From Philippe.Lecler at inria.fr Tue Mar 17 11:44:30 2015 From: Philippe.Lecler at inria.fr (Philippe Lecler) Date: Tue, 17 Mar 2015 11:44:30 +0100 Subject: [mpm-itk] Permissions on DocumentRoot Message-ID: <5508058E.3000608@inria.fr> Hello, With the last version of mpm-itk (for apache 2.4.7), it seems that it is mandatory to have the 'x' permission on the directory which is the document root of the virtual host. With previous versions it was possible to have only permissions for the user defined with AssignUserId. Example : .... AssignUserId web-test web-test DocumentRoot /home/web/apache/sites/test/htdocs ... ls -ld /home/web/apache/sites/test/htdocs/index.html drwxr-x--- 9 web-test web-test 4096 Mar 17 11:39 /home/web/apache/sites/test/htdocs It was ok whith the previous version of mpm-itk Now, I have an error : AH00035: access to /index.html denied (filesystem path '/home/web/apache/sites/test/htdocs/index.html') because search permissions are missing on a component of the path Bug or feature ? Best regards. -- --- Philippe Lecler -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3239 bytes Desc: Signature cryptographique S/MIME URL: From bob at computerisms.ca Tue Mar 17 17:02:15 2015 From: bob at computerisms.ca (Bob Miller) Date: Tue, 17 Mar 2015 09:02:15 -0700 Subject: [mpm-itk] Permissions on DocumentRoot In-Reply-To: <5508058E.3000608@inria.fr> References: <5508058E.3000608@inria.fr> Message-ID: <55085007.3060502@computerisms.ca> Hi, I just tested and cannot reproduce this problem: # dpkg -l *mpm-itk* ii libapache2-mpm-itk 2.4.7-02-1.1 # ls -ld /var/www/eldorado/www/ drwx------ 17 eldorado eldorado 4096 Feb 26 20:43 /var/www/eldorado/www/ The site seems to work fine, and I have no errors in the logs... On 15-03-17 03:44 AM, Philippe Lecler wrote: > Hello, > With the last version of mpm-itk (for apache 2.4.7), it seems that it > is mandatory to have the 'x' permission on the directory which is the > document root of the virtual host. > > With previous versions it was possible to have only permissions for > the user defined with AssignUserId. > > Example : > > > .... > AssignUserId web-test web-test > DocumentRoot /home/web/apache/sites/test/htdocs > ... > > > ls -ld /home/web/apache/sites/test/htdocs/index.html > drwxr-x--- 9 web-test web-test 4096 Mar 17 11:39 > /home/web/apache/sites/test/htdocs > > It was ok whith the previous version of mpm-itk > > Now, I have an error : > AH00035: access to /index.html denied (filesystem path > '/home/web/apache/sites/test/htdocs/index.html') because search > permissions are missing on a component of the path > > Bug or feature ? > > Best regards. > > > _______________________________________________ > mpm-itk mailing list > mpm-itk at err.no > http://lists.err.no/mailman/listinfo/mpm-itk > From remko at freebsd.org Tue Mar 17 17:27:46 2015 From: remko at freebsd.org (Remko Lodder) Date: Tue, 17 Mar 2015 17:27:46 +0100 Subject: [mpm-itk] Permissions on DocumentRoot In-Reply-To: <55085007.3060502@computerisms.ca> References: <5508058E.3000608@inria.fr> <55085007.3060502@computerisms.ca> Message-ID: Same here, it is one of our points within our config that this works... Cheers, Remko Lodder /* sent from my phone and thus brief and to the point *\ > Op 17 mrt. 2015 om 17:02 heeft Bob Miller het volgende geschreven: > > Hi, > > I just tested and cannot reproduce this problem: > > # dpkg -l *mpm-itk* > ii libapache2-mpm-itk 2.4.7-02-1.1 > > # ls -ld /var/www/eldorado/www/ > drwx------ 17 eldorado eldorado 4096 Feb 26 20:43 /var/www/eldorado/www/ > > The site seems to work fine, and I have no errors in the logs... > > > >> On 15-03-17 03:44 AM, Philippe Lecler wrote: >> Hello, >> With the last version of mpm-itk (for apache 2.4.7), it seems that it >> is mandatory to have the 'x' permission on the