote:

Originally Posted by qwertyjjj

<Directory /var/www/sarg>
DirectoryIndex index.html
Order deny,allow
#Deny from all
#Allow from 127.0.0.1
#Allow from ::1
# Allow from your-workstation.com
</Directory>

Nice but it's not good. Use your ISP's IP range in your "Allow from" rule like I already offered in one of your other threads. I also suggest you have a look at the Apache documentation for ways to password protect access (AuthType Basic: htpasswd).

qwertyjjj · 08-11-2009, 02:59 PM

Quote:

Originally Posted by unSpawn

Nice but it's not good. Use your ISP's IP range in your "Allow from" rule like I already offered in one of your other threads. I also suggest you have a look at the Apache documentation for ways to password protect access (AuthType Basic: htpasswd).

In this guide
http://www.ikhwan15.blogspot.com/200...cess-sarg.html
, it says that I need to edit the httpd.conf file to get passwords setup for sarg reports. From my PHP days, I was under the impression I could just stick a .htaccess file in the /var/www/sarg folder
I don't want the document root to be /var/www/sarg so not sure what to edit.
?

Have changed this in httpd.conf but couldn't it go in the /var/www/sarg .htaccess file?

Code:

<Directory /var/www/sarg>
deny from all
AllowOverride AuthConfig
Order deny,allow
</Directory>

I haven't put this in yet - what is the virtual host part for? Seems to work without this bit of code.

Code:

....
....
NameVirtualHost *:80
....
....
<VirtualHost *:80>
ServerAdmin webmaster@domain.com
DocumentRoot /var/www/sarg
ServerName squid.example.com
</VirtualHost>
....
....

I HAVE created these though:

Code:

# cat /var/www/sarg/.htaccess

AuthType Basic
AuthUserFile /etc/httpd/conf/.htpasswd
AuthName Squid-logs
require valid-user
satisfy any

Code:

chmod 644 /var/www/sarg/.htaccess
chown apache /var/www/sarg/.htaccess

Code:

htpasswd -bc /etc/httpd/conf.htpasswd someuser somepassword
chmod 644 /etc/httpd/conf/.htpasswd

unSpawn · 08-11-2009, 03:47 PM

Quote:

Originally Posted by qwertyjjj

In this guide it says that I need to edit the httpd.conf file to get passwords setup for sarg reports. From my PHP days, I was under the impression I could just stick a .htaccess file in the /var/www/sarg folder

Both are possible but do understand http://httpd.apache.org/docs/2.2/how...cess.html#when.

Quote:

Originally Posted by qwertyjjj

what is the virtual host part for? Seems to work without this bit of code.

It's a default, see http://httpd.apache.org/docs/2.2/mod...ml#virtualhost.
Should be changed if one already runs Something Completely Different on <VirtualHost *:80>.

qwertyjjj · 08-11-2009, 03:55 PM

Quote:

Originally Posted by unSpawn

Both are possible but do understand http://httpd.apache.org/docs/2.2/how...cess.html#when.

Aha, hence why I always used .htaccess files before as I never had root access.

It's a default, see http://httpd.apache.org/docs/2.2/mod...ml#virtualhost.
Should be changed if one already runs Something Completely Different on <VirtualHost *:80>.

I don't understand in this instance why it's needed.
The server root is var/ww/html
Why would I create a virtual host just for the sarg folder?
The .htaccess files only refer to /var/www/sarg so if anybody access http://www.mysite.com, it should still serve the html page whereas if they go http://www.mysite.com/sarg, it will prompt for a password.

unSpawn · 08-11-2009, 04:26 PM

Quote:

Originally Posted by qwertyjjj

I don't understand in this instance why it's needed.
The server root is var/ww/html
Why would I create a virtual host just for the sarg folder?

Me neither but then my ESP is at an alltime low today.
Maybe it was provided as an example for your convenience?

Quote:

Originally Posted by qwertyjjj

The .htaccess files only refer to /var/www/sarg so if anybody access http://www.mysite.com, it should still serve the html page whereas if they go http://www.mysite.com/sarg, it will prompt for a password.

Nothing wrong with that.

sajay · 10-08-2009, 02:33 AM

hi all
i want to know how to configure sarg so that i can generate the squid proxy report
plese show how to access sarg through web brwoser.

thanks in advance..

linuxlover.chaitanya · 10-08-2009, 04:14 AM

What distribution are you using? Have you looked into the repositories of your package manager to see if sarg is available? If it is there, best way is to install using package manager.
On how to configure it, read the complete thread and you will understand.

chrism01 · 10-08-2009, 06:38 PM

Can I just point out that

Code:

htpasswd -bc /etc/httpd/conf.htpasswd someuser somepassword
chmod 644 /etc/httpd/conf/.htpasswd

has 2 different names for 'htpasswd':

conf.htpasswd
.htpasswd

Also, no point in making it hidden (ie leading dot). That only applies to .htaccess files.
Whatever name you decide on, the entry in the .htaccess file must be exactly the same.