Easy - EASY Apache Questions

[chris_y2k_r1]

I am also getting one of those - Forbidden you do not have permission to access /sdkskf/sdkfjsld

The user and Group for the apache server is Apache Apache...

I have tried setting it to run as a superuser (My Login) and it still does not work.... Any help would be greatly appreciated!!

Thanks!!

[foobar47]

Who is the owner of /sdkskf/ dir ?

[daverj]

and what are the permissions of the files you are trying to access?

[chris_y2k_r1]

The owner is Apache... The problem is I don't know exactly file the server is trying to access. I know the directory is /var/www/html/Cacti. That directory's owner and group is Apache. How can I find out what file(s) it's trying to access? I know one of them is index.php but if I execute that file by http://192.168.1.105/Cacti/index.php I still got the permissions error.

[chris_y2k_r1]

A little more info:

[Wed Mar 29 00:14:24 2006] [notice] Apache/2.0.54 (Fedora) configured -- resuming normal operations
[Wed Mar 29 00:14:37 2006] [error] [client 192.168.1.105] client denied by server configuration: /usr/share/cacti
[Wed Mar 29 00:14:37 2006] [error] [client 192.168.1.105] File does not exist: /var/www/html/favicon.ico
[Wed Mar 29 00:14:38 2006] [error] [client 192.168.1.105] client denied by server configuration: /usr/share/cacti
[Wed Mar 29 00:14:39 2006] [error] [client 192.168.1.105] File does not exist: /var/www/html/favicon.ico
[Wed Mar 29 00:14:40 2006] [error] [client 192.168.1.105] client denied by server configuration: /usr/share/cacti
[Wed Mar 29 00:14:40 2006] [error] [client 192.168.1.105] File does not exist: /var/www/html/favicon.ico
[Wed Mar 29 00:14:41 2006] [error] [client 192.168.1.105] client denied by server configuration: /usr/share/cacti
[Wed Mar 29 00:14:41 2006] [error] [client 192.168.1.105] File does not exist: /var/www/html/favicon.ico
[Wed Mar 29 00:14:52 2006] [notice] caught SIGTERM, shutting down
[Wed Mar 29 00:16:13 2006] [notice] core dump file size limit raised to 4294967295 bytes
[Wed Mar 29 00:16:14 2006] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Mar 29 00:16:14 2006] [notice] Digest: generating secret for digest authentication ...
[Wed Mar 29 00:16:14 2006] [notice] Digest: done
[Wed Mar 29 00:16:14 2006] [notice] LDAP: Built with OpenLDAP LDAP SDK
[Wed Mar 29 00:16:14 2006] [notice] LDAP: SSL support unavailable
[Wed Mar 29 00:16:16 2006] [notice] mod_python: Creating 4 session mutexes based on 150 max processes and 0 max threads.
[Wed Mar 29 00:16:16 2006] [notice] Apache/2.0.54 (Fedora) configured -- resuming normal operations
[Wed Mar 29 10:40:52 2006] [notice] caught SIGTERM, shutting down
[Wed Mar 29 10:42:20 2006] [notice] core dump file size limit raised to 4294967295 bytes
[Wed Mar 29 10:42:21 2006] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Mar 29 10:42:21 2006] [notice] Digest: generating secret for digest authentication ...
[Wed Mar 29 10:42:21 2006] [notice] Digest: done
[Wed Mar 29 10:42:21 2006] [notice] LDAP: Built with OpenLDAP LDAP SDK
[Wed Mar 29 10:42:21 2006] [notice] LDAP: SSL support unavailable
[Wed Mar 29 10:42:23 2006] [notice] mod_python: Creating 4 session mutexes based on 150 max processes and 0 max threads.
[Wed Mar 29 10:42:23 2006] [notice] Apache/2.0.54 (Fedora) configured -- resuming normal operations
[Wed Mar 29 11:30:43 2006] [error] [client 192.168.1.105] File does not exist: /var/www/html/Cacti
[Wed Mar 29 11:30:43 2006] [error] [client 192.168.1.105] File does not exist: /var/www/html/favicon.ico
[Wed Mar 29 11:30:51 2006] [error] [client 192.168.1.105] client denied by server configuration: /usr/share/cacti/index.php
[Wed Mar 29 11:30:52 2006] [error] [client 192.168.1.105] File does not exist: /var/www/html/favicon.ico
[Wed Mar 29 11:33:08 2006] [error] [client 192.168.1.105] client denied by server configuration: /usr/share/cacti/
[Wed Mar 29 11:33:08 2006] [error] [client 192.168.1.105] File does not exist: /var/www/html/favicon.ico
[Wed Mar 29 11:33:13 2006] [error] [client 192.168.1.105] client denied by server configuration: /usr/share/cacti
[Wed Mar 29 11:33:13 2006] [error] [client 192.168.1.105] File does not exist: /var/www/html/favicon.ico
[Wed Mar 29 11:34:32 2006] [notice] caught SIGTERM, shutting down
[Wed Mar 29 11:34:35 2006] [notice] core dump file size limit raised to 4294967295 bytes
[Wed Mar 29 11:34:36 2006] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Mar 29 11:34:36 2006] [notice] Digest: generating secret for digest authentication ...
[Wed Mar 29 11:34:36 2006] [notice] Digest: done
[Wed Mar 29 11:34:36 2006] [notice] LDAP: Built with OpenLDAP LDAP SDK
[Wed Mar 29 11:34:36 2006] [notice] LDAP: SSL support unavailable
[Wed Mar 29 11:34:37 2006] [notice] mod_python: Creating 4 session mutexes based on 150 max processes and 0 max threads.
[Wed Mar 29 11:34:37 2006] [notice] Apache/2.0.54 (Fedora) configured -- resuming normal operations

