You need to run namei -mo /home/hoff/public_html/index.html and fix the
permissions. httpd needs traversal capability from /.

Also, consider moving your content out of /home

On Fri, Jul 28, 2023 at 12:40 PM jean-frederic clere <jfcl...@gmail.com>
wrote:

> On 7/20/23 15:07, Andrew Hoff wrote:
> > Hello,
> >
> > Strange problem. Everything was going great for at least six years then
> > all of a sudden authentication using port 80 failed. Authentication
> > using port 443 works fine.
>
> Probably something is defined in the 443 VirtualHost and not in 80 one..
>
> SElinux would block both port and not only 80, but that is worth
> checking.  Check if enable, if yes put a permissive mode and retry.
>
> > I first noticed the problem because apache no longer creates the
> > REMOTE_USER env variable. _I want authentication using port 80, i.e.
> > plain vanilla http._
> >
> > httpd.conf attached. See line 169. (httpd service is running.)
> > If I enter the following url it should bring up a login box:
> > http://172.18.0.20/~hoff <http://172.18.0.20/~hoff> (It no longer does.)
> > Error_log: [Thu Jul 20 21:39:57.913337 2023] [core:error] [pid 3460:tid
> > 3522] (13)Permission denied: [client 172.18.0.97:54422] AH00035: access
> > to /~hoff/index.html denied (filesystem path
> > '/home/hoff/public_html/index.html') because search permissions are
> > missing on a component of the path
> >
> > I rebuilt the server and am using fedora 38 fully updated. Problem still
> > persists.
> >
> > FYI only (netstat -nap | grep httpd):
> > tcp 0 0 172.18.0.20:80 0.0.0.0:* LISTEN 3456/httpd
> > tcp 0 0 172.18.0.20:443 0.0.0.0:* LISTEN 3456/httpd
> > tcp6 0 0 fec0::ac12:14:443 :::* LISTEN 3456/httpd
> > tcp6 0 0 fec0::ac12:14:80 :::* LISTEN 3456/httpd
> >
> > Regards,
> >
> > --
> >
> > Andrew Hoff
> > 6/10 Middle Road
> > Maribyrnong 3032
> > Victoria, AU
> > Tel: 0393185581 (Please leave a message.)
> > Mob: 0400966178
> > Email: andrew.h...@bigpond.com
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> > For additional commands, e-mail: users-h...@httpd.apache.org
>
> --
> Cheers
>
> Jean-Frederic
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
> For additional commands, e-mail: users-h...@httpd.apache.org
>
>

Reply via email to