Re: [Mailman-Users] 403 Errors with nginx and fcgiwrap
On 06/11/2013 04:04 PM, Patrick Barrett wrote: I'm trying to setup mailman with nginx and fcgiwrap, but I'm getting 403 errors, well a page that is blank except for the number 403. I can access some pages. I can see the listinfo page, the admin page, the createlist page, and I can even create lists. But, I get the 403's when I go to listinfo/listname and the like. There is nothing in Mailman itself that sends a 403 status. What's in your web server logs? This seems to be an almost identical problem to http://www.mail-archive.com/mailman-users@python.org/msg57843.html but I have all the items in my config that that thread says needs to be there. Except the problem there is the Mailman CGI was actually invoked but not given all the needed info in the environment. Your problem seems to be that the web server doesn't even run the CGI script but gives a 403 instead. Here is my nginx config: http://pastebin.com/G5A87tEw which means nothing to me :( Also, check_perms comes back with no problems found. (But it did have to fix quite a few first and I even had to manually fix a few symlinks that it wouldn't fix.) check_perms has problems with symlinks, but normally these are just reporting errors as it looks at the permissions on the symlink itself, but with -f, actually fixes the target. However, this is only an issue with downstream packages as standard GNU Mailman doesn't install symlinks other than those in archives/public/. -- Mark Sapiro m...@msapiro.netThe highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] 403 Errors with nginx and fcgiwrap
On 06/12/2013 09:47 AM, Mark Sapiro wrote: On 06/11/2013 04:04 PM, Patrick Barrett wrote: I'm trying to setup mailman with nginx and fcgiwrap, but I'm getting 403 errors, well a page that is blank except for the number 403. I can access some pages. I can see the listinfo page, the admin page, the createlist page, and I can even create lists. But, I get the 403's when I go to listinfo/listname and the like. There is nothing in Mailman itself that sends a 403 status. What's in your web server logs? This seems to be an almost identical problem to http://www.mail-archive.com/mailman-users@python.org/msg57843.html but I have all the items in my config that that thread says needs to be there. Except the problem there is the Mailman CGI was actually invoked but not given all the needed info in the environment. Your problem seems to be that the web server doesn't even run the CGI script but gives a 403 instead. Wouldn't the CGI have to be getting invoked for me to be able to successfully be able to create new lists? The log comes back with: 2013/06/12 10:36:19 [error] 6020#0: *347 FastCGI sent in stderr: Cannot chdir to script directory (/usr/lib/cgi-bin/mailman/listinfo) while reading response header from upstream, client: myip, server: lists.example.org, request: GET /mailman/listinfo/listname HTTP/1.1, upstream: fastcgi://unix:/var/run/fcgiwrap.socket:, host: lists.example.org, referrer: https://lists.example.org/mailman/listinfo; That sounds to me like it's trying to cd into the executable. Just in case I'm wrong this is the directory's permissions: patrick@helium:/usr/lib/cgi-bin/mailman$ ls -ld drwxr-xr-x 2 root list 4096 Jun 11 20:42 . -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] 403 Errors with nginx and fcgiwrap
Ok, I found the issue thanks to this thread on the nginx list: http://mailman.nginx.org/pipermail/nginx/2012-June/034205.html tl;dr: Comment out the 'SCRIPT_FILENAME' line in /etc/nginx/fastcgi_params Thanks for putting me on the right trail Mark. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
