More info on my reverse proxy cgi problem:
Here is a line of what I presume is the error log entry on the main server
for the cgi error I am getting:
[Thu Jul 12 11:57:21 2007] [error] [client 192.168.2.2] client denied by
server
configuration: /apache$root/cgi-bin/cgi_main
So something is telling me that the server configuration is set to deny the
client (the apache reverse proxy?) access to the cgi-bin?
The httpd.conf does have this entry:
<Directory "/apache$root/cgi-bin">
AllowOverride None
Options None
Order deny,allow
Deny from all
Allow from 10.2.1.0/24
</Directory>
However this app runs from any client (browser) just fine. Is it possible
that I need to write the proxy heard to appear to be coming from the 10
network for this to work? The error log does indicate that the reverse proxy
is a 192 address.
Also basic first question I should ask: Am I correct in thinking that the
proxy is transparent to cgi apps running on the main server, cgi does not
have to be running on the reverse proxy to make this work.
Regards, Jeff
-----Original Message-----
From: Tony Stevenson [mailto:tony@xxxxxxxxxxx]
Sent: Wednesday, July 11, 2007 4:08 PM
To: users@xxxxxxxxxxxxxxxx
Subject: Re: apache2 reverse proxy cgi problem
Jeff Murch wrote:
> I am almost to the point of having my apache2 reverse proxy complete. I
am
> having trouble now when the reverse proxy forwards a user from the login
> page to the cgi-bin on the main server. I get an error that is generated
> from the main server:
>
> Forbidden
> You don't have permission to access /cgi-bin/cgi_main on this server.
Jeff what is in your error log on the back-end/main server?
...
--
Tony
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.476 / Virus Database: 269.10.2/894 - Release Date: 7/10/2007
5:44 PM
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|