webmail.domain.tld dont work :(

[Ripeed]

OK, I do the step 3 in (Sites -> webmail.example.com -> Options -> Apache Directives box) not in the examlpe.com as you type. I hope soo it is right.

Then I have it Forbidden

Now what next? Thanks

[cbj4074]

Yes, that's correct; you should be entering the Apache directives in webmail.example.com, not example.com. I apologize for the typo and have corrected my previous post.

Given that you are indeed receiving permission denied errors, your configuration is correct thus far.

The issue now is the permissions on the /usr/share/squirrelmail directory. More specifically, the user with whose credentials the webserver is running lacks sufficient access.

So, you need to set appropriate permissions on the /usr/share/squirrelmail directory. To be able to do this correctly and securely, we need to know which PHP implementation are you using? Mod-PHP, Fast-CGI, SuPHP, etc.

Also, what are the current permissions on this directory? List out the parent directory's contents:

# ls -lah /usr/share

I'm looking for something like this:

drwxr-xr-x   4 root root 4.0K Aug 12 07:05 squirrelmail

It would also be helpful if you list the contents of the directory, too, e.g.:

# ls -lah /usr/share/squirrelmail

We'll await your response...

[Ripeed]

Thanks again.

I think I am using mod-php. I proceeded by tutorial The Perfect Server.

I am looking on phpinfo, but i dont find anythink like php implementation...

# ls -lah /usr/share
drwxr-xr-x  12 root root 4.0K Nov 28 13:07 squirrelmail

# ls -lah /usr/share/squirrelmail
total 52K
drwxr-xr-x  12 root root 4.0K Nov 28 13:07 .
drwxr-xr-x 145 root root 4.0K Dec  5 10:08 ..
drwxr-xr-x   5 root root 4.0K Nov 28 13:07 class
lrwxrwxrwx   1 root root   17 Nov 28 13:07 config -> /etc/squirrelmail
drwxr-xr-x   4 root root 4.0K Nov 28 13:07 functions
drwxr-xr-x  29 root root 4.0K Nov 28 13:07 help
drwxr-xr-x   2 root root 4.0K Nov 28 13:07 images
drwxr-xr-x   3 root root 4.0K Nov 28 13:07 include
-rw-r--r--   1 root root  671 Aug  8 11:44 index.php
drwxr-xr-x  53 root root 4.0K Nov 28 13:07 locale
drwxr-xr-x  20 root root 4.0K Nov 28 13:07 plugins
drwxr-xr-x   2 root root 4.0K Nov 28 13:07 po
drwxr-xr-x   2 root root 4.0K Nov 28 13:07 src
drwxr-xr-x   3 root root 4.0K Nov 28 13:07 themes

thats it.

[cbj4074]

I think I am using mod-php.

It's easy enough to double-check which mode you're using . Just go to Sites -> Website -> example.com and look at the menu selection next to "PHP", near the bottom of the page.

This is on the webmail.example.com domain, by the way.

[cbj4074]

After installing SquirrelMail myself and examining the Apache logs concerning the message that you now receive in the browser, "Forbidden: You don't have permission to access / on this server", I found the following:

[error] [client 184.74.75.65] client denied by server configuration: /usr/share/squirrelmailindex.php
[error] [client 184.74.75.65] client denied by server configuration: /usr/share/squirrelmailfavicon.ico

These messages indicate that the permission denial is happening at the Apache level (not the filesystem level), which is good. Also, your permissions on the /usr/share/squirrelmail directory are correct, so no need to change those. (As a side note, it is undesirable to change the default permissions on files/directories created via package installers. Doing so should always be a last resort.)

To allow access to that directory, it is necessary to add something similar to the following to your Apache configuration (ignore the first [Alias] line if you've already added that):

Alias / /usr/share/squirrelmail/
<Location />
Options +FollowSymLinks
order allow,deny
allow from all
</Location>

Once ISPConfig has written the change to disk, is the problem resolved?

[cbj4074]

I should mention also that the method for accessing SquirrelMail at webmail.example.com, as described in the tutorial, does work. (Before attempting it, however, please see my posts in this related thread for common pitfalls regarding the cited tutorial: http://www.howtoforge.com/forums/sho...t=52042&page=4 .)

That said, a more robust implementation would be to create a copy of the default SquirrelMail configuration file for Apache (these instructions are Debian-specific [which includes Ubuntu], so adapt accordingly)

# cp /usr/share/squirrelmail/config/apache.conf /etc/apache2/.conf/squirrelmail.conf

and then replace the default <VirtualHost></VirtualHost> section

#<VirtualHost 1.2.3.4>
#  DocumentRoot /usr/share/squirrelmail
#  ServerName webmail.example.com
#</VirtualHost>

with:

<VirtualHost *:80>
DocumentRoot /usr/share/squirrelmail
ServerName webmail.example.com
</VirtualHost>

<VirtualHost *:443>
DocumentRoot /usr/share/squirrelmail
ServerName webmail.example.com
</VirtualHost>

Don't forget to reload Apache:

# service apache2 force-reload

This adaptation accounts for any IP address and for SSL connections.

[Ripeed]

Originally Posted by cbj4074

it's easy enough to double-check which mode you're using . Just go to sites -> website -> example.com and look at the menu selection next to "php", near the bottom of the page.

This is on the webmail.example.com domain, by the way.

ok its fast-cgi

[Ripeed]

OK, now its work!!!!

what i do:

add this:
<VirtualHost *:80>
DocumentRoot /usr/share/squirrelmail
ServerName webmail.example.com
</VirtualHost>

<VirtualHost *:443>
DocumentRoot /usr/share/squirrelmail
ServerName webmail.example.com
</VirtualHost>

that still wont work. After that i added this:
<Location />
Options +FollowSymLinks
order allow,deny
allow from all
</Location>

And NOW IT IS!!!!

THANK YOU SOOO MUTCH!

[cbj4074]

Glad to hear it!