Getting 403 Forbidden when accessing Reviewboard

2013-05-21 Thread Justin O'Doherty 
I've installed the following on RedHat
 
ReviewBoard 1.6.16
Apache 2.4.4
Python 2.7.4
Django 1.3.7
 
The issue I'm having is that when I try to request a page from Reviewboard, 
I get a 403 Forbidden response.
 
# curl http://localhost:8080/


403 Forbidden

Forbidden
You don't have permission to access /
on this server.

 
>From /usr/local/apache2/logs/error_log
[Tue May 21 16:32:21.346195 2013] [authz_core:error] [pid 3723:tid 
1122359616] [client 127.0.0.1:39081] AH01630: client denied by server 
configuration: /var/www/reviewboard/htdocs/reviewboard.wsgi
 
I'm starting Apache as root but user switches to daemon
# ps -ef | grep apache
root  3566 1  0 15:29 ?00:00:00 
/usr/local/apache2/bin/httpd -k start
daemon3721  3566  0 15:31 ?00:00:00 
/usr/local/apache2/bin/httpd -k start
daemon3722  3566  0 15:31 ?00:00:00 
/usr/local/apache2/bin/httpd -k start
daemon3723  3566  0 15:31 ?00:00:00 
/usr/local/apache2/bin/httpd -k start
root  5940  9958  0 16:26 pts/100:00:00 grep apache
 
Following the instructions in the site installation guide, I have changed 
the ownership of /var/www/reviewboard/htdocs and /var/www/reviewboard/data 
to daemon.
 
# ls -ltr
total 20
drwxrwxrwx 2 root   root 4096 May 21 13:56 tmp
drwxr-xr-x 2 root   root 4096 May 21 13:56 logs
drwxr-xr-x 3 daemon root 4096 May 21 13:56 htdocs
drwxr-xr-x 2 daemon root 4096 May 21 13:56 data
drwxr-xr-x 2 root   root 4096 May 21 13:56 conf
 
# more /usr/local/apache2/conf/extra/httpd-vhosts.conf
# Virtual Hosts
#
# Required modules: mod_log_config
# If you want to maintain multiple domains/hostnames on your
# machine you can setup VirtualHost containers for them. Most configurations
# use only name-based virtual hosts so the server doesn't need to worry 
about
# IP addresses. This is indicated by the asterisks in the directives below.
#
# Please see the documentation at
# 
http://httpd.apache.org/docs/2.4/vhosts/
>
# for further details before you try to setup virtual hosts.
#
# You may use the command line option '-S' to verify your virtual host
# configuration.
#
# VirtualHost example:
# Almost any Apache directive may go into a VirtualHost container.
# The first VirtualHost section is used for all requests that do not
# match a ServerName or ServerAlias in any  block.
#

ServerName localhost
DocumentRoot "/var/www/reviewboard/htdocs"
# Error handlers
ErrorDocument 500 /errordocs/500.html
WSGIPassAuthorization On
WSGIScriptAlias "/" "/var/www/reviewboard/htdocs/reviewboard.wsgi/"

AllowOverride All
Options -Indexes +FollowSymLinks
Allow from all

# Alias static media requests to filesystem
Alias /media "/var/www/reviewboard/htdocs/media"
Alias /errordocs "/var/www/reviewboard/htdocs/errordocs"
Alias /favicon.ico 
"/var/www/reviewboard/htdocs/media/rbcommons/images/favicon.png"

 

# more /var/www/reviewboard/htdocs/reviewboard.wsgi
import os
import sys
os.environ['DJANGO_SETTINGS_MODULE'] = "reviewboard.settings"
os.environ['PYTHON_EGG_CACHE'] = "/var/www/reviewboard/tmp/egg_cache"
os.environ['HOME'] = "/var/www/reviewboard/data"
os.environ['PYTHONPATH'] = '/var/www/reviewboard/conf:' + 
os.environ.get('PYTHONPATH', '')
sys.path = ['/var/www/reviewboard/conf'] + sys.path
import django.core.handlers.wsgi
application = django.core.handlers.wsgi.WSGIHandler()
 
 
Perhaps I need to modify other file permissions/ ownerships? Or do I need 
to run Apache under a different account? Any suggestions would be greatly 
appreciated.
 
