BackupPC-users

Re: [BackupPC-users] Forbidden You don't have permission to access /BackupPC on this server.

2015-09-21 08:05:39
Subject: Re: [BackupPC-users] Forbidden You don't have permission to access /BackupPC on this server.
From: Bob of Donelson Trophy <bob AT donelsontrophy DOT net>
To: "General list for user discussion, questions and support" <backuppc-users AT lists.sourceforge DOT net>
Date: Mon, 21 Sep 2015 07:03:13 -0500

First, my only comment on top posting.

Here in the states most email clients default to top posting. Therefore, if I set my defaults to bottom post (as requested but not mandatory by all mailing list I participate in) my US customers (who, grant you, are NOT logical and think email should be in bottom post, logical order) reply to my emails with "your email response was empty" or "You didn't answer my question" and then I would need to explain to all of my customers where my answer is (at the bottom, where, yes, I think, logically it should be.) I cannot redirect the masses to bottom post, sorry. I, like you, have to live with top posts occasionally, sorry.

We mailing list normal users, although annoyed with top posting, can learn to follow the combination of top posts with bottom posts and keep up with answers.

Now, config files:

[root@localhost ~]# cat /etc/httpd/conf.d/BackupPC.conf
<Directory       /usr/share/BackupPC/>
# BackupPC requires valid authentication in order for the web interface to
# function properly.  One can view the web interface without authentication
# though all functionality is disabled.
#
# htpasswd -c /etc/BackupPC/apache.users yourusername
#

AuthType Basic
AuthUserFile /etc/BackupPC/apache.users
##AuthUserFile /etc/lib/BackupPC/passwd/htpasswd
AuthName "BackupPC"

<IfModule mod_authz_core.c>
  # Apache 2.4
  <RequireAll>
##    Require valid-user
   Require all granted
    <RequireAny>
      Require local
    </RequireAny>
  </RequireAll>
</IfModule>
<IfModule !mod_authz_core.c>
  # Apache 2.2
  order deny,allow
  deny from all
##  allow from 127.0.0.1
  allow from all
##  allow from ::1
##  require valid-user
  require all granted
</IfModule>


</Directory>


Alias           /BackupPC/images        /usr/share/BackupPC/html/
ScriptAlias     /BackupPC               /usr/share/BackupPC/sbin/BackupPC_Admin
ScriptAlias     /backuppc               /usr/share/BackupPC/sbin/BackupPC_Admin

>>>>>>>>> and:

[root@localhost ~]# cat /etc/httpd/conf/httpd.conf
#
# This is the main Apache HTTP server configuration file.  It contains the
# configuration directives that give the server its instructions.
# See <URL:http://httpd.apache.org/docs/2.4/> for detailed information.
# In particular, see
# <URL:http://httpd.apache.org/docs/2.4/mod/directives.html>
# for a discussion of each configuration directive.
#
# Do NOT simply read the instructions in here without understanding
# what they do.  They're here only as hints or reminders.  If you are unsure
# consult the online docs. You have been warned.  
#
# Configuration and logfile names: If the filenames you specify for many
# of the server's control files begin with "/" (or "drive:/" for Win32), the
# server will use that explicit path.  If the filenames do *not* begin
# with "/", the value of ServerRoot is prepended -- so 'log/access_log'
# with ServerRoot set to '/www' will be interpreted by the
# server as '/www/log/access_log', where as '/log/access_log' will be
# interpreted as '/log/access_log'.

