Dotaz: Roundcube web access permission error #5304 - Debian VPS install

[faidron]

Příloha:

• apache_conf.rtf (1801 bytů)

Nevier sa spojiť s webmailom inštaloval som Roundcube. a zizstil som, že tento web mail ma BUG cez ktorý sa neviem dostať. Pri zadani URL dostanem:

You are not permitted to access the requested URL.

Našiel som configurák a nepomohlo:

https://github.com/NethServer/dev/issues/5304

V prilohe prikladam aj configuračný email, ktorý som menil, ale nefunguje mi aj tak.

---

---

Odpovědi

[NN]

Mnoho moznosti, nemas zavedeny alias modul, spatny vlastnik, spatna prava na souborech..

[V]

A to neni v logu apache vidět kam byl zamítnutý přístup?

[faidron]

./error.log:[Thu Nov 16 14:43:03.102505 2017] [authz_core:error] [pid 11712] [client ::1:46916] AH01630: client denied by server configuration: /var/lib/roundcube

root@euve258500:/var/lib/roundcube# cd /var/lib/roundcube
root@euve258500:/var/lib/roundcube# ll
total 20
1573524 drwxr-x---  2 www-data www-data 4096 May  1  2017 temp
1573531 lrwxrwxrwx  1 root     root       28 May  1  2017 program -> /usr/share/roundcube/program
1573528 lrwxrwxrwx  1 root     root       19 May  1  2017 logs -> ../../log/roundcube
1573526 lrwxrwxrwx  1 root     root       14 May  1  2017 config -> /etc/roundcube
1574143 lrwxrwxrwx  1 root     root       31 Nov  9 06:45 robots.txt -> /usr/share/roundcube/robots.txt
1574141 lrwxrwxrwx  1 root     root       30 Nov  9 06:45 index.php -> /usr/share/roundcube/index.php
1574139 lrwxrwxrwx  1 root     root       23 Nov  9 06:45 .htaccess -> /etc/roundcube/htaccess
1573523 drwxr-xr-x  2 root     root     4096 Nov 10 15:09 skins
1573522 drwxr-xr-x  2 root     root     4096 Nov 10 15:09 plugins
1573521 drwxr-xr-x  5 root     root     4096 Nov 13 11:09 .
 524290 drwxr-xr-x 52 root     root     4096 Nov 16 13:28 ..

Adresár sa dokazuje na konfiguračné súbory, nič konkrétne.

[V]

Neměla by mít instalace roundcube stejná práva jako apache? Tj. asi www-data:www-data namísto root:root?

[n]

Tak ten "bug" zjevne nebude v roundcube... Ty permissions jsou taky v poradku, apache to cist muze. Nabizi se nekolik otazek:

• Zkonfigurovals to jak je popsano v README?
• Odbornym pohledem na https://github.com/NethServer/nethserver-roundcubemail/blob/master/root/etc/e-smith/templates/etc/httpd/conf.d/roundcubemail.conf/10base bych to cekal v /usr/share/roundcubemail, kam i vedou u tebe ty symlinky, proc ty se divas a apache zkousi lezt do /var/lib/roundcube?
• Co je v tom .htaccess?

[faidron]

Příloha:

• :var:lib:roundcube#.pdf (20913 bytů)

.htaccess posielam v prilohe, configuraciou je problem, lebo Apache sa nespusti, musim to editovat len na : Alias /webmail /var/lib/roundcubes tam mi ukaze : ERROR 403 - Forbidden!

server APACHE sa nespusti Kolli: Require { $roundcubemail{access} eq "public" ? "all granted" : "ip $localAccess" }

Nov 20 14:09:52 euve258500 apachectl[3468]: AH00526: Syntax error on line 11 of /etc/apache2/conf-enabled/roundcube.conf:
Nov 20 14:09:52 euve258500 apachectl[3468]: Unknown Authz provider: {
Nov 20 14:09:52 euve258500 apachectl[3468]: Action 'start' failed.
Nov 20 14:09:52 euve258500 apachectl[3468]: The Apache error log may have more information.
root@euve258500:/var/lib/roundcube# vi /etc/apache2/conf-enabled/roundcube.conf

root@euve258500:/var/lib/roundcube# cat /etc/apache2/conf-enabled/roundcube.conf
 Alias /webmail /var/lib/roundcube

#
#Round Cube Webmail is a browser-based multilingual IMAP client
# 
#Round Cube Webmail is a browser-based multilingual IMAP client
# 

#Alias /roundcubemail /usr/share/roundcubemail

toto vobec neviem kde inde nastavim

roundcubemail=configuration
   PluginsList=managesieve,markasjunk
   Server=localhost
   access=private

pozri este setup pre Debian: perfect-server

Tak ten "bug" zjevne nebude v roundcube... Ty permissions jsou taky v poradku, apache to cist muze. Nabizi se nekolik otazek:

• Zkonfigurovals to jak je popsano v README?
• Odbornym pohledem na https://github.com/NethServer/nethserver-roundcubemail/blob/master/root/etc/e-smith/templates/etc/httpd/conf.d/roundcubemail.conf/10base bych to cekal v /usr/share/roundcubemail, kam i vedou u tebe ty symlinky, proc ty se divas a apache zkousi lezt do /var/lib/roundcube?
• Co je v tom .htaccess?

[n]

Jo promin, prehlidnul jsem nadpis, ty jsi na Debianu, nainstalovals to uplne jinak a ten na CentOSu zalozeny NethServer a jeho stary packaging bug s tvym systemem nema vubec nic spolecneho...

Jaks tam teda ten Roundcube nainstaloval? Z nejakeho baliku? Ktereho? Kazdopadne jen tak pro zacatek, vsechny zmeny, kteres udelal na zaklade NethServeru samozrejme vyhod, nemaji s tebou nic spolecneho.

[faidron]

apt-get install roundcube roundcube-core roundcube-mysql roundcube-plugins

Ano zmeny ktore popisujes tak ako si pisal mi nefunguju zakomentoval som ich v konfiguraku.

Round cube on Debian

Nejde

[faidron]

"Nejde" znamena presne co? Zkus pro zacatek nadefinovat neco primitivniho jako treba

mkdir /tmp/test
chmod 755 /tmp/test
touch /tmp/test/index.html
chmod 644 
/tmp/test/index.html

Do konfigurace apache pridej

Alias /test /tmp/test

Restartuj Apache

curl -I http://localhost/test ? Co to necha v logu?

[faidron]

root@euve258500:/etc/apache2/conf-enabled# curl -I http://localhost/test HTTP/1.1 403 Forbidden Date: Thu, 23 Nov 2017 12:05:24 GMT Server: Apache/2.4.25 (Debian) Content-Type: text/html; charset=iso-8859-1

[n]

Vyborne. Ted se konecne podivej do sve konfigurace Apache, proc, kde a jak je pristup uplne vsude zakazan. Pak konfiguraci zmen tak, aby zakazan nebyl.

[faidron]

riesenim je upravit alias v configuraku (DEBIAN)!! na: Alias /phpmyadmin /usr/share/phpmyadmin

adresar phpmuadmin, funguje:

root@euve258500:/etc/apache2# curl -I http://localhost/phpmyadmin HTTP/1.1 301 Moved Permanently Date: Fri, 24 Nov 2017 12:32:50 GMT Server: Apache/2.4.25 (Debian) Location: http://localhost/phpmyadmin/ Content-Type: text/html; charset=iso-8859-1

/etc/apache2/conf-enabled root@euve258500:/etc/apache2/conf-enabled#