Hi,

BTW, to help guide me on what to look for, my understanding is that there are 
basically two things that can cause Apache to provide the 403/Forbidden 
response:

- Linux permissions
- Something in the Apache .conf files that sets a "deny"

For the former, and assuming the we don't have any local resources in the 
<VirtualHost>s (i.e., no <DocumentRoot>), and only a bunch of 
ProxyPass/ProxyPassReverse directives, I think that the <VirtualHost> would 
"inherit" the <DocumentRoot> from the server configuration, so what we'd have 
to do is to look at where the <DocumentRoot> is pointing to, and confirm that 
the user and group specified in the User and Group directives in the Apache 
.conf files have read/write/execute perms on that and all of its parent 
directories.

Is that correct?

For the latter, we need to look for all "deny", and check that none of them 
apply to the <Location> directives in the <VirtualHost> sections.

Is that correct?

Thanks,
Jim


--- On Wed, 2/9/11, o haya <[email protected]> wrote:

> From: o haya <[email protected]>
> Subject: Re: [users@httpd] Problem configuring proxy (forbidden error locally)
> To: [email protected]
> Date: Wednesday, February 9, 2011, 10:23 PM
> Eric,
> 
> Sorry for that.  The system is at work, so I'll have
> to get that tomorrow.
> 
> Jim
> 
> 
> --- On Wed, 2/9/11, Eric Covener <[email protected]>
> wrote:
> 
> > From: Eric Covener <[email protected]>
> > Subject: Re: [users@httpd] Problem configuring proxy
> (forbidden error locally)
> > To: [email protected]
> > Date: Wednesday, February 9, 2011, 9:58 PM
> > On Wed, Feb 9, 2011 at 8:26 PM, o
> > haya <[email protected]>
> > wrote:
> > >
> > > Hi Eric and Igor,
> > > The Apache proxy logs show "403" errors.
> > 
> > Don't paraphrase the logs. Include them verbatim in
> your
> > response.
> > 
> >
> ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache
> HTTP
> > Server Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more
> > info.
> > To unsubscribe, e-mail: [email protected]
> >    "   from the digest: [email protected]
> > For additional commands, e-mail: [email protected]
> > 
> > 
> 
> 
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP
> Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more
> info.
> To unsubscribe, e-mail: [email protected]
>    "   from the digest: [email protected]
> For additional commands, e-mail: [email protected]
> 
> 




---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [email protected]
   "   from the digest: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to