The default Apache configuration is to restrict access to the entire filesystem and only allow access to the contents of your DocumentRoot.

So normally you would have deny rules on <Directory /> and allow rules for <Directory /Library/Websites> or where ever your DocumentRoot is configured.

but as /cgi-bin/WebObjects/YourApp.woa is not located under your DocumentRoot or for that matter in your /cgi-bin folder either, the default deny rules kick in and return a 403 access forbidden error.

You might do better to use a "Location /cgi-bin/WebObjects/YourApp.woa> and put your allow rules inside that for a more secure setup.

----- Original Message ----- From: <[email protected]>
To: "David LeBer" <[email protected]>
Cc: "WebObjects Development" <[email protected]>
Sent: Wednesday, April 07, 2010 6:41 AM
Subject: Re: You don't have permission to access/cgi-bin/WebObjects/TheApp.woa/-5579 on this server.


>
On 2010-04-06, at 3:06 PM, David LeBer wrote:

Thanks everyone, found it.

<Directory />
    Options FollowSymLinks
    AllowOverride None
    Order deny,allow
    Deny from all
</Directory>

vs:

<Directory />
    Options FollowSymLinks
    AllowOverride None
    #Order deny,allow
    #Deny from all
</Directory>



Why is that, actually?

I also fell for this, the first time I setup mod_webobjects.


Rainer



_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list      ([email protected])
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/mjsotn%40gmail.com

This email sent to [email protected]


_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list      ([email protected])
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com

This email sent to [email protected]

Reply via email to