webalizer 403 Forbidden

Discussion in 'General' started by angelbulas, May 26, 2009.

  1. SamTzu

    SamTzu HowtoForge Supporter

    I have upgraded both Lenny and ISPConfig.
    Same problem.
  2. till

    till Super Moderator

    Do you downloaded a released update or did you update from SVN?
  3. SamTzu

    SamTzu HowtoForge Supporter

    So far I have not installed from SVN.
    I plan to test it some day but I'm bit too busy to try now.
  4. till

    till Super Moderator

    Ok, I only asked as the statistics for the released version are working fine on my servers. Maybe the reason is the debian update and not the ispconfig update that you installed?
  5. SamTzu

    SamTzu HowtoForge Supporter

    From ISPConfig3 Server State - Show update state

    Data from: 2009-06-22 07:00 Reading package lists...
    Building dependency tree...
    Reading state information...
    The following NEW packages will be installed:
    libdns45 libisc45
    The following packages will be upgraded:
    apache2 apache2-doc apache2-mpm-prefork apache2-suexec apache2-utils
    apache2.2-common bind9-host dnsutils libbind9-40 libisccc40 libisccfg40
    12 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
    Inst libisc45 (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable)
    Inst libdns45 (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable)
    Inst bind9-host [1:9.5.0.dfsg.P2-5.1] (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable) []
    Inst dnsutils [1:9.5.0.dfsg.P2-5.1] (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable) []
    Inst libbind9-40 [1:9.5.0.dfsg.P2-5.1] (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable) []
    Inst libisccfg40 [1:9.5.0.dfsg.P2-5.1] (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable) []
    Inst libisccc40 [1:9.5.0.dfsg.P2-5.1] (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable) []
    Inst liblwres40 [1:9.5.0.dfsg.P2-5.1] (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable)
    Inst apache2-utils [2.2.9-10+lenny2] (2.2.9-10+lenny3 Debian-Security:5.0/stable)
    Inst apache2-mpm-prefork [2.2.9-10+lenny2] (2.2.9-10+lenny3 Debian-Security:5.0/stable) []
    Inst apache2.2-common [2.2.9-10+lenny2] (2.2.9-10+lenny3 Debian-Security:5.0/stable)
    Inst apache2 [2.2.9-10+lenny2] (2.2.9-10+lenny3 Debian-Security:5.0/stable)
    Inst apache2-doc [2.2.9-10+lenny2] (2.2.9-10+lenny3 Debian-Security:5.0/stable)
    Inst apache2-suexec [2.2.9-10+lenny2] (2.2.9-10+lenny3 Debian-Security:5.0/stable)
    Conf libisc45 (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable)
    Conf libdns45 (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable)
    Conf libisccc40 (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable)
    Conf libisccfg40 (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable)
    Conf libbind9-40 (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable)
    Conf liblwres40 (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable)
    Conf bind9-host (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable)
    Conf dnsutils (1:9.5.1.dfsg.P1-2 Debian:5.0.1/stable)
    Conf apache2-utils (2.2.9-10+lenny3 Debian-Security:5.0/stable)
    Conf apache2.2-common (2.2.9-10+lenny3 Debian-Security:5.0/stable)
    Conf apache2-mpm-prefork (2.2.9-10+lenny3 Debian-Security:5.0/stable)
    Conf apache2 (2.2.9-10+lenny3 Debian-Security:5.0/stable)
    Conf apache2-doc (2.2.9-10+lenny3 Debian-Security:5.0/stable)
    Conf apache2-suexec (2.2.9-10+lenny3 Debian-Security:5.0/stable)

    PS. I really love ISPConfig3 :) This is a great worklog system also since you can see what has happened.
  6. SamTzu

    SamTzu HowtoForge Supporter


    Also noticed that the .htpasswd_stats file is missing.
  7. rukus77

    rukus77 New Member

    I'm using Centos5.3 and had followed your perfect setup guide.

    I am collecting stats, but still combined with my other sites. I have performed several installs on other servers and everything appears fine, but the other servers only have one site at the moment, so stats may be combined as well, but do not have multiple sites on these to confirm.


    Which O/S Linux Flavor do you recommend most?
  8. till

    till Super Moderator

    Please make a post in the bugtracker http://bugtracker.ispconfig.org and we will take a look on this.

