[Xymon] Keep getting 403 Forbidden on /xymon

[Jeremy Laidman]

On 6 December 2013 11:49, Doug Strick <douglas.strick at gmail.com> wrote:


> AH01630: client denied by server configuration:
> /usr/local/xymon/server/www/
>


> <Directory />
>     AllowOverride none
>     Require all denied
> </Directory>
>

> <Directory "/usr/local/xymon/server/www">
>     Options Indexes FollowSymLinks Includes MultiViews
>     Order allow,deny
>     Allow from all
> </Directory>

I notice that the distro-provided config uses "require all ..." whereas the
Xymon config uses "... from all".  From the Apache v2.2 to v2.4 upgrade
doco at

  http://httpd.apache.org/docs/current/upgrading.html#run-time

"In 2.4, such access control is done in the same way as other authorization
checks, using the new module
mod_authz_host<http://httpd.apache.org/docs/current/mod/mod_authz_host.html>.
The old access control idioms should be replaced by the new authentication
mechanisms, although for compatibility with old configurations, the new
module mod_access_compat<http://httpd.apache.org/docs/current/mod/mod_access_compat.html>is
provided."

I suspect the "allow from all" is no longer valid, and you need to change
this from "allow from all" "require all granted".  Could be that there's a
warning in the Apache logs at the time you restarted it.

Alternatively, enable the compatibility module as indicated.

It looks like the Xymon installer needs to be updated to detect the use of
the new authorization module and install in a version of config files that
are compatible with Apache v2.4.

Cheers
Jeremy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20131206/47a263ab/attachment.html>