|
Hi again, Here is the result of the command you suggested Yehuda: netstat -ln | grep 80 tcp6 0 0 :::80 :::* LISTEN udp6 0 0 :::22880 :::* unix 2 [ ACC ] STREAM LISTENING 15965 @/tmp/.ICE-unix/806 unix 2 [ ACC ] STREAM LISTENING 15966 /tmp/.ICE-unix/806 And some more info: /sbin/ifconfig em1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.1.100 netmask 255.255.255.0 broadcast 192.168.1.255 inet6 fe80::211:d8ff:fe26:a1ca prefixlen 64 scopeid 0x20<link> ether 00:11:d8:26:a1:ca txqueuelen 1000 (Ethernet) RX packets 3127 bytes 2155230 (2.0 MiB) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 3300 bytes 639943 (624.9 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 device interrupt 17 lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 127.0.0.1 netmask 255.0.0.0 inet6 ::1 prefixlen 128 scopeid 0x10<host> loop txqueuelen 0 (Local Loopback) RX packets 4 bytes 340 (340.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 4 bytes 340 (340.0 B) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 By the way, in the first e-mail, you might have seen the 'all' in the <Directory "/var/www/html"> When I restarted the server, it complained about that, so I commented it out, despite the notes about it in the file. <Directory "/var/www/html"> Options Indexes FollowSymLinks # AllowOverride controls what directives may be placed in .htaccess files. # It can be "All", "None", or any combination of the keywords: # Options FileInfo AuthConfig Limit #AllowOverride None #all Require all granted </Directory> Regarding the SELinux suspicion, I tried the suggestions in that wiki before my first post. That's where I learned the "ls -alZ" command. I should have put these in that e-mail. Here are the results on the pertinent folders: drwxrwxr-x. apache apache system_u:object_r:httpd_sys_content_t:s0 www drwxrwxr-x. apache apache system_u:object_r:httpd_sys_content_t:s0 . drwxr-xr-x. root root system_u:object_r:var_t:s0 .. drwxrwxr-x. apache apache system_u:object_r:httpd_sys_script_exec_t:s0 cgi-bin drwxrwxr-x. apache apache system_u:object_r:httpd_sys_content_t:s0 html -rwxr-xr-x. apache timothy unconfined_u:object_r:user_home_t:s0 index.php Actually I don't know how to use the "change file SELinux security context" command. But as you can see, the html file setting is "httpd_sys_content_t", but the index.php file is not. I did try these commands: cp /etc/selinux/config /etc/selinux/config.bak Disable SELinux sed -i s/SELINUX=enforcing/SELINUX=disabled/g /etc/selinux/config I thought that would disable SELinux to rule that out as a problem but it didn't appear to do anything. Reading a little bit more about the chcon command I tried it out: chcon -R --reference=info.php moodle Then files like the index all have that same httpd_sys_content_t label which is what Yehuda suggested. Still, there was no change in the Permission Denied situation. -rwxr-xr-x. apache apache unconfined_u:object_r:httpd_sys_content_t:s0 index.php One thing I haven't looked at because I don't understand is the comment at the end of the http://wiki.apache.org/httpd/13PermissionDenied article. Maybe someone could translate this into some concrete steps I could try: "In rare cases, this can be caused by other issues, such as a file permissions problem elsewhere in your apache2.conf file. For example, a WSGIScriptAlias directive not mapping to an actual file. The error message may not be accurate about which file was unreadable." Something funny is going on with the ip address however. When I go to localhost, like I said before, it prints this message: "Incorrect access detected, this server may be accessed only through "http://*.*.*.30:80/moodle" address, sorry. Please notify server administrator. This page should automatically redirect. If nothing is happening please use the continue link below." The funny part is that the ip address does not end with a 30, but a 50, as Linksys shows, and Tomcat, working on port 8080 on another box shows. So why does that message point to ...30:80/moodle? Strange. Any other suggestions would really help, Thanks in advance, Timothy. From: yehuda@xxxxxxxxxx Date: Wed, 9 Oct 2013 20:03:45 -0400 To: users@xxxxxxxxxxxxxxxx Subject: Re: Permission Still Denied with Moodle 1. For the "http://*my ip*/moodle" problem: It appears that there are no vhosts at all, so that should not get in the way. I should have listed this before too: Can you check if apache is listening on all ips?
netstat -ln | grep 80 2. For the localhost problem: I can't shake the feeling that this is SELinux related, since your permissions look OK. Did you look at this wiki article? I don't want to suggest anything you already tried.
Did you try changing the SELinux context (I think the correct one should be httpd_sys_content_t)? - Y On Wed, Oct 9, 2013 at 7:34 PM, Timothy Curchod <timofeyc@xxxxxxxxxxx> wrote:
|
|