[huw-l]

is /sdkskf/sdkfjsld under /var/www/html? If not then this is probably an SElinux problem. Apache is only allowed to access files under /var/www/html by the default SElinux policy

[BandC]

It may be an SE Linux problem. Look at chcon command and look at file's context settings with ls -Z. Search the forum on chcon, SE Linux, apache.

[chris_y2k_r1]

I'm almost 100% sure that I have selinux disabled. How to I check to see if I do???

[jowah]

Originally Posted by chris_y2k_r1

I'm almost 100% sure that I have selinux disabled. How to I check to see if I do???

Several ways:

1 Use "sestatus"
Example output:

[someguy@localhost ~]$ /usr/sbin/sestatus
SELinux status:                 enabled
SELinuxfs mount:                /selinux
Current mode:                   enforcing
Mode from config file:          enforcing
Policy version:                 20
Policy from config file:        targeted

2 The GUI way.
Start system-config-securitylevel either from a terminal window or from the desktop menu. In English language versions of Fedora Core 5, I think it's "System->Administration->Security level and firewall" or something similar.

Check under the SELinux tab. Should be pretty obvious from there.

[chris_y2k_r1]

Yup, Selinux is disabled... So that's not the problem.

[chris_y2k_r1]

Originally Posted by huw-l

is /sdkskf/sdkfjsld under /var/www/html? If not then this is probably an SElinux problem. Apache is only allowed to access files under /var/www/html by the default SElinux policy

Sorry man, I was just using that string as an example. /sdkskf/sfk doesn't exist it's the cacti directory I specified.

[jowah]

Originally Posted by chris_y2k_r1

Yup, Selinux is disabled... So that's not the problem.

Hint 1: your log files:

...
[Wed Mar 29 00:14:38 2006] [error] [client 192.168.1.105] client denied by server configuration: /usr/share/cacti
...

(ad nauseum)

Hint 2: /etc/httpd/conf.d/cacti.conf

You do the math...

[foobar47]

Did you follow this one :

http://www.cacti.net/downloads/docs/...tall_unix.html

[chris_y2k_r1]

Originally Posted by jowah

Hint 1: your log files:
(ad nauseum)

Hint 2: /etc/httpd/conf.d/cacti.conf

You do the math...

Thanks you Thanks Jowah. I am not a Linux expert but I should atleast be able to read! Doh!

Do you run cacti???

[chris_y2k_r1]

Originally Posted by foobar47

Did you follow this one :

http://www.cacti.net/downloads/docs/...tall_unix.html

Yes I did.

There alot more to it than what the list there.

My problem is not that when I run poller.php from the command line I get no output other than:
segmentation fault.

I haven't the slightest what that means. I am assuming that the problem lies in php/mysql. I am very new to each of these and I am not sure where to beign trouble shooting - especially with the lack out information. I have posted over on the cacti forums but they are completely dead - no one responds over there so I thank all of you for your help and any additional inpute would be great!!