AW: [rt-users] Problem: Apache2 and FastCGI under SuSE9.3

[HAM-MI-IC Torsten Brumm]

Sorry to disturb again. error found, in Apache2 is a default entry in
/etc/apache2/httpd.conf

# forbid access to the entire filesystem by default
<Directory />
    Options None
    AllowOverride None
    Order deny,allow
    Allow from all
</Directory> 

This is needed to be not so restrictive!


 Thanks in advance
 ....
    : Torsten Brumm
    : IT Security Engineer
    :
    : Kuehne + Nagel
    : HAM - MI-C
    :
    : Ferdinand Strasse 29-33
    : 20095 Hamburg
    :
    : +49 (40) 329 15 199
    : +49 (40) 329 15 500
    :
    : torsten.brumm at kuehne-nagel.com
    : www.kn-portal.com
    : icq: 78258840
    ....
-----Ursprüngliche Nachricht-----
Von: rt-users-bounces at lists.bestpractical.com
[mailto:rt-users-bounces at lists.bestpractical.com] Im Auftrag von HAM-MI-IC
Torsten Brumm
Gesendet: Dienstag, 13. September 2005 12:03
An: rt-users at lists.bestpractical.com
Betreff: [rt-users] Problem: Apache2 and FastCGI under SuSE9.3

Hi RT Gurus,

i'm going crazy with the rt/apache/fastCGI Config.

i set up a new system under SUSE 9.3 with Apache2 and FastCGI. I have done
all the config steps. I have build RT with the following options:

configure --with-db-rt-pass=password --with-web-user=wwwrun
--with-web-group=www --with-rt-group=rt
--with-apachectl=/usr/sbin/apache2ctl 

All dependencies are ok.

Install runs fine, db is created, RT_Siteconfig look perfect.

Then i have created  vhost for rt called rt.conf:

LoadModule fastcgi_module /usr/lib/apache2/mod_fastcgi.so

FastCgiServer /opt/rt3/bin/mason_handler.fcgi -idle-timeout 150 -processes 3
-listen-queue-depth 200 -priority 1

<VirtualHost *>
        ServerName testsystem.domain.de
        DocumentRoot /opt/rt3/share/html
        AddHandler fastcgi-script .fcgi
        Alias /NoAuth/images/ /opt/rt3/share/html/NoAuth/images/
        ScriptAlias / /opt/rt3/bin/mason_handler.fcgi/ </VirtualHost>

and restarted apache2: all looks fine so far:

[Tue Sep 13 14:02:21 2005] [notice] FastCGI: process manager initialized
(pid 15452) [Tue Sep 13 14:02:21 2005] [warn] FastCGI: server
"/opt/rt3/bin/mason_handler.fcgi" started (pid 15453) [Tue Sep 13 14:02:21
2005] [notice] Apache/2.0.53 (Linux/SUSE) configured -- resuming normal
operations [Tue Sep 13 14:02:22 2005] [warn] FastCGI: server
"/opt/rt3/bin/mason_handler.fcgi" started (pid 15461) [Tue Sep 13 14:02:23
2005] [warn] FastCGI: server "/opt/rt3/bin/mason_handler.fcgi" started (pid
15466)

BUT NOW, when i try to access the domain i get the following in apache error
log:

[Tue Sep 13 14:03:07 2005] [error] [client 57.x.x.x] client denied by server
configuration: /opt/rt3/bin/mason_handler.fcgi [Tue Sep 13 14:03:07 2005]
[error] [client 57.x.x.x] client denied by server
configuration: /opt/rt3/bin/mason_handler.fcgi

now i checked the rights structure again:

1. wwwrun is member of the rt group
2. the fcgi handler has the following rights: -rwxr-xr-x  1 root rt    2950
Sep 13 11:49 mason_handler.fcgi
3. the RT_Config and RT_SiteConfig: 

-rwxr-xr-x  1 root rt   16380 Sep 13 11:50 RT_Config.pm
-rwxr-xr-x  1 root rt   16426 Sep 13 12:25 RT_SiteConfig.pm

i have now idea at this moment whats going wrong. Does someone have an idea?

Thanks for your help



 Thanks in advance
 ....
    : Torsten Brumm
    : IT Security Engineer
    :
    : Kuehne + Nagel
    : HAM - MI-C
    :
    : Ferdinand Strasse 29-33
    : 20095 Hamburg
    :
    : +49 (40) 329 15 199
    : +49 (40) 329 15 500
    :
    : torsten.brumm at kuehne-nagel.com
    : www.kn-portal.com
    : icq: 78258840
    ....

_______________________________________________
http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users

Be sure to check out the RT Wiki at http://wiki.bestpractical.com

Buy your copy of our new book, RT Essentials, today! 

Download a free sample chapter from http://rtbook.bestpractical.com