Return-Path: 
 <users-return-39655-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: (qmail 76481 invoked from network); 26 Mar 2004 03:24:10 -0000
Received: from daedalus.apache.org (HELO mail.apache.org) (208.185.179.12)
  by minotaur-2.apache.org with SMTP; 26 Mar 2004 03:24:10 -0000
Received: (qmail 57677 invoked by uid 500); 26 Mar 2004 03:23:40 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 57658 invoked by uid 500); 26 Mar 2004 03:23:39 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
list-post: <mailto:users@httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 57636 invoked from network); 26 Mar 2004 03:23:39 -0000
Received: from unknown (HELO out2.smtp.messagingengine.com) (66.111.4.26)
  by daedalus.apache.org with SMTP; 26 Mar 2004 03:23:39 -0000
X-Sasl-enc: dVVmsqhu2uyRfz0HixXEgQ 1080271426
Received: from bronfman504 (Toronto-HSE-ppp3744693.sympatico.ca [67.68.82.8])
	by mail.messagingengine.com (Postfix) with ESMTP id D8992878BF5
	for <users@httpd.apache.org>; Thu, 25 Mar 2004 22:23:46 -0500 (EST)
Date: Thu, 25 Mar 2004 22:23:45 -0500 (Eastern Standard Time)
From: Joshua Slive <joshua@slive.ca>
To: users@httpd.apache.org
In-Reply-To: <200403251907.48173.andrew@azulmx.com>
Message-ID: <Pine.WNT.4.58.0403252221380.2276@bronfman504>
References: <200403251626.24514.andrew@azulmx.com>
 <Pine.WNT.4.58.0403251953150.2276@bronfman504>
 <200403251907.48173.andrew@azulmx.com>
X-X-Sender: slive@fastmail.fm@mail.messagingengine.com
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
Subject: Re: [users@httpd] FollowSymLinks in 2.0
X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N


On Thu, 25 Mar 2004, Andrew Thomas Blake wrote:
> If I do a link to the same directory (cgi-bin) or the parent directory (also
> mentioned in a <Directory> section in httpd.conf) my cgi script works fine.
>
> But if I move the destination to a different directory (relinking of course),
> I then get:

> You don't have permission to access /cgi-bin/a.cgi on this server.
>
> Additionally, a 403 Forbidden error was encountered while trying to use an
> ErrorDocument to handle the request.
> Apache/2.0.40 Server at iifac.loc Port 80
> *******************************
>
> (I'm assuming that the note about the error document is irrelevant; I'll fix
> that later...)

Maybe, maybe not.  You should see two error messages in the error log.
You might be getting confused about which error comes from where.

> and in the error log:
>
> *********************************
> [Thu Mar 25 19:00:06 2004] [error] [client 127.0.0.1] Symbolic link not
> allowed: /home/hosts/iifac/cgi-bin/a.cgi
> ********************************

Show us what the relvant part of your config looks like.

Also, you are using an ancient version of Apache 2.0.  I don't know any
changes that would affect this particular problem, but it is in general
hard to debug a two-year-old version of the server.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org