Xymon Mailing List Archive search

Keep getting 403 Forbidden on /xymon

list Jeremy Laidman
Fri, 6 Dec 2013 17:41:17 +1100
Message-Id: <CAAnki7C7D1=FsSRiHh+fKBk-6AeDjqFcoPLC==user-6b766eb57061@xymon.invalid>

On 6 December 2013 11:49, Doug Strick <user-1c52a486cbc5@xymon.invalid> wrote:

AH01630: client denied by server configuration:
/usr/local/xymon/server/www/
<Directory />
    AllowOverride none
    Require all denied
</Directory>
<Directory "/usr/local/xymon/server/www">
    Options Indexes FollowSymLinks Includes MultiViews
    Order allow,deny
    Allow from all
</Directory>
I notice that the distro-provided config uses "require all ..." whereas the
Xymon config uses "... from all".  From the Apache v2.2 to v2.4 upgrade
doco at

  http://httpd.apache.org/docs/current/upgrading.html#run-time

"In 2.4, such access control is done in the same way as other authorization
checks, using the new module
mod_authz_host<http://httpd.apache.org/docs/current/mod/mod_authz_host.html>;.
The old access control idioms should be replaced by the new authentication
mechanisms, although for compatibility with old configurations, the new
module mod_access_compat<http://httpd.apache.org/docs/current/mod/mod_access_compat.html>is
provided."

I suspect the "allow from all" is no longer valid, and you need to change
this from "allow from all" "require all granted".  Could be that there's a
warning in the Apache logs at the time you restarted it.

Alternatively, enable the compatibility module as indicated.

It looks like the Xymon installer needs to be updated to detect the use of
the new authorization module and install in a version of config files that
are compatible with Apache v2.4.

Cheers
Jeremy