#
# ServerRoot: The top of the directory tree under which the server's
# configuration, error, and log files are kept.
#
# Do not add a slash at the end of the directory path.  If you point
# ServerRoot at a non-local disk, be sure to specify a local disk on the
# Mutex directive, if file-based mutexes are used.  If you wish to share the
# same ServerRoot for multiple httpd daemons, you will need to change at
# least PidFile.
#
ServerRoot "/etc/httpd"

#
# Listen: Allows you to bind Apache to specific IP addresses and/or
# ports, instead of the default. See also the <VirtualHost>
# directive.
#
# Change this to Listen on specific IP addresses as shown below to
# prevent Apache from glomming onto all bound IP addresses.
#
#Listen 12.34.56.78:80
Listen 192.168.16.25:80

#
# Dynamic Shared Object (DSO) Support
#
# To be able to use the functionality of a module which was built as a DSO you
# have to place corresponding `LoadModule' lines at this location so the
# directives contained in it are actually available _before_ they are used.
# Statically compiled modules (those listed by `httpd -l') do not need
# to be loaded here.
#
# Example:
# LoadModule foo_module modules/mod_foo.so
#
Include conf.modules.d/*.conf

#
# If you wish httpd to run as a different user or group, you must run
# httpd as root initially and it will switch.  
#
# User/Group: The name (or #number) of the user/group to run httpd as.
# It is usually good practice to create a dedicated user and group for
# running httpd, as with most system services.
#
###User apache
User backuppc
Group apache

# 'Main' server configuration
#
# The directives in this section set up the values used by the 'main'
# server, which responds to any requests that aren't handled by a
# <VirtualHost> definition.  These values also provide defaults for
# any <VirtualHost> containers you may define later in the file.
#
# All of these directives may appear inside <VirtualHost> containers,
# in which case these default settings will be overridden for the
# virtual host being defined.
#

#
# ServerAdmin: Your address, where problems with the server should be
# e-mailed.  This address appears on some server-generated pages, such
# as error documents.  e.g. admin AT your-domain DOT com
#
ServerAdmin root@localhost

#
# ServerName gives the name and port that the server uses to identify itself.
# This can often be determined automatically, but we recommend you specify
# it explicitly to prevent problems during startup.
#
# If your host doesn't have a registered DNS name, enter its IP address here.
#
#ServerName www.example.com:80
###ServerName 192.168.16.25:80

#
# Deny access to the entirety of your server's filesystem. You must
# explicitly permit access to web content directories in other
# <Directory> blocks below.
#
<Directory />
    AllowOverride none
    Require all denied
</Directory>

#
# Note that from this point forward you must specifically allow
# particular features to be enabled - so if something's not working as
# you might expect, make sure that you have specifically enabled it
# below.
#

#
# DocumentRoot: The directory out of which you will serve your
# documents. By default, all requests are taken from this directory, but
# symbolic links and aliases may be used to point to other locations.
#
DocumentRoot "/var/www/html"

#
# Relax access to content within /var/www.
#
<Directory "/var/www">
    AllowOverride None
    # Allow open access:
    Require all granted
</Directory>

# Further relax access to the default document root:
<Directory "/var/www/html">
    #
    # Possible values for the Options directive are "None", "All",
    # or any combination of:
    #   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
    #
    # Note that "MultiViews" must be named *explicitly* --- "Options All"
    # doesn't give it to you.
    #
    # The Options directive is both complicated and important.  Please see
    # http://httpd.apache.org/docs/2.4/mod/core.html#options
    # for more information.
    #
      Options Indexes FollowSymLinks
#####    Options Indexes FollowSymLinks Includes ExecCGI

    #
    # AllowOverride controls what directives may be placed in .htaccess files.
    # It can be "All", "None", or any combination of the keywords:
    #   Options FileInfo AuthConfig Limit
    #
    AllowOverride None

    #
    # Controls who can get stuff from this server.
    #
    Require all granted
</Directory>

#
# DirectoryIndex: sets the file that Apache will serve if a directory
# is requested.
#
<IfModule dir_module>
    DirectoryIndex index.html
</IfModule>

#
# The following lines prevent .htaccess and .htpasswd files from being
# viewed by Web clients.
#
<Files ".ht*">
    Require all denied
</Files>

