Return-Path: 
 <users-return-55897-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: (qmail 93187 invoked from network); 9 Sep 2005 20:00:54 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur.apache.org with SMTP; 9 Sep 2005 20:00:54 -0000
Received: (qmail 55492 invoked by uid 500); 9 Sep 2005 20:00:44 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 55471 invoked by uid 500); 9 Sep 2005 20:00:43 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 55458 invoked by uid 99); 9 Sep 2005 20:00:43 -0000
Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 09 Sep 2005 13:00:43 -0700
X-ASF-Spam-Status: No, hits=0.5 required=10.0
	tests=RCVD_BY_IP,SPF_HELO_PASS,SPF_PASS,WEIRD_PORT
X-Spam-Check-By: apache.org
Received-SPF: pass (asf.osuosl.org: domain of jslive@gmail.com designates
 64.233.184.192 as permitted sender)
Received: from [64.233.184.192] (HELO wproxy.gmail.com) (64.233.184.192)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 09 Sep 2005 13:00:55 -0700
Received: by wproxy.gmail.com with SMTP id i4so1754767wra
        for <users@httpd.apache.org>; Fri, 09 Sep 2005 13:00:41 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=fp/SZ1wjDa0WtBUy3cAkAZymbXZhwD6O+19pzMg/bHOU+lQKlPNDt4rSEg6QdeNcyFsocZnVFvh5xGQpcSr1KyOJcQ2c3HP+yyIuiB6jrLLqcaLzw10dAIN52NE+stXV642YbhTRReYTIzmLR+UwuxnwpEB0tIDbCZ6lhojNCjg=
Received: by 10.54.14.42 with SMTP id 42mr655199wrn;
        Fri, 09 Sep 2005 13:00:41 -0700 (PDT)
Received: by 10.54.65.4 with HTTP; Fri, 9 Sep 2005 13:00:41 -0700 (PDT)
Message-ID: <e498c166050909130040f74060@mail.gmail.com>
Date: Fri, 9 Sep 2005 16:00:41 -0400
From: Joshua Slive <jslive@gmail.com>
Reply-To: jslive@gmail.com
To: users@httpd.apache.org
In-Reply-To: <4321CE96.3080203@forrie.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <4320B2DA.7020506@forrie.com>
	 <e498c1660509081759230e9b7e@mail.gmail.com>
	 <4321BA46.3050102@forrie.com>
	 <e498c166050909100324ba2d25@mail.gmail.com>
	 <4321C186.2090308@forrie.com>
	 <e498c16605090910245817f4d1@mail.gmail.com>
	 <e498c16605090910502313e8bd@mail.gmail.com>
	 <4321CE96.3080203@forrie.com>
X-Virus-Checked: Checked by ClamAV on apache.org
Subject: Re: [users@httpd] Proper configuration of FollowSymLinks in 2.0.54
X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N

On 9/9/05, Forrest Aldrich <forrie@forrie.com> wrote:
>  Okay here's what happened.
> =20
>  My config:
> =20
> =20
> User www
>  Group www
>  ServerName forrie.com
>  DocumentRoot /home/test
>  Listen *:8091
> =20
>  <Directory />
>  Options All
>  </Directory>
> =20
>  ErrorLog        /var/log/httpd-error.log
> =20
>  If I do a "ln -s /usr/local/shares/forrie/files ." into the above
> DocumentRoot, I get the proper symlink:
> =20
>  files -> /usr/local/shares/forrie/files
> =20
>  And I get this error:
> =20
>  [Fri Sep 09 13:49:33 2005] [error] [client 192.168.1.99] Symbolic link n=
ot
> allowed: /hom
>  e/test/files
> =20
>  BUT...
> =20
>  If I create a file "test2" in the ".." directory, containing "foo", then
> "ln -s /home/test2 ." which gives me:
> =20
>  test2 -> /home/test2
> =20
>  I can get to it via the browser.
> =20
>  Now I'm suspicious of a filesystem item with FreeBSD-6.0 -- the symblic
> link to "files" is on the second hard drive, whereas the first is on the
> same disk.
> =20
>  Other than that possibility, I'm at a loss here.

Ok.  I think I've got it.

Try this:
mkdir /home/test2/test3/
echo hello > /home/test2/test3/index.txt
ln -s /home/test2/test3/ /home/test/test3
chmod -x /home/test2
lynx http://localhost:8091/index.txt

A similar setup gave me the error you found.

The problem is the file permissions on the target of the symlink. One
of the parent directories of the path leading to your file does not
give search permissions.

So this was a configuration issue all along, but was made difficult to
diagnose by an innacurate error message in the error log.  I believe
the error message bug is reported here:
http://issues.apache.org/bugzilla/show_bug.cgi?id=3D28515

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org