directory which is the >> document root of the virtual host. >> >> With previous versions it was possible to have only permissions for >> the user defined with AssignUserId. >> >> Example : >> >> >> .... >> AssignUserId web-test web-test >> DocumentRoot /home/web/apache/sites/test/htdocs >> ... >> >> >> ls -ld /home/web/apache/sites/test/htdocs/index.html >> drwxr-x--- 9 web-test web-test 4096 Mar 17 11:39 >> /home/web/apache/sites/test/htdocs >> >> It was ok whith the previous version of mpm-itk >> >> Now, I have an error : >> AH00035: access to /index.html denied (filesystem path >> '/home/web/apache/sites/test/htdocs/index.html') because search >> permissions are missing on a component of the path >> >> Bug or feature ? >> >> Best regards. >> >> >> _______________________________________________ >> mpm-itk mailing list >> mpm-itk at err.no >> http://lists.err.no/mailman/listinfo/mpm-itk > > _______________________________________________ > mpm-itk mailing list > mpm-itk at err.no > http://lists.err.no/mailman/listinfo/mpm-itk From azurit at pobox.sk Tue Mar 17 21:20:02 2015 From: azurit at pobox.sk (azurIt) Date: Tue, 17 Mar 2015 21:20:02 +0100 Subject: [mpm-itk] =?utf-8?q?PHP_realpath_cache?= Message-ID: <20150317212002.2C4E8EFF@pobox.sk> Hi, any workarounds to php realpath cache problem with MPM ITK (=cache is not working)? Or anything other how to prevent PHP from calling lstat 1000x per request? Thanks! azur From Philippe.Lecler at inria.fr Fri Mar 27 16:54:41 2015 From: Philippe.Lecler at inria.fr (Philippe Lecler) Date: Fri, 27 Mar 2015 16:54:41 +0100 Subject: [mpm-itk] Permissions on DocumentRoot In-Reply-To: <55085007.3060502@computerisms.ca> References: <5508058E.3000608@inria.fr> <55085007.3060502@computerisms.ca> Message-ID: <55157D41.4030704@inria.fr> Le 17/03/2015 17:02, Bob Miller a ?crit : > Hi, > > I just tested and cannot reproduce this problem: > > # dpkg -l *mpm-itk* > ii libapache2-mpm-itk 2.4.7-02-1.1 > > # ls -ld /var/www/eldorado/www/ > drwx------ 17 eldorado eldorado 4096 Feb 26 20:43 /var/www/eldorado/www/ > > The site seems to work fine, and I have no errors in the logs... > Hi, Thank you for your answer. One more test : If I access to http://test.irisa.fr : no problem : the content of index.html is displayed But if I try to access to http://test.irisa.fr/index.html => Error : Forbidden, You don't have permission to access /index.html on this server. => In error.log : AH00035: access to /index.html denied (filesystem path '/home/web/apache/sites/test/htdocs/index.html') because search permissions are missing on a component of the path. Does it work for you. Best regards. > > > On 15-03-17 03:44 AM, Philippe Lecler wrote: >> Hello, >> With the last version of mpm-itk (for apache 2.4.7), it seems that it >> is mandatory to have the 'x' permission on the directory which is the >> document root of the virtual host. >> >> With previous versions it was possible to have only permissions for >> the user defined with AssignUserId. >> >> Example : >> >> >> .... >> AssignUserId web-test web-test >> DocumentRoot /home/web/apache/sites/test/htdocs >> ... >> >> >> ls -ld /home/web/apache/sites/test/htdocs/index.html >> drwxr-x--- 9 web-test web-test 4096 Mar 17 11:39 >> /home/web/apache/sites/test/htdocs >> >> It was ok whith the previous version of mpm-itk >> >> Now, I have an error : >> AH00035: access to /index.html denied (filesystem path >> '/home/web/apache/sites/test/htdocs/index.html') because search >> permissions are missing on a component of the path >> >> Bug or feature ? >> >> Best regards. >> >> >> _______________________________________________ >> mpm-itk mailing list >> mpm-itk at err.no >> http://lists.err.no/mailman/listinfo/mpm-itk >> > > _______________________________________________ > mpm-itk mailing list > mpm-itk at err.no > http://lists.err.no/mailman/listinfo/mpm-itk -- --- Philippe -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3239 bytes Desc: Signature cryptographique S/MIME URL: From remko at FreeBSD.org Fri Mar 27 17:00:34 2015 From: remko at FreeBSD.org (Remko Lodder) Date: Fri, 27 Mar 2015 17:00:34 +0100 Subject: [mpm-itk] Permissions on DocumentRoot In-Reply-To: <55157D41.4030704@inria.fr> References: <5508058E.3000608@inria.fr> <55085007.3060502@computerisms.ca> <55157D41.4030704@inria.fr> Message-ID: <47BE8D83-AA2B-4942-91B2-F724691FDEB8@FreeBSD.org> > On 27 Mar 2015, at 16:54, Philippe Lecler wrote: > > Le 17/03/2015 17:02, Bob Miller a ?crit : >> Hi, >> >> I just tested and cannot reproduce this problem: >> >> # dpkg -l *mpm-itk* >> ii libapache2-mpm-itk 2.4.7-02-1.1 >> >> # ls -ld /var/www/eldorado/www/ >> drwx------ 17 eldorado eldorado 4096 Feb 26 20:43 /var/www/eldorado/www/ >> >> The site seems to work fine, and I have no errors in the logs... >> > > Hi, > > Thank you for your answer. > > One more test : > If I access to http://test.irisa.fr : > no problem : the content of index.html is displayed > > But if I try to access to http://test.irisa.fr/index.html > => Error : Forbidden, You don't have permission to access /index.html on this server. > => In error.log : AH00035: access to /index.html denied (filesystem path '/home/web/apache/sites/test/htdocs/index.html') because search permissions are missing on a component of the path. > > Does it work for you. > > Best regards. Isn?t that something that is related to your local access configuration? I cannot imagine that / is being retrieved just fine and that /index.html is not and that that relates to mpm-itk. can you do an ?ls -la? on the directory and the contents of the directory, and display the httpd.conf arguments that you have for this vhost. (You can strip the hostnames etc where needed) Remko > >> >> >> On 15-03-17 03:44 AM, Philippe Lecler wrote: >>> Hello, >>> With the last version of mpm-itk (for apache 2.4.7), it seems that it >>> is mandatory to have the 'x' permission on the directory which is the >>> document root of the virtual host. >>> >>> With previous versions it was possible to have only permissions for >>> the user defined with AssignUserId. >>> >>> Example : >>> >>> >>> .... >>> AssignUserId web-test web-test >>> DocumentRoot /home/web/apache/sites/test/htdocs >>> ... >>> >>> >>> ls -ld /home/web/apache/sites/test/htdocs/index.html >>> drwxr-x--- 9 web-test web-test 4096 Mar 17 11:39 >>> /home/web/apache/sites/test/htdocs >>> >>> It was ok whith the previous version of mpm-itk >>> >>> Now, I have an error : >>> AH00035: access to /index.html denied (filesystem path >>> '/home/web/apache/sites/test/htdocs/index.html') because search >>> permissions are missing on a component of the path >>> >>> Bug or feature ? >>> >>> Best regards. >>> >>> >>> _______________________________________________ >>> mpm-itk mailing list >>> mpm-itk at err.no >>> http://lists.err.no/mailman/listinfo/mpm-itk >>> >> >> _______________________________________________ >> mpm-itk mailing list >> mpm-itk at err.no >> http://lists.err.no/mailman/listinfo/mpm-itk > > > -- > --- > Philippe > > _______________________________________________ > mpm-itk mailing list > mpm-itk at err.no > http://lists.err.no/mailman/listinfo/mpm-itk -- /"\ Best regards, | remko at FreeBSD.org \ / Remko Lodder | remko at EFnet X http://www.evilcoder.org/ | / \ ASCII Ribbon Campaign | Against HTML Mail and News -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 841 bytes Desc: Message signed with OpenPGP using GPGMail URL: From Philippe.Lecler at inria.fr Fri Mar 27 17:19:23 2015 From: Philippe.Lecler at inria.fr (Philippe Lecler) Date: Fri, 27 Mar 2015 17:19:23 +0100 Subject: [mpm-itk] Permissions