shak380 Posted March 16, 2009 Share Posted March 16, 2009 Hello all, I have configured web server, the details are below.. OS = RedHat Enterprise Linux 5, web server = httpd ( came with RHEL-5, i have neither updated nor installed a latest version) httpd status = Up and Running. Name Server = Okay, resolving properly. Hostname = shak380.peerakkuzhi.org What I am trying to do : I am trying to configure my web server like the WHM server. So I all the domains Document root will be /home/"username"/www/web/ and log would be /home/"username"/log/ without the "Users home directory" option in my httpd.conf( since WHM httpd.conf file does not contain that). I set the group owner of www as "apache", since i got the "permission denied" error I set the ownership recursively to apache on www, still get the same error. I have given my httpd.conf(without comment lines) file here..... ServerTokens OS ServerRoot "/etc/httpd" PidFile run/httpd.pid Timeout 120 KeepAlive Off MaxKeepAliveRequests 100 KeepAliveTimeout 15 <IfModule prefork.c> StartServers 8 MinSpareServers 5 MaxSpareServers 20 ServerLimit 256 MaxClients 256 MaxRequestsPerChild 4000 </IfModule> <IfModule worker.c> StartServers 2 MaxClients 150 MinSpareThreads 25 MaxSpareThreads 75 ThreadsPerChild 25 MaxRequestsPerChild 0 </IfModule> Listen 80 LoadModule auth_basic_module modules/mod_auth_basic.so LoadModule auth_digest_module modules/mod_auth_digest.so LoadModule authn_file_module modules/mod_authn_file.so LoadModule authn_alias_module modules/mod_authn_alias.so LoadModule authn_anon_module modules/mod_authn_anon.so LoadModule authn_dbm_module modules/mod_authn_dbm.so LoadModule authn_default_module modules/mod_authn_default.so LoadModule authz_host_module modules/mod_authz_host.so LoadModule authz_user_module modules/mod_authz_user.so LoadModule authz_owner_module modules/mod_authz_owner.so LoadModule authz_groupfile_module modules/mod_authz_groupfile.so LoadModule authz_dbm_module modules/mod_authz_dbm.so LoadModule authz_default_module modules/mod_authz_default.so LoadModule ldap_module modules/mod_ldap.so LoadModule authnz_ldap_module modules/mod_authnz_ldap.so LoadModule include_module modules/mod_include.so LoadModule log_config_module modules/mod_log_config.so LoadModule logio_module modules/mod_logio.so LoadModule env_module modules/mod_env.so LoadModule ext_filter_module modules/mod_ext_filter.so LoadModule mime_magic_module modules/mod_mime_magic.so LoadModule expires_module modules/mod_expires.so LoadModule deflate_module modules/mod_deflate.so LoadModule headers_module modules/mod_headers.so LoadModule usertrack_module modules/mod_usertrack.so LoadModule setenvif_module modules/mod_setenvif.so LoadModule mime_module modules/mod_mime.so LoadModule dav_module modules/mod_dav.so LoadModule status_module modules/mod_status.so LoadModule autoindex_module modules/mod_autoindex.so LoadModule info_module modules/mod_info.so LoadModule dav_fs_module modules/mod_dav_fs.so LoadModule vhost_alias_module modules/mod_vhost_alias.so LoadModule negotiation_module modules/mod_negotiation.so LoadModule dir_module modules/mod_dir.so LoadModule actions_module modules/mod_actions.so LoadModule speling_module modules/mod_speling.so LoadModule userdir_module modules/mod_userdir.so LoadModule alias_module modules/mod_alias.so LoadModule rewrite_module modules/mod_rewrite.so LoadModule proxy_module modules/mod_proxy.so LoadModule proxy_balancer_module modules/mod_proxy_balancer.so LoadModule proxy_ftp_module modules/mod_proxy_ftp.so LoadModule proxy_http_module modules/mod_proxy_http.so LoadModule proxy_connect_module modules/mod_proxy_connect.so LoadModule cache_module modules/mod_cache.so LoadModule suexec_module modules/mod_suexec.so LoadModule disk_cache_module modules/mod_disk_cache.so LoadModule file_cache_module modules/mod_file_cache.so LoadModule mem_cache_module modules/mod_mem_cache.so LoadModule cgi_module modules/mod_cgi.so Include conf.d/*.conf User apache Group apache ServerAdmin root@localhost UseCanonicalName Off DocumentRoot "/home/" UserDir webs <Directory /> Options ALL AllowOverride ALL </Directory> <Directory "/var/www/html"> Options Indexes FollowSymLinks AllowOverride None Order allow,deny Allow from all </Directory> <IfModule mod_userdir.c> # # UserDir is disabled by default since it can confirm the presence # of a username on the system (depending on home directory # permissions). # #UserDir disable # # To enable requests to /~user/ to serve the user's public_html # directory, remove the "UserDir disable" line above, and uncomment # the following line instead: # #UserDir public_html </IfModule> DirectoryIndex index.html index.html.var AccessFileName .htaccess <Files ~ "^\.ht"> Order allow,deny Deny from all Satisfy all </Files> TypesConfig /etc/mime.types DefaultType text/plain <IfModule mod_mime_magic.c> MIMEMagicFile conf/magic </IfModule> HostnameLookups Off ErrorLog logs/error_log LogLevel warn LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined LogFormat "%h %l %u %t \"%r\" %>s %b" common LogFormat "%{Referer}i -> %U" referer LogFormat "%{User-agent}i" agent CustomLog logs/access_log combined ServerSignature On Alias /icons/ "/var/www/icons/" <Directory "/var/www/icons"> Options Indexes MultiViews AllowOverride None Order allow,deny Allow from all </Directory> <IfModule mod_dav_fs.c> # Location of the WebDAV lock database. DAVLockDB /var/lib/dav/lockdb </IfModule> ScriptAlias /cgi-bin/ "/var/www/cgi-bin/" <Directory "/var/www/cgi-bin"> AllowOverride None Options None Order allow,deny Allow from all </Directory> IndexOptions FancyIndexing VersionSort NameWidth=* HTMLTable AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip AddIconByType (TXT,/icons/text.gif) text/* AddIconByType (IMG,/icons/image2.gif) image/* AddIconByType (SND,/icons/sound2.gif) audio/* AddIconByType (VID,/icons/movie.gif) video/* AddIcon /icons/binary.gif .bin .exe AddIcon /icons/binhex.gif .hqx AddIcon /icons/tar.gif .tar AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip AddIcon /icons/a.gif .ps .ai .eps AddIcon /icons/layout.gif .html .shtml .htm .pdf AddIcon /icons/text.gif .txt AddIcon /icons/c.gif .c AddIcon /icons/p.gif .pl .py AddIcon /icons/f.gif .for AddIcon /icons/dvi.gif .dvi AddIcon /icons/uuencoded.gif .uu AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl AddIcon /icons/tex.gif .tex AddIcon /icons/bomb.gif core AddIcon /icons/back.gif .. AddIcon /icons/hand.right.gif README AddIcon /icons/folder.gif ^^DIRECTORY^^ AddIcon /icons/blank.gif ^^BLANKICON^^ DefaultIcon /icons/unknown.gif ReadmeName README.html HeaderName HEADER.html IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t AddLanguage ca .ca AddLanguage cs .cz .cs AddLanguage da .dk AddLanguage de .de AddLanguage el .el AddLanguage en .en AddLanguage eo .eo AddLanguage es .es AddLanguage et .et AddLanguage fr .fr AddLanguage he .he AddLanguage hr .hr AddLanguage it .it AddLanguage ja .ja AddLanguage ko .ko AddLanguage ltz .ltz AddLanguage nl .nl AddLanguage nn .nn AddLanguage no .no AddLanguage pl .po AddLanguage pt .pt AddLanguage pt-BR .pt-br AddLanguage ru .ru AddLanguage sv .sv AddLanguage zh-CN .zh-cn AddLanguage zh-TW .zh-tw LanguagePriority en ca cs da de el eo es et fr he hr it ja ko ltz nl nn no pl pt pt-BR ru sv zh-CN zh-TW ForceLanguagePriority Prefer Fallback AddDefaultCharset UTF-8 AddType application/x-compress .Z AddType application/x-gzip .gz .tgz AddType application/x-httpd-php .php AddType application/x-httpd-php-source .phps AddHandler type-map var AddType text/html .shtml AddOutputFilter INCLUDES .shtml Alias /error/ "/var/www/error/" <IfModule mod_negotiation.c> <IfModule mod_include.c> <Directory "/var/www/error"> AllowOverride None Options IncludesNoExec AddOutputFilter Includes html AddHandler type-map var Order allow,deny Allow from all LanguagePriority en es de fr ForceLanguagePriority Prefer Fallback </Directory> </IfModule> </IfModule> BrowserMatch "Mozilla/2" nokeepalive BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0 BrowserMatch "RealPlayer 4\.0" force-response-1.0 BrowserMatch "Java/1\.0" force-response-1.0 BrowserMatch "JDK/1\.0" force-response-1.0 BrowserMatch "Microsoft Data Access Internet Publishing Provider" redirect-carefully BrowserMatch "MS FrontPage" redirect-carefully BrowserMatch "^WebDrive" redirect-carefully BrowserMatch "^WebDAVFS/1.[0123]" redirect-carefully BrowserMatch "^gnome-vfs/1.0" redirect-carefully BrowserMatch "^XML Spy" redirect-carefully BrowserMatch "^Dreamweaver-WebDAV-SCM1" redirect-carefully NameVirtualHost 10.0.0.1:80 <VirtualHost 10.0.0.1:80> ServerAdmin webmaster@name1.myworks.com DocumentRoot /home/shakir/www/webs/ ServerName myworks.com ServerAlias www.myworks.com #<IfModule !mod_disable_suexec.c> # User shakir # Group shakir #</IfModule> UserDir disabled UserDir enabled shakir # ErrorLog /home/shakir/www/logs/error_log # CustomLog /home/shakir/www/logs/custom_log combined </VirtualHost> Quote Link to comment Share on other sites More sharing options...