    Debian Linux.
  9. SamTzu

    SamTzu HowtoForge Supporter

    Could this be an issue with Jailkit?
  10. till

    till Super Moderator

    I dont think so as webalizer is run as root and has all priveliges to write files.
  11. SamTzu

    SamTzu HowtoForge Supporter


    It's obvious in hindsight.

    Change the values for incremental and hostname if you suffer from this problem.

    If you have problems with stats make sure that...

    1) You have created a password for the site on ISPConfig3
    (User is admin) If this dont work then you get 500 error.
    (Check the .htpasswd_stats file.)

    server43: ls -ahl /var/www/shop.internet-content.net/ total 28K
    drwxr-xr-x 6 root root 4.0K 2009-09-08 13:13 .
    drwxr-xr-x 12 root root 4.0K 2009-09-04 13:20 ..
    drwxr-xr-x 2 web22 client1 4.0K 2009-09-01 13:54 cgi-bin
    -rw-rw-r-- 1 root root 40 2009-09-08 13:13 .htpasswd_stats
    lrwxrwxrwx 1 web22 client1 50 2009-09-01 13:54 log -> /var/log/ispconfig/http /shop.internet-content.net
    drwxr-xr-x 2 web22 client1 4.0K 2009-09-01 13:54 ssl
    drwxrwxrwx 3 web22 client1 4.0K 2009-09-02 16:13 tmp
    drwxr-xr-x 19 web22 client1 4.0K 2009-09-02 16:17 web

    2) If you only can see 1 days worth of data make sure to edit /etc/webalizer/webalizer.conf
    Incremental yes

    3) If you have moved your site from ISPConfig2 server make sure that the web/stats/ folder does not contain any old .ht**** files.

    4) If you have custom .htaccess file on your /web/ root try to rename it and see if the stats start to work.
    Last edited: Sep 8, 2009
  12. Norm

    Norm New Member

    I have my webalizer stats now.


    I installed ISPConfig a few days ago onto Ubuntu 9.10 64 bit and getting on fine with it after a few operator errors.

    I've had the same problem with getting webalizer stats being produced just as previous writers mentioned.

    I did notice in the ISPConfig cron.log that GEOip.dat could not be found at /usr/share/geoip so the ISPConfig cron.daily did not run properly. Seems this was not installed so I installed it with apt-get install geoip-database.

    I ran the cron.daily script and my webalizer files are in the /stats folder now and I can access them as I should.

    Sorry this is a few months late but I read through the forums and didn't see this mentioned as a possible solution.

  13. abdi

    abdi New Member

    My problem is even more weired ..

    my /stats folder has ALL the files however I get 403 error when accessing them through the browser.

    And funny thing is if I rename any of those files to .php then I can see its contents fine, seeming to me that .html is not working on my /stats/ folder ...

    in the logs i have:

    tail -f /var/www/clients/client1/web1/log/error.log

    2012/11/05 08:32:54 [error] 2333#0: *3820 open() "/var/www/clients/client1/web1/.htpasswd_stats" failed (2: No such file or directory), client:, server: domain.net, request: "GET /stats/ HTTP/1.1", host: "www.domain.net"

    2012/11/05 08:32:58 [error] 2333#0: *3832 open() "/var/www/clients/client1/web1/.htpasswd_stats" failed (2: No such file or directory), client:, server: jolis.net, request: "GET /stats/undefined HTTP/1.1", host: "www.domain.com", referrer:
    Last edited: Nov 5, 2012
  14. abdi

    abdi New Member

    OK, indeed that missing file is the root cause of all problems since when I disable it in /etc/nginx/sites-enabled

    " auth_basic_user_file /var/www/clients/client1/web1/.htpasswd_stats;" everything works fine.

