CentOS - Feb 2017 - Centos 7 httpd Permission problems with Postfixadmin

On 02/17/2017 12:42 PM, Pete Biggs wrote:
> On Fri, 2017-02-17 at 12:02 -0500, Robert Moskowitz wrote:
>> More joy with Centos 7.
>>
>> I am having permission problems with Postfixadmin. I am installing as
>> I have in my notes I did in Centos6 and it is not working.
>>
>> I untar Postfixadmin into /usr/share.  The owner is root:root (I even
>> tried root:apache).  My postfixadmin.conf file has:
>>
>> alias /mailadmin /usr/share/postfixadmin
>> <Directory "/usr/share/postfixadmin">
>>           AllowOverride AuthConfig
>> </Directory>
>>
>> And I get when I try fqdn/mailadmin
>>
>> You don't have permission to access /mailadmin on this server.
>>
>>
>> It is as if there is some new security setting in httpd for files not
>> in the www dir (default of /var/www/).
> No, accessing directories outside document root is perfectly acceptable
> behaviour as far as I can see.
>
>> Any ideas?
>>
> Just to check, you did restart/reload apache after making the changes?
>
> What do the apache logs say about it? That will tell you if it's a
> permissions problem or a redirection issue.
 From error.log:

[Fri Feb 17 12:56:33.478024 2017] [authz_core:error] [pid 5759] [client 
192.168.160.12:48290] AH01630: client denied by server configuration: 
/usr/share/postfixadmin

Which is:

  4 drwxrwxr-x.  17 root apache  4096 Feb 16 19:33 postfixadmin

I originally had ownership of root:root.  Same error.

> 
>  From error.log:
> 
> [Fri Feb 17 12:56:33.478024 2017] [authz_core:error] [pid 5759] [client 
> 192.168.160.12:48290] AH01630: client denied by server configuration: 
> /usr/share/postfixadmin
So it's an authorisation issue. In your .htaccess file change?

  ????Order allow,deny
???  ?Allow from all

to the apache 2.4 version 

      Require all granted

See http://httpd.apache.org/docs/2.4/upgrading.html

P.

On 02/17/2017 01:11 PM, Pete Biggs wrote:
>>   From error.log:
>>
>> [Fri Feb 17 12:56:33.478024 2017] [authz_core:error] [pid 5759] [client
>> 192.168.160.12:48290] AH01630: client denied by server configuration:
>> /usr/share/postfixadmin
> So it's an authorisation issue. In your .htaccess file change
>
>        Order allow,deny
>        Allow from all
>
> to the apache 2.4 version
>
>        Require all granted
>
> See http://httpd.apache.org/docs/2.4/upgrading.html
Thing is, I don't have an .htaccess file ANYWHERE on this system.  I 
checked.

I'll make one.

On 02/17/2017 01:11 PM, Pete Biggs wrote:
>>   From error.log:
>>
>> [Fri Feb 17 12:56:33.478024 2017] [authz_core:error] [pid 5759] [client
>> 192.168.160.12:48290] AH01630: client denied by server configuration:
>> /usr/share/postfixadmin
> So it's an authorisation issue. In your .htaccess file change
>
>        Order allow,deny
>        Allow from all
>
> to the apache 2.4 version
>
>        Require all granted
>
> See http://httpd.apache.org/docs/2.4/upgrading.html
Not there still.  In /var/www/html  I created .htaccess:

# ls -lstra
total 12
4 drwxr-xr-x. 4 root root   4096 Feb  6 16:06 ..
4 drwxr-xr-x. 2 root root   4096 Feb 17 13:32 .
4 -rw-r--r--. 1 root apache   21 Feb 17 13:32 .htaccess

# cat .htaccess
         Require all granted


restarted httpd, and still get the error.

[Fri Feb 17 13:36:17.366525 2017] [authz_core:error] [pid 5844] [client 
192.168.160.12:48370] AH01630: client denied by server configuration: 
/usr/share/postfixadmin