#
# ErrorLog: The location of the error log file.
# If you do not specify an ErrorLog directive within a <VirtualHost>
# container, error messages relating to that virtual host will be
# logged here.  If you *do* define an error logfile for a <VirtualHost>
# container, that host's errors will be logged there and not here.
#
ErrorLog "logs/error_log"

#
# LogLevel: Control the number of messages logged to the error_log.
# Possible values include: debug, info, notice, warn, error, crit,
# alert, emerg.
#
LogLevel warn

<IfModule log_config_module>
    #
    # The following directives define some format nicknames for use with
    # a CustomLog directive (see below).
    #
    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %b" common

    <IfModule logio_module>
      # You need to enable mod_logio.c to use %I and %O
      LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
    </IfModule>

    #
    # The location and format of the access logfile (Common Logfile Format).
    # If you do not define any access logfiles within a <VirtualHost>
    # container, they will be logged here.  Contrariwise, if you *do*
    # define per-<VirtualHost> access logfiles, transactions will be
    # logged therein and *not* in this file.
    #
    #CustomLog "logs/access_log" common

    #
    # If you prefer a logfile with access, agent, and referer information
    # (Combined Logfile Format) you can use the following directive.
    #
    CustomLog "logs/access_log" combined
</IfModule>

<IfModule alias_module>
    #
    # Redirect: Allows you to tell clients about documents that used to
    # exist in your server's namespace, but do not anymore. The client
    # will make a new request for the document at its new location.
    # Example:
    # Redirect permanent /foo http://www.example.com/bar

    #
    # Alias: Maps web paths into filesystem paths and is used to
    # access content that does not live under the DocumentRoot.
    # Example:
    # Alias /webpath /full/filesystem/path
    #
    # If you include a trailing / on /webpath then the server will
    # require it to be present in the URL.  You will also likely
    # need to provide a <Directory> section to allow access to
    # the filesystem path.

    #
    # ScriptAlias: This controls which directories contain server scripts.
    # ScriptAliases are essentially the same as Aliases, except that
    # documents in the target directory are treated as applications and
    # run by the server when requested rather than as documents sent to the
    # client.  The same rules about trailing "/" apply to ScriptAlias
    # directives as to Alias.
    #
    ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"

</IfModule>

#
# "/var/www/cgi-bin" should be changed to whatever your ScriptAliased
# CGI directory exists, if you have that configured.
#
<Directory "/var/www/cgi-bin">
    AllowOverride None
    Options None
    Require all granted
</Directory>

<IfModule mime_module>
    #
    # TypesConfig points to the file containing the list of mappings from
    # filename extension to MIME-type.
    #
    TypesConfig /etc/mime.types

    #
    # AddType allows you to add to or override the MIME configuration
    # file specified in TypesConfig for specific file types.
    #
    #AddType application/x-gzip .tgz
    #
    # AddEncoding allows you to have certain browsers uncompress
    # information on the fly. Note: Not all browsers support this.
    #
    #AddEncoding x-compress .Z
    #AddEncoding x-gzip .gz .tgz
    #
    # If the AddEncoding directives above are commented-out, then you
    # probably should define those extensions to indicate media types:
    #
    AddType application/x-compress .Z
    AddType application/x-gzip .gz .tgz

    #
    # AddHandler allows you to map certain file extensions to "handlers":
    # actions unrelated to filetype. These can be either built into the server
    # or added with the Action directive (see below)
    #
    # To use CGI scripts outside of ScriptAliased directories:
    # (You will also need to add "ExecCGI" to the "Options" directive.)
    #
    #AddHandler cgi-script .cgi

    # For type maps (negotiated resources):
    #AddHandler type-map var

    #
    # Filters allow you to process content before it is sent to the client.
    #
    # To parse .shtml files for server-side includes (SSI):
    # (You will also need to add "Includes" to the "Options" directive.)
    #
    AddType text/html .shtml
    AddOutputFilter INCLUDES .shtml
</IfModule>

