Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 9 Oct 2005 10:33:02 -0700 (PDT)
From:      Mike Friedman <mikef@ack.Berkeley.EDU>
To:        John Oxley <john@yoafrica.com>
Cc:        questions@freebsd.org
Subject:   Re: rt "client denied by server configuration"
Message-ID:  <20051009101854.A77604@malcolm.berkeley.edu>
In-Reply-To: <20051009121756.GA9446@yoafrica.com>
References:  <20051009121756.GA9446@yoafrica.com>

next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, 9 Oct 2005 at 14:17 (+0200), John Oxley wrote:

> I'm trying to install rt on FreeBSD 5.4 with Apache 2.  I have installed 
> the port, and configured it.  I have also setup Apache like this:
>
> ...
> 
> Apache starts okay, but when I go to http://rt.yoafrica.com/ the page
> says:
> Forbidden
>
> You don't have permission to access / on this server.
> Apache/2.0.54 (FreeBSD) PHP/4.3.11 mod_fastcgi/2.4.2 Server at rt.yoafrica.com Port 80
>
> and in /var/log/httpd/rt-error_log there is:
>
> [Sun Oct 09 14:18:18 2005] [error] [client 196.44.177.50] client denied by server configuration: /usr/local/rt3/bin/mason_handler.fgci
> [Sun Oct 09 14:18:18 2005] [error] [client 196.44.177.50] client denied by server configuration: /usr/local/rt3/bin/mason_handler.fgci
>
> Does anyone know what I am doing wrong ?

John,

This is not a FreeBSD problem;  it's really an Apache config issue, 
assuming you're having the same problem I had using the same RT install 
environment as yours.

In your httpd.conf, see if the following appears:

  <Directory />
      AllowOverride None
      Order Deny,Allow
      Deny from all
  </Directory>

If so, then comment out (or remove) the 'Deny from all' directive, which 
is causing very strict default access control for the DocumentRoot 
directory.  (If you choose, you can always define your own Allow, Order 
and Deny directives for particular directories in your virtual home).

At least this was the source of my symptoms, which were the same as yours.

Mike

_____________________________________________________________________
Mike Friedman                   System and Network Security
mikef@ack.Berkeley.EDU          2484 Shattuck Avenue
1-510-642-1410                  University of California at Berkeley
http://ack.Berkeley.EDU/~mikef  http://security.berkeley.edu
_____________________________________________________________________

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQA/AwUBQ0lUUq0bf1iNr4mCEQKZkgCbBh+IHlrlsq9Hfb4ifE7G3Sc1H8UAn1iQ
MktOnX09SMIQJEqgokdDRldx
=a2rI
-----END PGP SIGNATURE-----



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051009101854.A77604>