On 11/20/2014 11:38 PM, David Benfell wrote: > > I migrated from Linux to FreeBSD a few months ago and I'm just now > (yes, shame on me) noticing that my archives are broken. I've tried a > few things to fix this but I'm still getting 403 Forbidden. > > First, here is the current Apache (2.4) configuration: > ... > # CGI Directory > ScriptAlias /mailman/ /usr/local/mailman/cgi-bin/ > <Directory "/usr/local/mailman/cgi-bin"> > AllowOverride All > Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch > Require all granted > </Directory> > Alias /pipermail/ /usr/local/mailman/archives/public/ > <Directory "/usr/local/mailman/archives/public/"> > AllowOverride All > Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch > Require all granted > </Directory>
I think the issue is +SymLinksIfOwnerMatch above. This should be just +FollowSymLinks since the owners don't match. ... > home# ls -al /usr/local/mailman/archives/public/ > > total 16 > drwxrwsr-x 2 root mailman 512 Nov 20 23:36 . > drwxrwsr-x 4 root mailman 512 Aug 17 18:41 .. > lrwxr-xr-x 1 root mailman 18 Nov 20 22:56 mailman -> > ../private/mailman > lrwxr-xr-x 1 root mailman 29 Nov 20 22:56 philosophical-cafe -> > ../private/philosophical-cafe > lrwxr-xr-x 1 root mailman 19 Nov 20 22:56 thoughts -> > ../private/thoughts > > And correspondingly, > > home# ls -al /usr/local/mailman/archives/private/ > total 72 > drwxrws--x 9 root mailman 512 Nov 20 22:55 . > drwxrwsr-x 4 root mailman 512 Aug 17 18:41 .. > drwxrwsr-x 12 mailman mailman 1024 Nov 3 03:27 benfell-committee > drwxrwsr-x 2 mailman mailman 512 Apr 25 2014 > benfell-committee.mbox > drwxrwsr-x 2 mailman mailman 512 Apr 11 2014 mailman > drwxrwsr-x 12 mailman mailman 1024 Nov 2 03:27 philosophicalcafe > drwxrwsr-x 2 mailman mailman 512 Apr 12 2014 > philosophicalcafe.mbox > drwxrwsr-x 12 mailman mailman 1024 Nov 2 03:27 thoughts > drwxrwsr-x 2 mailman mailman 512 Apr 24 2014 thoughts.mbox > > The 403 Forbidden comes when I try to access any archive page via a > browser. If my analysis is correct, you should be able to access the private benfell-committee archives OK, and actually be able to access any list's archives via <https://mail.parts-unknown.org/mailman/private/LISTNAME/> -- Mark Sapiro <m...@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------ Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