Justin

-- 
Want to help the Review Board project? Donate today at 
http://www.reviewboard.org/donate/
Happy user? Let us know at http://www.reviewboard.org/users/
-~--~~~~--~~--~--~---
To unsubscribe from this group, send email to 
reviewboard+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/reviewboard?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Re: Getting 403 Forbidden when accessing Reviewboard

2013-05-21 Thread Stephen Gallagher 
On 05/21/2013 12:03 PM, Justin O'Doherty wrote:
> I've installed the following on RedHat
>  
> ReviewBoard 1.6.16
> Apache 2.4.4
> Python 2.7.4
> Django 1.3.7
>  
> The issue I'm having is that when I try to request a page from
> Reviewboard, I get a 403 Forbidden response.
>  
> # curl http://localhost:8080/
> 
> 
> 403 Forbidden
> 
> Forbidden
> You don't have permission to access /
> on this server.
> 
>  
> From /usr/local/apache2/logs/error_log
> [Tue May 21 16:32:21.346195 2013] [authz_core:error] [pid 3723:tid
> 1122359616] [client 127.0.0.1:39081] AH01630: client denied by server
> configuration: /var/www/reviewboard/htdocs/reviewboard.wsgi
>  
> I'm starting Apache as root but user switches to daemon
> # ps -ef | grep apache
> root  3566 1  0 15:29 ?00:00:00
> /usr/local/apache2/bin/httpd -k start
> daemon3721  3566  0 15:31 ?00:00:00
> /usr/local/apache2/bin/httpd -k start
> daemon3722  3566  0 15:31 ?00:00:00
> /usr/local/apache2/bin/httpd -k start
> daemon3723  3566  0 15:31 ?00:00:00
> /usr/local/apache2/bin/httpd -k start
> root  5940  9958  0 16:26 pts/100:00:00 grep apache
>  
> Following the instructions in the site installation guide, I have
> changed the ownership of /var/www/reviewboard/htdocs and
> /var/www/reviewboard/data to daemon.
>  
> # ls -ltr
> total 20
> drwxrwxrwx 2 root   root 4096 May 21 13:56 tmp
> drwxr-xr-x 2 root   root 4096 May 21 13:56 logs
> drwxr-xr-x 3 daemon root 4096 May 21 13:56 htdocs
> drwxr-xr-x 2 daemon root 4096 May 21 13:56 data
> drwxr-xr-x 2 root   root 4096 May 21 13:56 conf
>  
> # more /usr/local/apache2/conf/extra/httpd-vhosts.conf
> # Virtual Hosts
> #
> # Required modules: mod_log_config
> # If you want to maintain multiple domains/hostnames on your
> # machine you can setup VirtualHost containers for them. Most configurations
> # use only name-based virtual hosts so the server doesn't need to worry
> about
> # IP addresses. This is indicated by the asterisks in the directives below.
> #
> # Please see the documentation at
> # http://httpd.apache.org/docs/2.4/vhosts/
> >
> # for further details before you try to setup virtual hosts.
> #
> # You may use the command line option '-S' to verify your virtual host
> # configuration.
> #
> # VirtualHost example:
> # Almost any Apache directive may go into a VirtualHost container.
> # The first VirtualHost section is used for all requests that do not
> # match a ServerName or ServerAlias in any  block.
> #
> 
> ServerName localhost
> DocumentRoot "/var/www/reviewboard/htdocs"
> # Error handlers
> ErrorDocument 500 /errordocs/500.html
> WSGIPassAuthorization On
> WSGIScriptAlias "/" "/var/www/reviewboard/htdocs/reviewboard.wsgi/"
> 
> AllowOverride All
> Options -Indexes +FollowSymLinks
> Allow from all
> 
> # Alias static media requests to filesystem
> Alias /media "/var/www/reviewboard/htdocs/media"
> Alias /errordocs "/var/www/reviewboard/htdocs/errordocs"
> Alias /favicon.ico
> "/var/www/reviewboard/htdocs/media/rbcommons/images/favicon.png"
> 
>  
> 
> # more /var/www/reviewboard/htdocs/reviewboard.wsgi
> import os
> import sys
> os.environ['DJANGO_SETTINGS_MODULE'] = "reviewboard.settings"
> os.environ['PYTHON_EGG_CACHE'] = "/var/www/reviewboard/tmp/egg_cache"
> os.environ['HOME'] = "/var/www/reviewboard/data"
> os.environ['PYTHONPATH'] = '/var/www/reviewboard/conf:' +
> os.environ.get('PYTHONPATH', '')
> sys.path = ['/var/www/reviewboard/conf'] + sys.path
> import django.core.handlers.wsgi
> application = django.core.handlers.wsgi.WSGIHandler()
>  
>  
> Perhaps I need to modify other file permissions/ ownerships? Or do I
> need to run Apache under a different account? Any suggestions would be
> greatly appreciated.
>  

>From the logs above, it looks like you compiled your own apache in
/usr/local and so on and are using that? Is there a particular reason
you aren't running the packages available in EPEL[1] (Extra Packages for
Enterprise Linux) repository that I created?

Are you on Red Hat Enterprise Linux 6? It wasn't clear above.

[1] http://fedoraproject.org/wiki/EPEL

-- 
Want to help the Review Board project? Donate today at 
http://www.reviewboard.org/donate/
Happy user? Let us know at http://www.reviewboard.org/users/
-~--~~~~--~~--~--~---
To unsubscribe from this group, send email to 
reviewboard+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/reviewboard?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.