From owner-freebsd-questions@FreeBSD.ORG Sun Oct 9 17:33:11 2005 Return-Path: X-Original-To: questions@freebsd.org Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 66EC116A41F for ; Sun, 9 Oct 2005 17:33:11 +0000 (GMT) (envelope-from mikef@ack.Berkeley.EDU) Received: from malcolm.berkeley.edu (malcolm.Berkeley.EDU [128.32.206.239]) by mx1.FreeBSD.org (Postfix) with ESMTP id 05D3F43D45 for ; Sun, 9 Oct 2005 17:33:11 +0000 (GMT) (envelope-from mikef@ack.Berkeley.EDU) Received: from malcolm.berkeley.edu (localhost [127.0.0.1]) by malcolm.berkeley.edu (8.13.3/8.13.3) with ESMTP id j99HXAPQ077883 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 9 Oct 2005 10:33:10 -0700 (PDT) (envelope-from mikef@ack.Berkeley.EDU) Received: from localhost (mikef@localhost) by malcolm.berkeley.edu (8.13.3/8.13.3/Submit) with ESMTP id j99HXANS077880; Sun, 9 Oct 2005 10:33:10 -0700 (PDT) (envelope-from mikef@ack.Berkeley.EDU) X-Authentication-Warning: malcolm.berkeley.edu: mikef owned process doing -bs Date: Sun, 9 Oct 2005 10:33:02 -0700 (PDT) From: Mike Friedman X-X-Sender: mikef@malcolm.berkeley.edu To: John Oxley In-Reply-To: <20051009121756.GA9446@yoafrica.com> Message-ID: <20051009101854.A77604@malcolm.berkeley.edu> References: <20051009121756.GA9446@yoafrica.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-1.6 (malcolm.berkeley.edu [127.0.0.1]); Sun, 09 Oct 2005 10:33:10 -0700 (PDT) Cc: questions@freebsd.org Subject: Re: rt "client denied by server configuration" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 09 Oct 2005 17:33:11 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sun, 9 Oct 2005 at 14:17 (+0200), John Oxley wrote: > I'm trying to install rt on FreeBSD 5.4 with Apache 2. I have installed > the port, and configured it. I have also setup Apache like this: > > ... > > Apache starts okay, but when I go to http://rt.yoafrica.com/ the page > says: > Forbidden > > You don't have permission to access / on this server. > Apache/2.0.54 (FreeBSD) PHP/4.3.11 mod_fastcgi/2.4.2 Server at rt.yoafrica.com Port 80 > > and in /var/log/httpd/rt-error_log there is: > > [Sun Oct 09 14:18:18 2005] [error] [client 196.44.177.50] client denied by server configuration: /usr/local/rt3/bin/mason_handler.fgci > [Sun Oct 09 14:18:18 2005] [error] [client 196.44.177.50] client denied by server configuration: /usr/local/rt3/bin/mason_handler.fgci > > Does anyone know what I am doing wrong ? John, This is not a FreeBSD problem; it's really an Apache config issue, assuming you're having the same problem I had using the same RT install environment as yours. In your httpd.conf, see if the following appears: AllowOverride None Order Deny,Allow Deny from all If so, then comment out (or remove) the 'Deny from all' directive, which is causing very strict default access control for the DocumentRoot directory. (If you choose, you can always define your own Allow, Order and Deny directives for particular directories in your virtual home). At least this was the source of my symptoms, which were the same as yours. Mike _____________________________________________________________________ Mike Friedman System and Network Security mikef@ack.Berkeley.EDU 2484 Shattuck Avenue 1-510-642-1410 University of California at Berkeley http://ack.Berkeley.EDU/~mikef http://security.berkeley.edu _____________________________________________________________________ -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 iQA/AwUBQ0lUUq0bf1iNr4mCEQKZkgCbBh+IHlrlsq9Hfb4ifE7G3Sc1H8UAn1iQ MktOnX09SMIQJEqgokdDRldx =a2rI -----END PGP SIGNATURE-----