[Xymon] Apache problem.

[Japheth Cleaver]

On 9/24/2019 12:30 PM, Trever Noggle wrote:
> I now have Xymon built and running.  But I am unable to view the web 
> interface.  I copied the xymon apache config file to /etc/conf.d 
> directory and have confirmed that permissions are set to allow apache 
> all the way in.  It is failing with this error: Symbolic link not 
> allowed or link target not accessible: /home/xymon/server/www/index.html
>
> strace shows: [pid  4941] stat("/home/xymon/server/www/index.html", 
> 0x7ffd6bd288a0) = -1 EACCE S (Permission denied)
>
>
> here is the directory listing:
>
> [root at monsrv www]# ls -la
> total 60
> drwxr-xr-x. 10 xymon apache   195 Sep 24 13:24 .
> drwxr-xr-x.  9 xymon apache   104 Sep 24 12:17 ..
> -rw-r--r--.  1 xymon xymon   5283 Sep 24 13:24 critical.html
> drwxr-xr-x.  2 xymon apache  4096 Sep 24 12:17 gifs
> drwxr-xr-x.  3 xymon apache  4096 Sep 24 12:17 help
> drwxr-xr-x.  2 xymon apache     6 Sep 24 12:17 html
> lrwxrwxrwx.  1 xymon xymon     10 Sep 24 13:24 index.html -> xymon.html
> drwxr-xr-x.  2 xymon apache   138 Sep 24 12:17 menu
> -rw-r--r--.  1 xymon xymon  21609 Sep 24 13:24 nongreen.html
> drwxr-xr-x.  2 xymon apache     6 Sep 24 12:17 notes
> -rw-r--r--.  1 xymon xymon   7193 Sep 24 13:24 red.html
> drwxrwxr-x.  2 xymon apache     6 Sep 24 12:17 rep
> drwxrwxr-x.  2 xymon apache     6 Sep 24 12:17 snap
> drwxr-xr-x.  2 xymon apache     6 Sep 24 12:17 wml
> -rw-r--r--.  1 xymon xymon  12044 Sep 24 13:24 xymon.html
>
> Not sure if the fact that xymon.html is set to 644 or not.  I have 
> tried to change it to 655 and it keeps getting reset back to 644. Even 
> if I hit it before it changes back I still get the above error.


The most common cause of this is some path in /home/xymon/server/www/ 
not being readable/executable as a directory, but if you've confirmed 
this you might also want to double-check that both Indexes and 
FollowSymLinks are enabled as Options in your apache config for the 
location in question. (You could also try hitting xymon.html directly to 
exclude the symlink.)

Finally, if you're compiling from source you'll want to check the 
audit.log for SELinux denials if you have it enabled and enforcing. 
Setting enforcement to 'Permissive' should be a useful test.

Side note: What issues were you having with the RPM packages on 
attempted install?

HTH
-jc