#
# Specify a default charset for all content served; this enables
# interpretation of all content as UTF-8 by default.  To use the
# default browser choice (ISO-8859-1), or to allow the META tags
# in HTML content to override this choice, comment out this
# directive:
#
AddDefaultCharset UTF-8

<IfModule mime_magic_module>
    #
    # The mod_mime_magic module allows the server to use various hints from the
    # contents of the file itself to determine its type.  The MIMEMagicFile
    # directive tells the module where the hint definitions are located.
    #
    MIMEMagicFile conf/magic
</IfModule>

#
# Customizable error responses come in three flavors:
# 1) plain text 2) local redirects 3) external redirects
#
# Some examples:
#ErrorDocument 500 "The server made a boo boo."
#ErrorDocument 404 /missing.html
#ErrorDocument 404 "/cgi-bin/missing_handler.pl"
#ErrorDocument 402 http://www.example.com/subscription_info.html
#

#
# EnableMMAP and EnableSendfile: On systems that support it,
# memory-mapping or the sendfile syscall may be used to deliver
# files.  This usually improves server performance, but must
# be turned off when serving from networked-mounted
# filesystems or if support for these functions is otherwise
# broken on your system.
# Defaults if commented: EnableMMAP On, EnableSendfile Off
#
#EnableMMAP off
EnableSendfile on

# Supplemental configuration
#
# Load config files in the "/etc/httpd/conf.d" directory, if any.
IncludeOptional conf.d/*.conf

And now apache log file: (I have captured the last two days as all is too big.)

