Re: [gentoo-user] Apache 2.4 can not access server subdirectory

On 10/29/2020 10:53 AM, Michael wrote:
> On Thursday, 29 October 2020 14:10:07 GMT thelma@×××××××××××.com wrote:
>> On 10/29/2020 06:21 AM, Remco Rijnders wrote:
>>> On Wed, Oct 28, 2020 at 10:36:12PM -0600, thelma wrote in
>>>
>>> <7b3d3416-77b0-02eb-ad05-f717fdf0b6a4@×××××××××××.com>:
>>>> After installing apache 2.4 I can not access server subdirectory:
>>>> server/admin/index.html
>>>>
>>>> Forbiden
>>>> You don't have permission to access /admin/index.html on this server
>>>>
>>>> I can access index.html in a directory below /admin (server/index.html)
>>>> but not the server/admin/index.html
>>>
>>> That seems to suggest that either the permissions or ownership of
>>> admin/index.html are different from admin/server/index.html, or that
>>> there is a
>>> difference of that kind between the directories admin/ and admin/server.
>>> Are
>>> they?
>>
>> Here are the permissions:
>>
>> index on server/
>> -rw-r--r--  1 root     root        19078 Jan 14  2011 index.php
>
> The above is a .php file.

Yes, it is and I can read that file.  The files that I can not access
are in:
server/admin/index.html

>
>
>> index on server/admin/
>> drwxr-xr-x  6 root     root         4096 Oct 28 22:08 admin
>> -rwxrwxrwx  1 apache apache   428 Oct 28 16:44 index.html
>
> You shouldn't need apache:apache or 0777 ownership of this file which is very
> insecure, unless apache is meant to be editing it live.  Normally root:root
> and 0755 is what is used.

Yes, I'll change that.  I just use it temporarily as I run out of ideas
to try :-/

>
> Is 'server/' a subdirectory of '/var/www/'?

Yes

> .htaccess won't work if you have disabled it with 'AllowOverride None'.

Thank you for the pointer.  I just change this directive in apache.conf
for /var/www/  and restarted apache but there is no difference.  I still
can not access /server/admin/ directory from apache.  server =
/var/www/html/catalog/

This is from apache.conf

<Directory />
        Options FollowSymLinks
        AllowOverride None
        Require all denied
</Directory>

<Directory /usr/share>
        AllowOverride None
        Require all granted
</Directory>

<Directory /var/www/>
        Options FollowSymLinks
        AllowOverride All
        Require all granted
</Directory>

I just search all server .htaccess files for "AllowOverride" but none is
active in these files.
grep -Rnw '/var/www/html/catalog/' -e 'AllowOverride'

>
>> It works on Apache 2.2 but not Apache 2.4
>
> Directives changed on version 2.4.  It would be worth familiarising yourself
> with the latest:
>
> https://httpd.apache.org/docs/2.4/upgrading.html
>