403 forbidden

[mufka]

I've setup Apache 1.3.20 on Redhat 7.1. I'm using name based virtual hosts. I can't get any web other than the default apache page to come up. In every case, i get a 403 forbidden error in the browser. In the log for each web I get "GET / HTTP/1.1" 403 210.

I've checked and double checked the permissions and httpd.conf against another working server. Ipchains and iptables are disabled.

 

[ifincham]

Hi,

With a 403 sounds like a permissions problem . Did you 'chown' the content so that the 'apache' user can read it ?

# chown -R apache.apache /var/

http://www/vhost1

In its simplest form you just need something like the following in /etc/httpd/conf/httpd.conf :

NameVirtualHost *

<VirtualHost *>
ServerName

http://www.vhost1.com

UseCanonicalName off
DocumentRoot /

http://www/var/vhost1

</VirtualHost>

<VirtualHost *>
ServerName

http://www.vhost2.com

UseCanonicalName off
DocumentRoot /

http://www/var/vhost2

</VirtualHost>


Reload the config with :

# killall -HUP httpd

then try

http://www.vhost1.com

(having first put some content there of course)

Hope this helps

 

[mufka]

This seems quite bizarre to me. My user and group in httpd.conf are nobody and web. In the past (and on other existing servers) I have always set the ownership on the files in the webs to user='user who will be managing the web' and group = 'web'. I set the user to nobody and it works. I think that will now cause problems for the users uploading the files, won't it?

 

[ifincham]

Hi,

I was quoting from a default redhat apache - in the environment you describe it would be different. The point is that the user under which apache runs needs to be able to access the content . Out of the box a redhat built apache rpm has this in its httpd.conf :

[snip]

# If you wish httpd to run as a different user or group, you must run
# httpd as root initially and it will switch.
#
# User/Group: The name (or #number) of the user/group to run httpd as.
# . On SCO (ODT 3) use &quot;User nouser&quot; and &quot;Group nogroup&quot;.
# . On HPUX you may not be able to use shared memory as nobody, and the
# suggested workaround is to create a user

http://www and

use that user.
# NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET)
# when the value of (unsigned)Group is above 60000;
# don't use Group nobody on these systems!
#
User apache
Group apache

[snip]


Obviously if your 'User' and 'Group' are different then the permissions would be similarly different too.

Regards