>>>>>>>>>> snipped <<<<<<<<<<<

[Fri Sep 18 13:20:33.563346 2015] [mpm_prefork:notice] [pid 2503] AH00171: Graceful restart requested, doing restart
[Fri Sep 18 13:20:33.611349 2015] [auth_digest:notice] [pid 2503] AH01757: generating secret for digest authentication ...
[Fri Sep 18 13:20:33.612547 2015] [lbmethod_heartbeat:notice] [pid 2503] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 13:20:33.612644 2015] [mpm_prefork:notice] [pid 2503] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 13:20:33.612650 2015] [core:notice] [pid 2503] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 13:20:44.552702 2015] [autoindex:error] [pid 9918] [client 192.168.16.210:56680] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Fri Sep 18 13:20:51.274211 2015] [authz_core:error] [pid 9921] [client 192.168.16.210:56707] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 13:21:55.198123 2015] [mpm_prefork:notice] [pid 2503] AH00171: Graceful restart requested, doing restart
[Fri Sep 18 13:21:55.245610 2015] [auth_digest:notice] [pid 2503] AH01757: generating secret for digest authentication ...
[Fri Sep 18 13:21:55.246693 2015] [lbmethod_heartbeat:notice] [pid 2503] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 13:21:55.246786 2015] [mpm_prefork:notice] [pid 2503] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 13:21:55.246792 2015] [core:notice] [pid 2503] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 13:22:04.471292 2015] [authz_core:error] [pid 9934] [client 192.168.16.210:57022] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 13:22:26.881019 2015] [mpm_prefork:notice] [pid 2503] AH00171: Graceful restart requested, doing restart
[Fri Sep 18 13:22:26.925863 2015] [auth_digest:notice] [pid 2503] AH01757: generating secret for digest authentication ...
[Fri Sep 18 13:22:26.926974 2015] [lbmethod_heartbeat:notice] [pid 2503] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 13:22:26.927059 2015] [mpm_prefork:notice] [pid 2503] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 13:22:26.927065 2015] [core:notice] [pid 2503] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 13:22:52.438607 2015] [authz_core:error] [pid 9945] [client 192.168.16.210:57028] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 13:24:11.202004 2015] [mpm_prefork:notice] [pid 2503] AH00170: caught SIGWINCH, shutting down gracefully
[Fri Sep 18 13:27:47.115439 2015] [core:notice] [pid 2499] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Fri Sep 18 13:27:47.214784 2015] [suexec:notice] [pid 2499] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 18 13:27:47.251707 2015] [auth_digest:notice] [pid 2499] AH01757: generating secret for digest authentication ...
[Fri Sep 18 13:27:47.253209 2015] [lbmethod_heartbeat:notice] [pid 2499] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 13:27:47.262450 2015] [mpm_prefork:notice] [pid 2499] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 13:27:47.262542 2015] [core:notice] [pid 2499] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 13:27:49.908805 2015] [mpm_prefork:notice] [pid 2499] AH00171: Graceful restart requested, doing restart
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 18 13:27:49.956795 2015] [auth_digest:notice] [pid 2499] AH01757: generating secret for digest authentication ...
[Fri Sep 18 13:27:49.957785 2015] [lbmethod_heartbeat:notice] [pid 2499] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 13:27:49.957876 2015] [mpm_prefork:notice] [pid 2499] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 13:27:49.957882 2015] [core:notice] [pid 2499] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 13:28:12.675242 2015] [authz_core:error] [pid 2509] [client 192.168.16.210:57045] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 13:28:18.286258 2015] [autoindex:error] [pid 2510] [client 192.168.16.210:57046] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Fri Sep 18 13:28:27.781652 2015] [authz_core:error] [pid 2511] [client 192.168.16.210:57048] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 13:38:17.812795 2015] [mpm_prefork:notice] [pid 2499] AH00170: caught SIGWINCH, shutting down gracefully
[Fri Sep 18 13:38:55.716297 2015] [core:notice] [pid 2544] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Fri Sep 18 13:38:55.717314 2015] [suexec:notice] [pid 2544] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 18 13:38:55.745869 2015] [auth_digest:notice] [pid 2544] AH01757: generating secret for digest authentication ...
[Fri Sep 18 13:38:55.746912 2015] [lbmethod_heartbeat:notice] [pid 2544] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 13:38:55.753638 2015] [mpm_prefork:notice] [pid 2544] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 13:38:55.753748 2015] [core:notice] [pid 2544] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 13:39:09.501669 2015] [autoindex:error] [pid 2547] [client 192.168.16.210:57231] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Fri Sep 18 13:39:17.199223 2015] [autoindex:error] [pid 2545] [client 192.168.16.210:57233] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Fri Sep 18 13:39:27.366907 2015] [authz_core:error] [pid 2549] [client 192.168.16.210:57235] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 13:40:24.425769 2015] [mpm_prefork:notice] [pid 2544] AH00170: caught SIGWINCH, shutting down gracefully
[Fri Sep 18 13:40:28.159411 2015] [core:notice] [pid 2567] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Fri Sep 18 13:40:28.160555 2015] [suexec:notice] [pid 2567] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 18 13:40:28.189090 2015] [auth_digest:notice] [pid 2567] AH01757: generating secret for digest authentication ...
