CentOS - Feb 2017 - Centos 7 httpd Permission problems with Postfixadmin

On 02/17/2017 01:11 PM, Pete Biggs wrote:
>>   From error.log:
>>
>> [Fri Feb 17 12:56:33.478024 2017] [authz_core:error] [pid 5759] [client
>> 192.168.160.12:48290] AH01630: client denied by server configuration:
>> /usr/share/postfixadmin
> So it's an authorisation issue. In your .htaccess file change
>
>        Order allow,deny
>        Allow from all
>
> to the apache 2.4 version
>
>        Require all granted
>
> See http://httpd.apache.org/docs/2.4/upgrading.html
Not there still.  In /var/www/html  I created .htaccess:

# ls -lstra
total 12
4 drwxr-xr-x. 4 root root   4096 Feb  6 16:06 ..
4 drwxr-xr-x. 2 root root   4096 Feb 17 13:32 .
4 -rw-r--r--. 1 root apache   21 Feb 17 13:32 .htaccess

# cat .htaccess
         Require all granted


restarted httpd, and still get the error.

[Fri Feb 17 13:36:17.366525 2017] [authz_core:error] [pid 5844] [client 
192.168.160.12:48370] AH01630: client denied by server configuration: 
/usr/share/postfixadmin

> -----Original Message-----
> From: CentOS [mailto:centos-bounces at centos.org] On Behalf Of Robert
> Moskowitz
> Sent: Friday, February 17, 2017 1:40 PM
> To: CentOS mailing list <centos at centos.org>
> Subject: Re: [CentOS] Centos 7 httpd Permission problems with Postfixadmin
> > So it's an authorisation issue. In your .htaccess file change
> >
> >        Order allow,deny
> >        Allow from all
> >
> > to the apache 2.4 version
> >
> >        Require all granted
> >
> > See http://httpd.apache.org/docs/2.4/upgrading.html
> 
> Not there still.  In /var/www/html  I created .htaccess:
> 
> # ls -lstra
> total 12
> 4 drwxr-xr-x. 4 root root   4096 Feb  6 16:06 ..
> 4 drwxr-xr-x. 2 root root   4096 Feb 17 13:32 .
> 4 -rw-r--r--. 1 root apache   21 Feb 17 13:32 .htaccess
> 
> # cat .htaccess
>          Require all granted
> 
> 
> restarted httpd, and still get the error.
> 
> [Fri Feb 17 13:36:17.366525 2017] [authz_core:error] [pid 5844] [client
> 192.168.160.12:48370] AH01630: client denied by server configuration:
> /usr/share/postfixadmin
Does the conf file that contains the "/usr/share/postfixadmin" alias
also contain a Directory block? Something like this:

Alias /postfixadmin /usr/share/postfixadmin

<Directory "/usr/share/postfixadmin">

...stuff here...

</Directory>

Look for the old style "Order Deny,Allow" and "Deny from
All" and remove them if it does, and put the "Require all
granted" there.

Al McCann

Robert Moskowitz wrote:
> On 02/17/2017 01:11 PM, Pete Biggs wrote:
>>>   From error.log:
>>>
>>> [Fri Feb 17 12:56:33.478024 2017] [authz_core:error] [pid 5759]
[client
>>> 192.168.160.12:48290] AH01630: client denied by server
configuration:
>>> /usr/share/postfixadmin
>> So it's an authorisation issue. In your .htaccess file change
>>
>>        Order allow,deny
>>        Allow from all
>>
>> to the apache 2.4 version
>>
>>        Require all granted
>>
>> See http://httpd.apache.org/docs/2.4/upgrading.html
>
> Not there still.  In /var/www/html  I created .htaccess:
>
> # ls -lstra
> total 12
> 4 drwxr-xr-x. 4 root root   4096 Feb  6 16:06 ..
> 4 drwxr-xr-x. 2 root root   4096 Feb 17 13:32 .
> 4 -rw-r--r--. 1 root apache   21 Feb 17 13:32 .htaccess
>
> # cat .htaccess
>          Require all granted
>
>
> restarted httpd, and still get the error.
>
> [Fri Feb 17 13:36:17.366525 2017] [authz_core:error] [pid 5844] [client
> 192.168.160.12:48370] AH01630: client denied by server configuration:
> /usr/share/postfixadmin
Do you have an authz.conf file?