on DocumentRoot In-Reply-To: <47BE8D83-AA2B-4942-91B2-F724691FDEB8@FreeBSD.org> References: <5508058E.3000608@inria.fr> <55085007.3060502@computerisms.ca> <55157D41.4030704@inria.fr> <47BE8D83-AA2B-4942-91B2-F724691FDEB8@FreeBSD.org> Message-ID: <5515830B.7030401@inria.fr> Le 27/03/2015 17:00, Remko Lodder a ?crit : > >> On 27 Mar 2015, at 16:54, Philippe Lecler wrote: >> >> Le 17/03/2015 17:02, Bob Miller a ?crit : >>> Hi, >>> >>> I just tested and cannot reproduce this problem: >>> >>> # dpkg -l *mpm-itk* >>> ii libapache2-mpm-itk 2.4.7-02-1.1 >>> >>> # ls -ld /var/www/eldorado/www/ >>> drwx------ 17 eldorado eldorado 4096 Feb 26 20:43 /var/www/eldorado/www/ >>> >>> The site seems to work fine, and I have no errors in the logs... >>> >> >> Hi, >> >> Thank you for your answer. >> >> One more test : >> If I access to http://test.irisa.fr : >> no problem : the content of index.html is displayed >> >> But if I try to access to http://test.irisa.fr/index.html >> => Error : Forbidden, You don't have permission to access /index.html on this server. >> => In error.log : AH00035: access to /index.html denied (filesystem path '/home/web/apache/sites/test/htdocs/index.html') because search permissions are missing on a component of the path. >> >> Does it work for you. >> >> Best regards. > > Isn?t that something that is related to your local access configuration? > I cannot imagine that / is being retrieved just fine and that /index.html is not and that that relates to mpm-itk. > > can you do an ?ls -la? on the directory and the contents of the directory, and display the httpd.conf arguments that you have for this vhost. > (You can strip the hostnames etc where needed) > OK, so : The vhost configuration : ServerName test.irisa.fr # Identite sous laquelle va tourner le serveur AssignUserId web-test web-test LogLevel debug ErrorLog "/home/web/apache/sites/test.irisa.fr/logs/error.log" CustomLog "/home/web/apache/sites/test.irisa.fr/logs/access.log" combined DocumentRoot /home/web/apache/sites/test.irisa.fr/htdocs Require all granted The directory : root# ls -la /home/web/apache/sites/test.irisa.fr/htdocs total 8 drwxr-x--- 2 web-test web-test 4096 Mar 27 16:35 . drwxr-xr-x 4 root root 4096 Mar 27 11:37 .. -rw-r----- 1 web-test web-test 60 Mar 27 16:06 index.html Thank you. -- --- Philippe -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3239 bytes Desc: Signature cryptographique S/MIME URL: From michael at orlitzky.com Fri Mar 27 19:48:50 2015 From: michael at orlitzky.com (Michael Orlitzky) Date: Fri, 27 Mar 2015 14:48:50 -0400 Subject: [mpm-itk] Permissions on DocumentRoot In-Reply-To: <5515830B.7030401@inria.fr> References: <5508058E.3000608@inria.fr> <55085007.3060502@computerisms.ca> <55157D41.4030704@inria.fr> <47BE8D83-AA2B-4942-91B2-F724691FDEB8@FreeBSD.org> <5515830B.7030401@inria.fr> Message-ID: <5515A612.4090403@orlitzky.com> This path: >>> => Error : Forbidden, You don't have permission to access /index.html on this server. >>> => In error.log : AH00035: access to /index.html denied (filesystem path '/home/web/apache/sites/test/htdocs/index.html') because search permissions are missing on a component of the path. >>> is not the same as this path: > > DocumentRoot /home/web/apache/sites/test.irisa.fr/htdocs > Figure out why it's trying to access the first path. From Philippe.Lecler at inria.fr Sat Mar 28 00:45:52 2015 From: Philippe.Lecler at inria.fr (Philippe Lecler) Date: Sat, 28 Mar 2015 00:45:52 +0100 Subject: [mpm-itk] Permissions on DocumentRoot In-Reply-To: <5515A612.4090403@orlitzky.com> References: <5508058E.3000608@inria.fr> <55085007.3060502@computerisms.ca> <55157D41.4030704@inria.fr> <47BE8D83-AA2B-4942-91B2-F724691FDEB8@FreeBSD.org> <5515830B.7030401@inria.fr> <5515A612.4090403@orlitzky.com> Message-ID: <5515EBB0.9010802@inria.fr> Le 