[Fri Sep 18 13:40:28.190087 2015] [lbmethod_heartbeat:notice] [pid 2567] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 13:40:28.198105 2015] [mpm_prefork:notice] [pid 2567] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 13:40:28.198297 2015] [core:notice] [pid 2567] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 13:40:38.223969 2015] [authz_core:error] [pid 2568] [client 192.168.16.210:57240] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 13:42:40.316829 2015] [mpm_prefork:notice] [pid 2567] AH00170: caught SIGWINCH, shutting down gracefully
[Fri Sep 18 13:43:49.522224 2015] [core:notice] [pid 1768] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Fri Sep 18 13:43:49.671280 2015] [suexec:notice] [pid 1768] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 18 13:43:49.704772 2015] [auth_digest:notice] [pid 1768] AH01757: generating secret for digest authentication ...
[Fri Sep 18 13:43:49.706550 2015] [lbmethod_heartbeat:notice] [pid 1768] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 13:43:49.715909 2015] [mpm_prefork:notice] [pid 1768] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 13:43:49.716030 2015] [core:notice] [pid 1768] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 13:44:14.433389 2015] [autoindex:error] [pid 2458] [client 192.168.16.210:57266] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Fri Sep 18 13:44:21.073258 2015] [authz_core:error] [pid 2461] [client 192.168.16.210:57268] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 13:44:55.441372 2015] [authz_core:error] [pid 2460] [client 192.168.16.210:57269] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 13:48:39.829227 2015] [mpm_prefork:notice] [pid 1768] AH00170: caught SIGWINCH, shutting down gracefully
[Fri Sep 18 13:51:10.251794 2015] [core:notice] [pid 3169] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Fri Sep 18 13:51:10.253048 2015] [suexec:notice] [pid 3169] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 18 13:51:10.283313 2015] [auth_digest:notice] [pid 3169] AH01757: generating secret for digest authentication ...
[Fri Sep 18 13:51:10.284545 2015] [lbmethod_heartbeat:notice] [pid 3169] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 13:51:10.292687 2015] [mpm_prefork:notice] [pid 3169] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 13:51:10.292785 2015] [core:notice] [pid 3169] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 13:51:51.218329 2015] [authz_core:error] [pid 3172] [client 192.168.16.210:57284] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 13:52:01.675976 2015] [autoindex:error] [pid 3171] [client 192.168.16.210:57287] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Fri Sep 18 13:52:57.624102 2015] [mpm_prefork:notice] [pid 3169] AH00170: caught SIGWINCH, shutting down gracefully
[Fri Sep 18 13:54:07.423289 2015] [suexec:notice] [pid 1274] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 18 13:54:07.473014 2015] [auth_digest:notice] [pid 1274] AH01757: generating secret for digest authentication ...
[Fri Sep 18 13:54:07.474306 2015] [lbmethod_heartbeat:notice] [pid 1274] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 13:54:07.480125 2015] [mpm_prefork:notice] [pid 1274] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 13:54:07.480289 2015] [core:notice] [pid 1274] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 14:04:36.322125 2015] [autoindex:error] [pid 2424] [client 192.168.16.210:57328] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Fri Sep 18 14:04:43.177582 2015] [autoindex:error] [pid 2421] [client 192.168.16.210:57330] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Fri Sep 18 14:04:52.738122 2015] [authz_core:error] [pid 2423] [client 192.168.16.210:57334] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 14:05:01.629315 2015] [authz_core:error] [pid 2490] [client 192.168.16.210:57336] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 14:12:49.598779 2015] [authz_core:error] [pid 2491] [client 192.168.16.210:57355] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 14:13:08.086517 2015] [mpm_prefork:notice] [pid 1274] AH00170: caught SIGWINCH, shutting down gracefully
[Fri Sep 18 14:13:15.367275 2015] [suexec:notice] [pid 2518] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 18 14:13:15.397873 2015] [auth_digest:notice] [pid 2518] AH01757: generating secret for digest authentication ...
[Fri Sep 18 14:13:15.398724 2015] [lbmethod_heartbeat:notice] [pid 2518] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 14:13:15.406028 2015] [mpm_prefork:notice] [pid 2518] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 14:13:15.406149 2015] [core:notice] [pid 2518] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 14:13:31.289835 2015] [autoindex:error] [pid 2521] [client 192.168.16.210:57357] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Fri Sep 18 14:13:44.404492 2015] [authz_core:error] [pid 2523] [client 192.168.16.210:57359] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 14:15:13.625290 2015] [mpm_prefork:notice] [pid 2518] AH00170: caught SIGWINCH, shutting down gracefully
[Fri Sep 18 14:16:21.957740 2015] [suexec:notice] [pid 1619] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 18 14:16:22.009189 2015] [auth_digest:notice] [pid 1619] AH01757: generating secret for digest authentication ...
