CentOS - Feb 2017 - Centos 7 httpd Permission problems with Postfixadmin

More joy with Centos 7.

I am having permission problems with Postfixadmin. I am installing as I have in
my notes I did in Centos6 and it is not working.

I untar Postfixadmin into /usr/share.  The owner is root:root (I even
tried root:apache).  My postfixadmin.conf file has:

alias /mailadmin /usr/share/postfixadmin
<Directory "/usr/share/postfixadmin">
         AllowOverride AuthConfig
</Directory>

And I get when I try fqdn/mailadmin

You don't have permission to access /mailadmin on this server.

When I google this message, I am getting that httpd is not allowing me
access.  I have even added:

allow from all

To the above .conf with no change.

This is not a SELInux problem as I tried 'setenforce 0' and still get
the error.

It is as if there is some new security setting in httpd for files not in the www
dir (default of /var/www/).

Any ideas?

thanks

On Fri, 2017-02-17 at 12:02 -0500, Robert Moskowitz
wrote:
> More joy with Centos 7.
> 
> I am having permission problems with Postfixadmin. I am installing as
> I have in my notes I did in Centos6 and it is not working.
> 
> I untar Postfixadmin into /usr/share.  The owner is root:root (I even
> tried root:apache).  My postfixadmin.conf file has:
> 
> alias /mailadmin /usr/share/postfixadmin
> <Directory "/usr/share/postfixadmin">
> ?        AllowOverride AuthConfig
> </Directory>
> 
> And I get when I try fqdn/mailadmin
> 
> You don't have permission to access /mailadmin on this server.
> 
> 
> It is as if there is some new security setting in httpd for files not
> in the www dir (default of /var/www/).
No, accessing directories outside document root is perfectly acceptable
behaviour as far as I can see.
> 
> Any ideas?
> 
Just to check, you did restart/reload apache after making the changes?

What do the apache logs say about it? That will tell you if it's a
permissions problem or?a redirection issue.

P.

On Feb 17, 2017 12:03 PM, "Robert Moskowitz" <rgm at
htt-consult.com> wrote:

More joy with Centos 7.

I am having permission problems with Postfixadmin. I am installing as I
have in my notes I did in Centos6 and it is not working.

I untar Postfixadmin into /usr/share.  The owner is root:root (I even
tried root:apache).  My postfixadmin.conf file has:

alias /mailadmin /usr/share/postfixadmin
<Directory "/usr/share/postfixadmin">
        AllowOverride AuthConfig
</Directory>

I

What is the setting "allowoveride"? What does it mean?


And I get when I try fqdn/mailadmin

You don't have permission to access /mailadmin on this server.

When I google this message, I am getting that httpd is not allowing me
access.  I have even added:

allow from all

To the above .conf with no change.

This is not a SELInux problem as I tried 'setenforce 0' and still get
the
error.

It is as if there is some new security setting in httpd for files not in
the www dir (default of /var/www/).

Any ideas?

thanks


_______________________________________________
CentOS mailing list
CentOS at centos.org
https://lists.centos.org/mailman/listinfo/centos

> 
> What is the setting "allowoveride"? What does it mean?
> 
> 
It tells apache to obey .htaccess files in the document directory - in
other words it "allows" the .htaccess file to "override" the
configured
parameters. The arguments to it say what subset of commands can be
overridden - AuthConfig allows authorisation configuration.

P.

On 02/17/2017 12:42 PM, Istimsak Abdulbasir wrote:
> On Feb 17, 2017 12:03 PM, "Robert Moskowitz" <rgm at
htt-consult.com> wrote:
>
> More joy with Centos 7.
>
> I am having permission problems with Postfixadmin. I am installing as I
> have in my notes I did in Centos6 and it is not working.
>
> I untar Postfixadmin into /usr/share.  The owner is root:root (I even
> tried root:apache).  My postfixadmin.conf file has:
>
> alias /mailadmin /usr/share/postfixadmin
> <Directory "/usr/share/postfixadmin">
>          AllowOverride AuthConfig
> </Directory>
>
> I
>
> What is the setting "allowoveride"? What does it mean?
https://httpd.apache.org/docs/2.4/mod/core.html#allowoverride

This has been in the default postfixadmin.conf for many years.
>
>
> And I get when I try fqdn/mailadmin
>
> You don't have permission to access /mailadmin on this server.
>
> When I google this message, I am getting that httpd is not allowing me
> access.  I have even added:
>
> allow from all
>
> To the above .conf with no change.
>
> This is not a SELInux problem as I tried 'setenforce 0' and still
get the
> error.
>
> It is as if there is some new security setting in httpd for files not in
> the www dir (default of /var/www/).
>
> Any ideas?
>
> thanks
>
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
>

On 02/17/2017 12:42 PM, Pete Biggs wrote:
> On Fri, 2017-02-17 at 12:02 -0500, Robert Moskowitz wrote:
>> More joy with Centos 7.
>>
>> I am having permission problems with Postfixadmin. I am installing as
>> I have in my notes I did in Centos6 and it is not working.
>>
>> I untar Postfixadmin into /usr/share.  The owner is root:root (I even
>> tried root:apache).  My postfixadmin.conf file has:
>>
>> alias /mailadmin /usr/share/postfixadmin
>> <Directory "/usr/share/postfixadmin">
>>           AllowOverride AuthConfig
>> </Directory>
>>
>> And I get when I try fqdn/mailadmin
>>
>> You don't have permission to access /mailadmin on this server.
>>
>>
>> It is as if there is some new security setting in httpd for files not
>> in the www dir (default of /var/www/).
> No, accessing directories outside document root is perfectly acceptable
> behaviour as far as I can see.
>
>> Any ideas?
>>
> Just to check, you did restart/reload apache after making the changes?
>
> What do the apache logs say about it? That will tell you if it's a
> permissions problem or a redirection issue.
 From error.log:

[Fri Feb 17 12:56:33.478024 2017] [authz_core:error] [pid 5759] [client 
192.168.160.12:48290] AH01630: client denied by server configuration: 
/usr/share/postfixadmin

Which is:

  4 drwxrwxr-x.  17 root apache  4096 Feb 16 19:33 postfixadmin

I originally had ownership of root:root.  Same error.