getting 403 error after editing Web domain optioins

[thibotus01]

Hi,

In options tab for a Web domain, after adding something like:

AddType video/ogg .ogv
AddType video/mp4 .mp4
AddType video/webm .web

I got an error 403 when I tried to access to subdomain.domain.tld (redirect to domain.tld/folder)

domain.tld/folder is working well.

Log says :client denied by server configuration:

Here the .vhost :

<Directory /home/domain.com>
    AllowOverride None
    Order Deny,Allow
    Deny from all
</Directory>

<VirtualHost 87.xxxx:80>
      DocumentRoot /home/domain.com/web
  
    ServerName domain.com
    ServerAlias www.domain.com 
    ServerAlias media.domain.com 
    ServerAlias domaintoto2.com 
    ServerAlias mrtg.domain.com
    ServerAdmin webmaster@domain.com

    ErrorLog /var/log/ispconfig/httpd/domain.com/error.log

    ErrorDocument 400 /error/400.html
    ErrorDocument 401 /error/401.html
    ErrorDocument 403 /error/403.html
    ErrorDocument 404 /error/404.html
    ErrorDocument 405 /error/405.html
    ErrorDocument 500 /error/500.html
    ErrorDocument 503 /error/503.html
	
    <Directory /home/domain.com/web>
        Options FollowSymLinks
        AllowOverride All
        Order allow,deny
        Allow from all
    </Directory>
    <Directory /home/clients/client0/web12/web>
        Options FollowSymLinks
        AllowOverride All
        Order allow,deny
        Allow from all
    </Directory>

    # cgi enabled
	<Directory /home/clients/client0/web12/cgi-bin>
      Order allow,deny
      Allow from all
    </Directory>
    ScriptAlias  /cgi-bin/ /home/clients/client0/web12/cgi-bin/
    AddHandler cgi-script .cgi
    AddHandler cgi-script .pl
    # suexec enabled
    SuexecUserGroup web12 client0
    # php as fast-cgi enabled
    <IfModule mod_fcgid.c>
      # SocketPath /tmp/fcgid_sock/
      IdleTimeout 3600
      ProcessLifeTime 7200
      # MaxProcessCount 1000
      DefaultMinClassProcessCount 3
      DefaultMaxClassProcessCount 100
      IPCConnectTimeout 8
      IPCCommTimeout 360
      BusyTimeout 300
    </IfModule>
    <Directory /home/domain.com/web>
        AddHandler fcgid-script .php .php3 .php4 .php5
        FCGIWrapper /var/www/php-fcgi-scripts/web12/.php-fcgi-starter .php
        Options +ExecCGI
        AllowOverride All
        Order allow,deny
        Allow from all
    </Directory>
	<Directory /home/clients/client0/web12/web>
        AddHandler fcgid-script .php .php3 .php4 .php5
        FCGIWrapper /var/www/php-fcgi-scripts/web12/.php-fcgi-starter .php
        Options +ExecCGI
        AllowOverride All
        Order allow,deny
        Allow from all
    </Directory>

     # add support for apache mpm_itk
    <IfModule mpm_itk_module>
      AssignUserId web12 client0
    </IfModule>


    RewriteEngine on
    RewriteCond %{HTTP_HOST}   ^media.domain.com [NC]
    RewriteRule   ^/(.*)$ /media/$1  [L]
    RewriteCond %{HTTP_HOST}   ^domaintoto2.com [NC]
    RewriteRule   ^/(.*)$ http://www.domain.com$1  [R]
    RewriteCond %{HTTP_HOST}   ^mrtg.domain.com [NC]
    RewriteRule   ^/(.*)$ /munin/$1  [L]

RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
   
AddType video/ogg .ogv
AddType video/mp4 .mp4
AddType video/webm .webm

</VirtualHost>

[mike_p]

I have tried to replicate the problem your are having but cannot.

I added some rewrite rules and the addtype directives to one of mydomains, but still had no problem accessing the folder via the rewrite.

The one thing that looks dangerous to me is your use of suexec with /home as a base directory.

what do you get if you run
suexec -V

That should show you what DOC_ROOT suexec expects.
If it doesn't give /home, then that might cause you some problems.

[thibotus01]

I got "command not found" lol.

That's how ISPconfig has configured my .vhost. when I chose what options I'd like. I didn't add anything manually.

[mike_p]

In the ISPConfig web domain options there is a checkbox for SuEXEC.

[thibotus01]

Yes it's checked.

[thibotus01]

Is there anywhere else I should look?

[mike_p]

I can't tell from what you 've posted whether you've picked up on what I wrote.

If the SuEXEC check box is checked then you have opted to use SuEXEC.

If suexec -V results in "command not found" there's a high chance that suexec is not installed.

So remove the check from the suexec checkbox, save changes and wait a couple of minutes (for the cron job to execute the changes and restart apache) then see if you still have the error.

[thibotus01]

Unchecked but still have the same error.

And it worked perfectly fine before I just did what I said in my first message, I had no problem.

[till]

Which ISPConfig version?

[thibotus01]

Last stable 3.0.2.1