[Fri Sep 18 14:16:22.010189 2015] [lbmethod_heartbeat:notice] [pid 1619] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 14:16:22.018105 2015] [mpm_prefork:notice] [pid 1619] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 14:16:22.018214 2015] [core:notice] [pid 1619] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 14:17:10.238139 2015] [autoindex:error] [pid 2436] [client 192.168.16.210:57423] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Fri Sep 18 14:17:26.151551 2015] [authz_core:error] [pid 2439] [client 192.168.16.210:57425] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 14:19:54.477928 2015] [authz_core:error] [pid 2438] [client 192.168.16.210:57482] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 14:22:19.851868 2015] [authz_core:error] [pid 2440] [client 192.168.16.210:57510] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 14:22:22.529501 2015] [authz_core:error] [pid 2440] [client 192.168.16.210:57510] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 14:24:02.653696 2015] [mpm_prefork:notice] [pid 1619] AH00170: caught SIGWINCH, shutting down gracefully
[Fri Sep 18 14:54:32.535923 2015] [suexec:notice] [pid 1747] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 18 14:54:32.592910 2015] [auth_digest:notice] [pid 1747] AH01757: generating secret for digest authentication ...
[Fri Sep 18 14:54:32.593868 2015] [lbmethod_heartbeat:notice] [pid 1747] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 14:54:32.598476 2015] [mpm_prefork:notice] [pid 1747] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 14:54:32.598615 2015] [core:notice] [pid 1747] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 20:24:48.036767 2015] [autoindex:error] [pid 2435] [client 192.168.242.215:51742] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Fri Sep 18 20:24:58.014476 2015] [authz_core:error] [pid 2434] [client 192.168.242.215:51765] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 20:25:29.996838 2015] [mpm_prefork:notice] [pid 1747] AH00170: caught SIGWINCH, shutting down gracefully
[Fri Sep 18 20:26:01.815903 2015] [suexec:notice] [pid 2905] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 18 20:26:01.845153 2015] [auth_digest:notice] [pid 2905] AH01757: generating secret for digest authentication ...
[Fri Sep 18 20:26:01.845984 2015] [lbmethod_heartbeat:notice] [pid 2905] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 20:26:01.852912 2015] [mpm_prefork:notice] [pid 2905] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 20:26:01.853038 2015] [core:notice] [pid 2905] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 20:28:45.613231 2015] [authz_core:error] [pid 2908] [client 192.168.242.215:52220] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 20:28:53.660483 2015] [autoindex:error] [pid 2907] [client 192.168.242.215:52237] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Fri Sep 18 20:30:33.520870 2015] [authz_core:error] [pid 2909] [client 192.168.242.215:52440] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Fri Sep 18 20:36:39.089332 2015] [mpm_prefork:notice] [pid 2905] AH00170: caught SIGWINCH, shutting down gracefully
[Fri Sep 18 20:36:44.139485 2015] [suexec:notice] [pid 2929] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain. Set the 'ServerName' directive globally to suppress this message
[Fri Sep 18 20:36:44.167595 2015] [auth_digest:notice] [pid 2929] AH01757: generating secret for digest authentication ...
[Fri Sep 18 20:36:44.168453 2015] [lbmethod_heartbeat:notice] [pid 2929] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 18 20:36:44.175641 2015] [mpm_prefork:notice] [pid 2929] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Fri Sep 18 20:36:44.175776 2015] [core:notice] [pid 2929] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Fri Sep 18 20:37:11.124223 2015] [autoindex:error] [pid 2931] [client 192.168.242.215:53264] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Fri Sep 18 20:37:22.079584 2015] [authz_core:error] [pid 2933] [client 192.168.242.215:53288] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Sat Sep 19 16:13:20.209212 2015] [autoindex:error] [pid 2930] [client 192.168.242.29:46578] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Sat Sep 19 16:13:26.721978 2015] [authz_core:error] [pid 2935] [client 192.168.242.29:46580] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Sat Sep 19 17:31:16.083884 2015] [mpm_prefork:notice] [pid 2929] AH00170: caught SIGWINCH, shutting down gracefully
[Sat Sep 19 17:31:22.685745 2015] [suexec:notice] [pid 4578] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain. Set the 'ServerName' directive globally to suppress this message
[Sat Sep 19 17:31:22.714166 2015] [auth_digest:notice] [pid 4578] AH01757: generating secret for digest authentication ...
[Sat Sep 19 17:31:22.715010 2015] [lbmethod_heartbeat:notice] [pid 4578] AH02282: No slotmem from mod_heartmonitor
[Sat Sep 19 17:31:22.723066 2015] [mpm_prefork:notice] [pid 4578] AH00163: Apache/2.4.6 (CentOS) mod_perl/2.0.9dev Perl/v5.16.3 configured -- resuming normal operations
[Sat Sep 19 17:31:22.723207 2015] [core:notice] [pid 4578] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'
[Sat Sep 19 17:31:56.375289 2015] [authz_core:error] [pid 4579] [client 192.168.242.29:46846] AH01630: client denied by server configuration: /usr/share/BackupPC/sbin/BackupPC_Admin
[Sat Sep 19 17:32:05.404170 2015] [autoindex:error] [pid 4580] [client 192.168.242.29:46847] AH01276: Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive
[Sun Sep 20 03:33:01.233292 2015] [mpm_prefork:notice] [pid 4578] AH00171: Graceful restart requested, doing restart
AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using localhost.localdomain. Set the 'ServerName' directive globally to suppress this message