     mark

On 02/17/2017 01:52 PM, Albert McCann wrote:
>> -----Original Message-----
>> From: CentOS [mailto:centos-bounces at centos.org] On Behalf Of Robert
>> Moskowitz
>> Sent: Friday, February 17, 2017 1:40 PM
>> To: CentOS mailing list <centos at centos.org>
>> Subject: Re: [CentOS] Centos 7 httpd Permission problems with
Postfixadmin
>
>>> So it's an authorisation issue. In your .htaccess file change
>>>
>>>         Order allow,deny
>>>         Allow from all
>>>
>>> to the apache 2.4 version
>>>
>>>         Require all granted
>>>
>>> See http://httpd.apache.org/docs/2.4/upgrading.html
>> Not there still.  In /var/www/html  I created .htaccess:
>>
>> # ls -lstra
>> total 12
>> 4 drwxr-xr-x. 4 root root   4096 Feb  6 16:06 ..
>> 4 drwxr-xr-x. 2 root root   4096 Feb 17 13:32 .
>> 4 -rw-r--r--. 1 root apache   21 Feb 17 13:32 .htaccess
>>
>> # cat .htaccess
>>           Require all granted
>>
>>
>> restarted httpd, and still get the error.
>>
>> [Fri Feb 17 13:36:17.366525 2017] [authz_core:error] [pid 5844] [client
>> 192.168.160.12:48370] AH01630: client denied by server configuration:
>> /usr/share/postfixadmin
> Does the conf file that contains the "/usr/share/postfixadmin"
alias also contain a Directory block? Something like this:
>
> Alias /postfixadmin /usr/share/postfixadmin
>
> <Directory "/usr/share/postfixadmin">
>
> ...stuff here...
>
> </Directory>
>
> Look for the old style "Order Deny,Allow" and "Deny from
All" and remove them if it does, and put the "Require all
granted" there.
Pingo.  I had a 'allow from all' there.  Changed it to:

# cat /etc/httpd/conf.d/postfixadmin.conf
alias /mailadmin /usr/share/postfixadmin
<Directory "/usr/share/postfixadmin">
         AllowOverride AuthConfig
#        allow from all
         Require all granted
</Directory>

and it works.

THANKS.

Going to have to seriously read  that upgrading page...

On 02/17/2017 01:56 PM, m.roth at 5-cent.us wrote:
> Robert Moskowitz wrote:
>> On 02/17/2017 01:11 PM, Pete Biggs wrote:
>>>>    From error.log:
>>>>
>>>> [Fri Feb 17 12:56:33.478024 2017] [authz_core:error] [pid 5759]
[client
>>>> 192.168.160.12:48290] AH01630: client denied by server
configuration:
>>>> /usr/share/postfixadmin
>>> So it's an authorisation issue. In your .htaccess file change
>>>
>>>         Order allow,deny
>>>         Allow from all
>>>
>>> to the apache 2.4 version
>>>
>>>         Require all granted
>>>
>>> See http://httpd.apache.org/docs/2.4/upgrading.html
>> Not there still.  In /var/www/html  I created .htaccess:
>>
>> # ls -lstra
>> total 12
>> 4 drwxr-xr-x. 4 root root   4096 Feb  6 16:06 ..
>> 4 drwxr-xr-x. 2 root root   4096 Feb 17 13:32 .
>> 4 -rw-r--r--. 1 root apache   21 Feb 17 13:32 .htaccess
>>
>> # cat .htaccess
>>           Require all granted
>>
>>
>> restarted httpd, and still get the error.
>>
>> [Fri Feb 17 13:36:17.366525 2017] [authz_core:error] [pid 5844] [client
>> 192.168.160.12:48370] AH01630: client denied by server configuration:
>> /usr/share/postfixadmin
> Do you have an authz.conf file?
No authz.conf anywhere on the system.  Thanks for the advice, but I got 
it now.

> 
> Not there still.  In /var/www/html  I created .htaccess:
> 
> # ls -lstra
> total 12
> 4 drwxr-xr-x. 4 root root   4096 Feb  6 16:06 ..
> 4 drwxr-xr-x. 2 root root   4096 Feb 17 13:32 .
> 4 -rw-r--r--. 1 root apache   21 Feb 17 13:32 .htaccess
> 
> # cat .htaccess
>          Require all granted
> 
> 
> restarted httpd, and still get the error.
> 
> [Fri Feb 17 13:36:17.366525 2017] [authz_core:error] [pid 5844] [client 
> 192.168.160.12:48370] AH01630: client denied by server configuration: 
> /usr/share/postfixadmin
> 
That's not how the .htaccess file works. It needs to be in the
directory specified in the postfixadmin.conf file?- i.e. the
configuration 

<Directory "/usr/share/postfixadmin">
???????? AllowOverride AuthConfig
</Directory>

means to look in the .htaccess file in /usr/share/postfixadmin when
accessing any file in that directory (and below) for authorisation
information.

Putting it in /var/www/html will have no effect.

P.