27/03/2015 19:48, Michael Orlitzky a ?crit : > This path: > >>>> => Error : Forbidden, You don't have permission to access /index.html on this server. >>>> => In error.log : AH00035: access to /index.html denied (filesystem path '/home/web/apache/sites/test/htdocs/index.html') because search permissions are missing on a component of the path. >>>> > > > is not the same as this path: > >> >> DocumentRoot /home/web/apache/sites/test.irisa.fr/htdocs >> > > > Figure out why it's trying to access the first path. Ooops, sorry. It was a copy/paste of the previous mail. In error.log, the message is really : [Fri Mar 27 17:17:23.582635 2015] [core:error] [pid 8330] (13)Permission denied: [client 131.254.15.159:54125] AH00035: access to /index.html denied (filesystem path '/home/web/apache/sites/test.irisa.fr/htdocs/index.html') because search permissions are missing on a component of the path -- --- Philippe -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3239 bytes Desc: Signature cryptographique S/MIME URL: From Philippe.Lecler at inria.fr Mon Mar 30 17:54:05 2015 From: Philippe.Lecler at inria.fr (Philippe Lecler) Date: Mon, 30 Mar 2015 17:54:05 +0200 Subject: [mpm-itk] Permissions on DocumentRoot In-Reply-To: <5515830B.7030401@inria.fr> References: <5508058E.3000608@inria.fr> <55085007.3060502@computerisms.ca> <55157D41.4030704@inria.fr> <47BE8D83-AA2B-4942-91B2-F724691FDEB8@FreeBSD.org> <5515830B.7030401@inria.fr> Message-ID: <5519719D.8020401@inria.fr> Le 27/03/2015 17:19, Philippe Lecler a ?crit : > Le 27/03/2015 17:00, Remko Lodder a ?crit : >> >>> On 27 Mar 2015, at 16:54, Philippe Lecler >>> wrote: >>> >>> Le 17/03/2015 17:02, Bob Miller a ?crit : >>>> Hi, >>>> >>>> I just tested and cannot reproduce this problem: >>>> >>>> # dpkg -l *mpm-itk* >>>> ii libapache2-mpm-itk 2.4.7-02-1.1 >>>> >>>> # ls -ld /var/www/eldorado/www/ >>>> drwx------ 17 eldorado eldorado 4096 Feb 26 20:43 >>>> /var/www/eldorado/www/ >>>> >>>> The site seems to work fine, and I have no errors in the logs... >>>> >>> >>> Hi, >>> >>> Thank you for your answer. >>> >>> One more test : >>> If I access to http://test.irisa.fr : >>> no problem : the content of index.html is displayed >>> >>> But if I try to access to http://test.irisa.fr/index.html >>> => Error : Forbidden, You don't have permission to access >>> /index.html on this server. >>> => In error.log : AH00035: access to /index.html denied >>> (filesystem path '/home/web/apache/sites/test/htdocs/index.html') >>> because search permissions are missing on a component of the path. >>> Hi, I have found the solution : the package apache2-mpm-itk in ubuntu 14_04 relies on mpm-itk version 2.4.6-01 => not compatible with apache 2.4.7 In error.log : [Mon Mar 30 06:25:06.335011 2015] [mpm_prefork:notice] [pid 8315] AH00163: Apache/2.4.7 (Ubuntu) mpm-itk/2.4.6-01 PHP/5.5.9-1ubuntu4.6 OpenSSL/1.0.1f configured -- resuming normal operations I have done : - service apache2 stop - aptitude purge apache2-mpm-itk - aptitude purge libapache2-mpm-itk - aptitude install apache2-dev - wget http://mpm-itk.sesse.net/mpm-itk-2.4.7-02.tar.gz - tar xvfz mpm-itk-2.4.7-02.tar.gz - cd mpm-itk-2.4.7-02 - ./configure --with-apxs=apxs2 - make - make install root at apachedmz3-qualif:/etc/apache2/mods-available# cat /etc/apache2/mods-available/mpm_itk.load LoadModule mpm_itk_module /usr/lib/apache2/modules/mpm_itk.so a2enmod mpm_itk service apache2 start And it's OK : [Mon Mar 30 16:59:57.900363 2015] [mpm_prefork:notice] [pid 27736] AH00163: Apache/2.4.7 (Ubuntu) mpm-itk/2.4.7-02 PHP/5.5.9-1ubuntu4.6 OpenSSL/1.0.1f configured -- resuming normal operations Not cool :-( System administrator life is hard... -- --- Philippe -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 3239 bytes Desc: Signature cryptographique S/MIME URL: