From: Jess <je...@oz...> - 2001-06-16 13:39:58
|
Hi People, I am trying to determine why Apache is giving an ERROR! Permission Denied message when there is no access restriction in the file system which a standard WIN98 FAT32 Partitioned drive running Windoze 2000 Pro. As far as I can tell there is no restriction in Apache httpd.conf file that would disallow access to the users/members directory or file. So can Dieter or someone who is more intimate with the Perl Code of SQL-Ledger tell me where in the code exactly does the admin.pl attempt to open the "members" file so I can check to see if the is something in the way the file is called or even using a linux based command that may not exist in Windoze 2000 pro. Anyone happy to assist would be welcome. Regards Jess. ----- Original Message ----- From: "Jess" <je...@oz...> To: <sql...@li...> Sent: Friday, 15 June, 2001 5:09 PM Subject: Re: Apache denied access problem. > Hi German, > The access log file for this website is here: > 192.168.1.3 - - [15/Jun/2001:01:16:57 +1000] "GET /sqll/login.pl HTTP/1.1" > 200 1090 > 192.168.1.3 - - [15/Jun/2001:01:16:58 +1000] "GET /sqll/sql-ledger.gif > HTTP/1.1" 304 - > 192.168.1.3 - - [15/Jun/2001:01:17:14 +1000] "GET /sqll/admin.pl HTTP/1.1" > 200 713 > 192.168.1.3 - - [15/Jun/2001:01:17:14 +1000] "GET /sqll/sql-ledger.gif > HTTP/1.1" 304 - > 192.168.1.3 - - [15/Jun/2001:01:17:21 +1000] "POST /sqll/admin.pl HTTP/1.1" > 200 119 > 192.168.1.3 - - [15/Jun/2001:12:46:12 +1000] "GET /sqll/login.pl HTTP/1.1" > 200 1090 > 192.168.1.3 - - [15/Jun/2001:12:46:13 +1000] "GET /sqll/sql-ledger.gif > HTTP/1.1" 304 - > 192.168.1.3 - - [15/Jun/2001:12:46:21 +1000] "GET /sqll/admin.pl HTTP/1.1" > 200 713 > 192.168.1.3 - - [15/Jun/2001:12:46:21 +1000] "GET /sqll/sql-ledger.gif > HTTP/1.1" 304 - > 192.168.1.3 - - [15/Jun/2001:12:46:24 +1000] "POST /sqll/admin.pl HTTP/1.1" > 200 119 > There was no entry in the error log file at all. > What does the codes 200 119 & 200 713 mean? > > I am not sure what is happening. What was the change between 1.2.10 and > 1.4.* in its security coding. I remember Dieter saying something about not > needing to use cookies in 1.4.*. > > Regards Jess > > > > > ----- Original Message ----- > From: "German Duenas" <g_d...@ya...> > To: <sql...@li...> > Sent: Friday, 15 June, 2001 4:01 PM > Subject: Re: Apache denied access problem. > > > > FAT32 and NTFS have different restrictions as you have > > mentioned. I encountered the same problem with apache > > and yes you have to have full access to the directory > > otherwise it will give you error 403. If you go into > > the directory where apache keeps its logs files and > > check file error.log or error1.log you can see the > > actual problem why the file is being locked and > > preventing you access. Jerry > > --- Jess <je...@oz...> wrote: > > > Thanks for the reply Alexander. > > > > > > But as I mentioned below this is on a Windoze 2000 > > > Pro on a FAT32 partition > > > that does not support file system level permissions, > > > so as far as W2K pro is > > > concerned all files on a FAT32 are available to > > > anyone who has user access > > > to that computer. So in this situation I don't > > > believe W2K is restricting > > > access to the users/members. > > > > > > Any other ideas I could persue. > > > > > > Regards Jess > > > > > > > > > ----- Original Message ----- > > > From: "Alexander Orozco" <ao...@pr...> > > > To: <sql...@li...> > > > Sent: Thursday, 14 June, 2001 8:51 PM > > > Subject: RE: Apache denied access problem. > > > > > > > > > > that means that directory is not accessible > > > through apache > > > > you might have to change permissions > > > > start with: > > > > chmod 0777 users/members > > > > chmod 0777 users/members/* > > > > > > > > change to 0777 just to make sure that was the > > > problem, > > > > then tweak the permissions to your desired > > > security level > > > > > > > > -----Original Message----- > > > > From: sql...@li... > > > > > > > > > [mailto:sql...@li...]On > > > Behalf Of Jess > > > > Sent: Thursday, June 14, 2001 3:52 AM > > > > To: sql...@li... > > > > Subject: Apache denied access problem. > > > > > > > > > > > > On version 1.4.5 of SQL-Ledger. > > > > > > > > When I run the admin.pl script I get this error > > > after I press submit with > > > or > > > > without a password. > > > > ----------------- > > > > Error! > > > > Permission denied: users/members > > > > ----------------- > > > > The file in users/members/ is the default > > > "members" that comes with > > > > SQL-Ledger. > > > > > > > > Now this is running under Windoze 2000 Pro but on > > > a FAT32 partition so > > > there > > > > is no direct support for file permissions where > > > the files are. (This is > > > > just a development system, so I can understand how > > > the security system in > > > > Apache works which is currently eluding me.). > > > > So I believe it is Apache restricting access to > > > this area. The virtual > > > host > > > > section is set as: > > > > ----------------------------------------- > > > > <VirtualHost 192.168.10.13> > > > > ServerAdmin me...@oz... > > > > DocumentRoot /www/websites/bookmen > > > > ServerName 192.168.10.13 > > > > ScriptAlias /cgi-bin/ > > > /www/websites/bookmen/cgi-bin/ > > > > <Directory /www/websites/bookmen> > > > > Options FollowSymLinks Includes Multiviews > > > > Order allow,deny > > > > Allow from all > > > > </Directory> > > > > Alias /sqll/ /www/websites/bookmen/sqll/ > > > > <Directory /www/websites/bookmen/sqll> > > > > Options FollowSymLinks ExecCGI Includes > > > Multiviews > > > > </Directory> > > > > ErrorLog /www/websites/bookmen/logs/error_log > > > > TransferLog /www/websites/bookmen/logs/access_log > > > > </VirtualHost> > > > > ---------------------------------------- > > > > > > > > /www/websites/bookmen/sqll is the path to > > > SQL-Ledger tree hierarchy. > > > > > > > > Can anyone see a problem why I would get : > > > > ----------------- > > > > Error! > > > > Permission denied: users/members > > > > ----------------- > > > > > > > > Regards Jess > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > __________________________________________________ > > Do You Yahoo!? > > Spot the hottest trends in music, movies, and more. > > http://buzz.yahoo.com/ > > > > > > > |