[Bug 14317] New: Apache 2.4 Directory config needs Require all granted
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14317 Bug ID: 14317 Summary: Apache 2.4 Directory config needs Require all granted Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Installation and upgrade (command-line installer) Assignee: gmcharlt@gmail.com Reporter: larry@bywatersolutions.com QA Contact: testopia@bugs.koha-community.org I recently installed Koha on Ubuntu 14.04, with Apache 2.4.7. The new default security settings in Apache 2.4 were causing the Koha directories to be blocked. The error message in the logs is: "AH01630: client denied by server configuration". More specifically, the Directory settings in apache2.conf specifically block access to all directories other than /var/www and /srv. The koha-create and Makefile.PL scripts should be modified to add the following Directory definition to the apache conf file (either instance.conf for package or koha-httpd.conf for git installs): <Directory "/path/to/doc/root"> Require all granted </Directory> Regards, Larry -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14317 --- Comment #1 from Larry Baerveldt <larry@bywatersolutions.com> --- FYI, changes to Apache access control structures in 2.4: http://httpd.apache.org/docs/2.4/upgrading.html#access -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14317 Robin Sheat <robin@catalyst.net.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |robin@catalyst.net.nz --- Comment #2 from Robin Sheat <robin@catalyst.net.nz> --- I just did a package install on an Ubuntu 14.04 VM: $ apt-cache policy apache2 apache2: Installed: 2.4.7-1ubuntu4.4 and there are no permission issues. Note that the access_compat module seems to be enabled by default, however it seems to work without that. -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14317 Larry Baerveldt <larry@bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|major |minor --- Comment #3 from Larry Baerveldt <larry@bywatersolutions.com> --- Ah I see what happened. My installation had to use git, instead of package, because this particular site requires some extensive customizations. On a package site, the root Koha directories are in /usr/share/koha, and by default Apache 2.4 allows access to /usr/share, but not /home/koha/kohaclone (or wherever else your kohaclone may be). So this will only be an issue if you're attempting to use a git install, and is a non-factor for normal package installations. We may still want to consider patching the make files for git installs, so they will work for the rare occassions when someone might need that type of install. Otherwise this is probably a non-issue. - Larry -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14317 Tomás Cohen Arazi <tomascohen@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |WORKSFORME CC| |tomascohen@gmail.com Status|NEW |RESOLVED --- Comment #4 from Tomás Cohen Arazi <tomascohen@gmail.com> --- I'm closing this for now. If we encounter this problem again, a new bug should be fixed, with reproducible steps. -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org