Re: AH01630: client denied by server configuration

[Robert Moskowitz <rgm@xxxxxxxxxxxxxxx>]

Look at the error message from the log.  The IP is

[client 192.168.160.20:52060]

This is surely in the range of

Require ip 192.168.0.0/16

The URL being asked for is:

http://klovia.htt-consult.com/mailadmin/setup.php

I have the following:

cat /etc/httpd/conf.d/00-init.conf
ServerAdmin postmaster@htt-consult.com
ServerName klovia.htt-consult.com
<VirtualHost *:80>
	<Directory "/var/www/html">
		Options Indexes FollowSymLinks
		AllowOverride None
		Require all granted
	</Directory>
</VirtualHost>
<VirtualHost *:443>
	SSLEngine On
	SSLCertificateFile /etc/pki/tls/certs/htt-consult.com.crt
	SSLCertificateKeyFile /etc/pki/tls/private/htt-consult.com.key
	<Directory "/var/www/html">
		Options Indexes FollowSymLinks
		AllowOverride None
		Require all granted
	</Directory>
</VirtualHost>

cat /etc/httpd/conf.d/postfixadmin.conf

alias /mailadmin /usr/share/postfixadmin
<Directory "/usr/share/postfixadmin/public">
AllowOverride AuthConfig
Require ip 192.168.0.0/16
</Directory>


?

On 2/3/19 5:51 AM, Daniel wrote:

Client does not match the required ip,make sure you have a directory directive matching the resource you are asking for ,and allowing permissions to the up range of the client or with a "require all granted"

El dom., 3 feb. 2019 1:35, Robert Moskowitz <rgm@xxxxxxxxxxxxxxx> escribió:

I have google around and the obvious reasons for this..

I am working on a new setup with posrfixadmin ver 3.2 on Centos7-armv7 with SElinux enforcing. Last I worked with postfixadmin it was ver 3.0.2 and my notes are based on that and Apache 2.4.

My postfixadmin.conf file for Apache is:

alias /mailadmin /usr/share/postfixadmin
<Directory "/usr/share/postfixadmin/public">
AllowOverride AuthConfig
Require ip 192.168.0.0/16
</Directory>

I added the /public on the Directory statement based on the content of

/usr/share/postfixadmin/index.php

when I try connecting to host/mailadmin/setup.php I get:

Forbidden
You don't have permission to access /mailadmin/setup.php on this server.

Checking error_log I see:

[Fri Feb 01 15:40:43.714302 2019] [authz_core:error] [pid 7692] [client 192.168.160.20:52060] AH01630: client denied by server configuration: /usr/share/postfixadmin/setup.php

My IP addr is in the required range, but it fails. I tried opening it up to "require all granted" and still no access.

In 3.0.2 I had to do:

chcon -R -t httpd_sys_content_rw_t /usr/share/postfixadmin/templates_c
setsebool -P httpd_can_network_connect on

I noted that the directory is now /templates but the INSTALL.TXT still points to templates_c. I have made the change to the above chcon command with no results.

What am I missing? What has changed?

thanks