Daniel0 Posted March 16, 2009 Share Posted March 16, 2009 Try to run this command: chmod g+rw -R /home That will recursively give read and write permissions to group on /home. Quote Link to comment Share on other sites More sharing options...
shak380 Posted March 17, 2009 Author Share Posted March 17, 2009 Hi Daniel, Thank you for your suggestion. However it did not work. and the problem still persists.... Somebody please help me ..... Thnx... Quote Link to comment Share on other sites More sharing options...
Daniel0 Posted March 17, 2009 Share Posted March 17, 2009 Could you paste the particular error you get? Quote Link to comment Share on other sites More sharing options...
shak380 Posted March 18, 2009 Author Share Posted March 18, 2009 I have "Quoted" the error log here. It is a filtered error regarding this only. These are the errors that I got, when I had set my DocumentRoot as /var/www/html/ then as / and finally as /home/. The errors are listed in respective order. Please note that instead putting my web files in /var/www/html/ folder I had put it in another folder in /var/www/html, for example /var/www/html/example1.com/ and had set the permission accordingly, 755. [Mon Mar 09 18:35:52 2009] [error] [client 10.0.0.1] Directory index forbidden by Options directive: /var/www/html/ [Mon Mar 09 18:36:01 2009] [error] [client 10.0.0.1] Directory index forbidden by Options directive: /var/www/html/ [Mon Mar 09 18:42:31 2009] [error] [client 10.0.0.1] Directory index forbidden by Options directive: /var/www/ [Mon Mar 09 18:42:35 2009] [error] [client 10.0.0.1] Directory index forbidden by Options directive: /var/www/ [Mon Mar 09 18:46:04 2009] [error] [client 10.0.0.1] Directory index forbidden by Options directive: /var/www/ [Mon Mar 09 18:46:48 2009] [error] [client 10.0.0.1] (13)Permission denied: access to / denied [Mon Mar 09 18:47:00 2009] [error] [client 10.0.0.1] (13)Permission denied: access to / denied [sun Mar 15 15:28:14 2009] [error] [client 10.0.0.1] (13)Permission denied: access to / denied [sun Mar 15 15:32:50 2009] [error] [client 10.0.0.1] (13)Permission denied: access to / denied [sun Mar 15 15:33:03 2009] [error] [client 10.0.0.1] (13)Permission denied: access to / denied [sun Mar 15 15:33:34 2009] [error] [client 10.0.0.1] (13)Permission denied: access to / denied [sun Mar 15 15:35:16 2009] [crit] [client 10.0.0.1] (13)Permission denied: /home/shakir/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable [sun Mar 15 15:37:30 2009] [crit] [client 10.0.0.1] (13)Permission denied: /home/shakir/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable [sun Mar 15 15:40:42 2009] [crit] [client 10.0.0.1] (13)Permission denied: /home/shakir/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable [sun Mar 15 15:43:28 2009] [crit] [client 10.0.0.1] (13)Permission denied: /home/shakir/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable [sun Mar 15 15:46:12 2009] [crit] [client 10.0.0.1] (13)Permission denied: /home/shakir/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable [sun Mar 15 15:51:52 2009] [crit] [client 10.0.0.1] (13)Permission denied: /home/shakir/.htaccess pcfg_openfile: unable to check htaccess file, ensure it is readable Quote Link to comment Share on other sites More sharing options...
zenit Posted May 25, 2009 Share Posted May 25, 2009 Hello everybody, I had the same problem and searching the web I found that it was because of the security context, with the command you see the context ls -Z /web/directory/ and with this another command you change the security context chcon -R -h -t httpd_sys_content_t /web/directory/ Doing this is resolved, in my case, I hope will help them. This information is taken from http://www.ecualug.org/2008/03/06/comos/como_evitar_el_error_forbidden_problem_you_dont_have_permission_access_en_apache Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.