    However if I try to manually create it with:

    # touch /var/www/clients/client1/web1/.htpasswd_stats
    touch: cannot touch `/var/www/clients/client1/web1/.htpasswd_stats': Permission denied

    I get the above, implying my server is unable to create it and that explains why ALL sites can't show /stats/

    Till any advice on why my system can't create that file in that path? Thanks
  15. falko

    falko Super Moderator

    What's the output of
    ls -la /var/www/clients/client1/web1/
  16. abdi

    abdi New Member

    root@puck384 dbadmin # ls -la /var/www/clients/client1/web1/
    total 2816
    drwxr-xr-x 17 root root 4096 Oct 27 00:32 .
    drwxr-xr-x 18 root root 4096 Oct 31 09:20 ..
    drwxr-xr-x 2 web1 client1 4096 Oct 27 00:32 backup
    -rwxr-xr-x 1 web1 client1 0 Oct 26 16:26 .bash_history
    drwxr-xr-x 2 root root 4096 Oct 26 16:26 bin
    drwxr-xr-x 2 web1 client1 4096 Oct 26 16:24 cgi-bin
    drwxr-xr-x 2 root root 4096 Nov 6 08:05 dev
    drwxr-xr-x 6 root root 4096 Oct 26 16:26 etc
    drwxr-xr-x 4 root root 4096 Oct 26 16:26 home
    drwxr-xr-x 3 root root 4096 Oct 26 16:26 lib
    lrwxrwxrwx 1 root root 4 Oct 26 16:26 lib64 -> /lib
    drwxr-xr-x 2 root root 4096 Nov 6 00:30 log
    drwx--x--- 2 web1 client1 4096 Oct 26 16:24 private
    drwx------ 2 web1 client1 4096 Oct 26 16:26 .ssh
    drwxr-xr-x 2 root root 4096 Oct 26 18:18 ssl
    drwxrwxrwx 2 web1 client1 2805760 Nov 6 18:25 tmp
    drwxr-xr-x 6 root root 4096 Oct 26 16:26 usr
    drwxr-xr-x 3 root root 4096 Oct 26 16:26 var
    drwx--x--- 43 web1 client1 12288 Nov 6 10:05 web
    root@puck384 dbadmin #
  17. till

    till Super Moderator

    The directory is protected to ensure that no user can create files there.

    I guess you use the ispconfig beta and not a release version as the beta has a known bug in the stats password protection function which has already been fixed in svn.
  18. abdi

    abdi New Member

    Till, do kindly share with me the Beta SVN URL and or installation instructions ...Thanks

    Till should I use this: svn://svn.ispconfig.org/ispconfig3/trunk/ ?

    Edit: I used the above SVN and indeed the /stats/ issue is now resolved. Thanks ...
    Last edited: Nov 17, 2012
  19. till

    till Super Moderator

    The stable branch which contains the fixes for ispconfig 3.0.5 is:

  20. dicenl

    dicenl New Member

    Just started with ispconfig and loving it! i also dont have any stats. just joining the conversation and giving my config info:

    Centos 6.3 x86_64
    httpd apache
    Followed the perfect server install (ispconfig 3 + courier ...)

    Checks performed in previous posts:

    # getenforce
    # which webalizer

    ls -la /etc | grep webalizer
    drwxr-xr-x 2 root root 4096 Dec 2 10:25 webalizer
    -rw-r--r-- 1 root root 23734 Dec 2 10:25 webalizer.conf

    ls -al /etc/webalizer
    total 16
    drwxr-xr-x 2 root root 4096 Dec 2 10:25 .
    drwxr-xr-x. 124 root root 12288 Dec 2 10:25 ..
    lrwxrwxrwx 1 root root 19 Nov 30 23:14 webalizer.conf -> /etc/webalizer.conf

    ls -la /var/www/clients/client1/web8/
    total 28
    drwxr-x--x 6 web8 client1 4096 Dec 2 10:36 .
    drwxr-xr-x 6 root root 4096 Dec 1 11:26 ..
    drwxr-x--x 2 web8 client1 4096 Dec 1 10:16 cgi-bin
    -rwxr-xr-x 1 root root 40 Dec 1 16:36 .htpasswd_stats
    lrwxrwxrwx 1 root root 38 Dec 1 10:16 log -> /var/log/ispconfig/httpd/www.xxxx.nl
    drwxr-x--x 2 web8 client1 4096 Dec 1 10:16 ssl
    drwxrwxrwx 2 web8 client1 4096 Dec 1 20:06 tmp
    drwx--x--- 7 web8 client1 4096 Dec 1 16:46 web

    In sites / statistics have set admin password

    Is there a way to force the creation of stats or do i realy have to wait 24 hours for it to happen automaticly?

Share This Page