Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Developers' Forum

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #11  
Old 27th March 2011, 23:34
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,733
Thanks: 840
Thanked 5,596 Times in 4,407 Posts
Default

Which setting do you use in system > server config > web > security level? The recommended setting is high.

And which linux user and linux group is used for this website?
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Sponsored Links
  #12  
Old 27th March 2011, 23:39
otacon otacon is offline
Senior Member
 
Join Date: Sep 2010
Posts: 109
Thanks: 5
Thanked 5 Times in 5 Posts
Default

Security Setting Is "High"

User = web15
Group = client0
__________________
Debian 7.4 Server:
ISPConfig Version: 3.0.5.3

Please visit my Mini-howto, "How To Create Remote API Scripts For ISPConfig 3"
Reply With Quote
  #13  
Old 4th April 2011, 20:39
otacon otacon is offline
Senior Member
 
Join Date: Sep 2010
Posts: 109
Thanks: 5
Thanked 5 Times in 5 Posts
Default

Ok, so as I am stumped as to why this is happening I have done a bad work around to fix the issue.

in the .vhosts I changed the 403 error path to index.html. This restricts the users to having this exact file name.

I will post an answer as soon I discover it.
__________________
Debian 7.4 Server:
ISPConfig Version: 3.0.5.3

Please visit my Mini-howto, "How To Create Remote API Scripts For ISPConfig 3"
Reply With Quote
  #14  
Old 28th April 2011, 07:41
otacon otacon is offline
Senior Member
 
Join Date: Sep 2010
Posts: 109
Thanks: 5
Thanked 5 Times in 5 Posts
Default

Alright it has been long enough for me to be fed up with all this troubleshooting so instead of me just doing random things I find on the web I am going to have to do this in a more intelligent manner.

ok So I need to start off by listing all the possibilities of a 403 error on a web site then from that list systematically rule out each issue until I get to the root cause.

I need help with the first step of this process. My current list of possible causes is as follows:

1.Site is password protected.
2.Wrong Group for access
3. Wrong username for access
4.The website may be configured so as to disallow all attempted requests for directory listings


When accessing the directory from the internet what user and group is used by the user to access those files? Is it client24:web52 *example*?

Also I am having no issue when I create a website through the control panel. Does the API do this process manually or does it use whet ever the control panel uses? if it uses the same script then I would have to assume that the problem is in my registration script.


Thank you for your help and I hope I can figure this out soon,
otacon
__________________
Debian 7.4 Server:
ISPConfig Version: 3.0.5.3

Please visit my Mini-howto, "How To Create Remote API Scripts For ISPConfig 3"
Reply With Quote
  #15  
Old 28th April 2011, 17:29
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,733
Thanks: 840
Thanked 5,596 Times in 4,407 Posts
Default

Quote:
When accessing the directory from the internet what user and group is used by the user to access those files? Is it client24:web52 *example*?
Thats depends on the file type that you access and the options that you have set in the website. E.g. html files and images are accessed by the apache user while php scripts run under the web user when you have suexec enabled.

Quote:
Also I am having no issue when I create a website through the control panel. Does the API do this process manually or does it use whet ever the control panel uses? if it uses the same script then I would have to assume that the problem is in my registration script.
Then its most likely a problem with your script. ISPConfig uses the same code to create a website wether you use the ispconfig interface or the api.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #16  
Old 28th April 2011, 20:59
otacon otacon is offline
Senior Member
 
Join Date: Sep 2010
Posts: 109
Thanks: 5
Thanked 5 Times in 5 Posts
 
Default

Quote:
Originally Posted by otacon View Post
error.log

Code:
[Thu Mar 24 19:23:05 2011] [error] [client 98.226.168.246] client denied by server configuration: /
[Thu Mar 24 20:26:32 2011] [error] [client 98.226.168.246] client denied by server configuration: /
[Thu Mar 24 21:24:36 2011] [error] [client 98.226.168.246] client denied by server configuration: /
[Thu Mar 24 21:24:36 2011] [error] [client 98.226.168.246] File does not exist: /var/www/testing2.remcycle.net/web/favicon.ico, referer: http://testing2.remcycle.net/
testing2.remcycle.net/index.html works.

I guess I could fix it with an htaccess file , but I would prefer to figure out why the directory isn't forwarding to index.html.
should these errorlogs be saying client denied by / "root"? Why would it be trying to access root?

Is this normal or should it be /var/www/testing600.remcycle.net/web?



-----------------------------------------------------

Ok I think that was the problem. I added


<Directory />
Options FollowSymLinks
AllowOverride All
Order allow,deny
Allow from all
</Directory>


to testing600.remcycle.net.vhost and now it works.

Now I have to find out why it needs to go to the root directory.

Will adding this to the vhost create a security risk?


------------------------------------------------------------------

another update. I have found the issue inside the vhost.

in the vhosts that are created through API

PHP Code:
    RewriteEngine on
    RewriteCond 
%{HTTP_HOST}   ^test.remcycle.net [NC]
    
RewriteRule   ^/(.*)$ /$1  
    RewriteCond 
%{HTTP_HOST}   ^www.test.remcycle.net [NC]
    
RewriteRule   ^/(.*)$ /$
is added once this is removed the domain works perfectly. I am not sure what this means, but I will be doing a little googling to find out.
__________________
Debian 7.4 Server:
ISPConfig Version: 3.0.5.3

Please visit my Mini-howto, "How To Create Remote API Scripts For ISPConfig 3"

Last edited by otacon; 2nd May 2011 at 04:47. Reason: solution found
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISPConfig 3.0.3.2 & Webdav & 403 Forbidden Rescue9 Installation/Configuration 6 4th December 2011 17:05
403 error mark0168 General 3 15th August 2008 11:06
IMAP doesn't work..as i followed the Perfect Setup for Fedora 4 asokaajay Server Operation 11 10th June 2007 15:57
redirect websites provell General 2 1st December 2006 10:51
403 errors and virtual hosts tommywds Server Operation 3 27th June 2006 08:09


All times are GMT +2. The time now is 12:23.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.