Return-Path: Delivered-To: apmail-httpd-users-archive@www.apache.org Received: (qmail 38803 invoked from network); 30 Jan 2006 19:45:44 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 30 Jan 2006 19:45:44 -0000 Received: (qmail 38989 invoked by uid 500); 30 Jan 2006 19:45:29 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 38980 invoked by uid 500); 30 Jan 2006 19:45:28 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 38969 invoked by uid 99); 30 Jan 2006 19:45:28 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 30 Jan 2006 11:45:28 -0800 X-ASF-Spam-Status: No, hits=0.3 required=10.0 tests=HTML_FONT_BIG,HTML_MESSAGE X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [158.130.70.79] (HELO stag.seas.upenn.edu) (158.130.70.79) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 30 Jan 2006 11:45:27 -0800 Received: from [10.0.1.2] (c-68-37-196-219.hsd1.nj.comcast.net [68.37.196.219]) (authenticated bits=0) by stag.seas.upenn.edu (8.13.3/8.12.10) with ESMTP id k0UJj1cE021770 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NOT) for ; Mon, 30 Jan 2006 14:45:05 -0500 Mime-Version: 1.0 (Apple Message framework v746.2) To: users@httpd.apache.org Message-Id: Content-Type: multipart/alternative; boundary=Apple-Mail-7--718166427 References: <8943626B-D13F-42BE-9AE7-1356CDB5B20D@seas.upenn.edu> From: "Dr. Stephen Judd" Date: Mon, 30 Jan 2006 14:45:07 -0500 X-Mailer: Apple Mail (2.746.2) X-Virus-Checked: Checked by ClamAV on apache.org Subject: [users@httpd] permissions problem X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N --Apple-Mail-7--718166427 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed I'm confused about something in the security model of my Apache-run website. I can access all the files that are grandchildren of my DocumentRoot, (i.e. any file in DocumentRoot/radar is accessible), but none that are great grandchildren (i.e. any file in DocumentRoot/radar/data is not accessible). Instead I get this: > Forbidden > You don't have permission to access /radar/data/hi3.html on this > server. > The message dumped out on the httpd/error_log is this: > [Mon Jan 30 15:54:49 2006] [error] (13)Permission denied: access > to /radar/data/hi3.html denied Note that this is NOT a "forbidden by rule" message. Hence I believe the issue should be one of file permissions, not one of Apache configuration. The permissions on the radar directory are these: > drwxr-xr-x 3 radar radargrp 4096 Jan 27 22:21 radar The permissions on the data directory are these: > drwxrwxrwx 4 radar radargrp 4096 Jan 26 09:13 data More open you cannot get! Why can radar/data/hi3.html not be accessed??? sj --Apple-Mail-7--718166427 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=ISO-8859-1
I'm confused about = something in the security model of my Apache-run website.
I can = access all the files that are grandchildren of=A0my = DocumentRoot,=A0
(i.e. any file in DocumentRoot/radar is = accessible),
but=A0none that are great = grandchildren
(i.e. any file in DocumentRoot/radar/data is not = accessible).
Instead I get this:
You don't have permission to access /radar/data/hi3.html on this = server.

The message dumped out on the httpd/error_log = is this:
[Mon Jan 30 = 15:54:49 2006] [error] (13)Permission denied: access to = /radar/data/hi3.html denied
Note that this = is NOT a "forbidden by rule" message. Hence I believe the issue = should=A0
be one of file permissions, not one of Apache = configuration.

The permissions on the = radar directory are these:
drwxr-xr-x=A0 3 radar = radargrp 4096 Jan 27 22:21 radar
The = permissions on the data directory are these:
drwxrwxrwx=A0 4 radar radargrp 4096 Jan 26 09:13 = data
More open you cannot = get!

Why can = radar/data/hi3.html not be accessed???
sj

= --Apple-Mail-7--718166427--