>>>>>>>>>>> snipped <<<<<<<<<<<<<<

Now, FYI, this machine has a dynamic ip address. (It will move later to it's final location where it will receive and static address.) So, I am not worried about the "qualified domain name" complaint.

The complaint about "/usr/share/BackupPC/sbin/BackupPC_Admin" access. I have explored file permissions and believe I have them set correctly. Most with "backuppc:apache" user name and group name combination. But, not knowing how to read log files very well, there may be something there I have overlooked.

I did notice "Cannot serve directory /var/www/html/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive" and I do not have an index.html file in /var/www/html/ but rather all the files that make up the "BackupPC" webpage. (*.gif, *.css, *.png, etc.)

And so, sorry about the top posting but I need help.

---

_______________________________

Bob Wooden of Donelson Trophy

615.885.2846
www.donelsontrophy.com

"Everyone deserves an award!!"

On 2015-09-20 18:35, Adam Goryachev wrote:



On 21/09/15 09:18, Bob of Donelson Trophy wrote:
On 2015-09-20 08:38, Timothy Murphy wrote:
Bob of Donelson Trophy wrote:
I have been using BackupPC for years on an Ubuntu/Debian OS. I am switching to CentOS 7 and cannot figure out why I am getting the following: FORBIDDEN You don't have permission to access /BackupPC on this server. . . . . when I "http://[ipaddress]/BackupPC" I have disabled selinux and firewalld to see if they are interfering with my access. They do not appear to be. (So, I re-enabled them.) I can access "http://[ipaddress]" and get the default CentOS webpage. To install BackupPC I enabled the EPEL repository. It appears to have included all the dependencies. I have checked and re-checked file permissions. Any ideas why I cannot access? Suggestions?
1. Did you edit /etc/httpd/conf/httpd.conf to have User backuppc
and restart httpd ?

2. Did you run sudo htpasswd -c /etc/BackupPC/apache.users <user>

3. Does backuppc own all the files in /var/lib/BackupPC ?
Hi Bob,

Suggestion.... why not show us what you have in your config file? Maybe even share the log file (apache error_log)? That would likely allow us to provide more than just random guesses.

PS, and please don't top post on mailing lists.

PPS, please don't take this the wrong way, the above is constructive criticism (or meant to be). Providing configs and logs will allow everyone to provide more sensible/helpful responses.

Regards,
Adam

--
Adam Goryachev Website Managers www.websitemanagers.com.au

------------------------------------------------------------------------------

_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/
------------------------------------------------------------------------------
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/
<Prev in Thread] Current Thread [Next in Thread>