[gentoo-user] Another apache 2.4 - Forbidden: You don't have permission to access this resource.

[gentoo-user] Another apache 2.4 - Forbidden: You don't have permission to access this resource.

[thelma]

When I try to configure sql-ledger, /localhost/sql-ledger/index.html 
I get an error:  Forbidden: You don't have permission to access this resource.

Apache starts normally but there is an entry in /var/logs/apache/error_log  (how to make it go way)

[:notice] [pid 5015] ModSecurity for Apache/2.9.3 (http://www.modsecurity.org/) configured.
[:notice] [pid 5015] ModSecurity: APR compiled version="1.7.0"; loaded version="1.7.0"
[:notice] [pid 5015] ModSecurity: PCRE compiled version="8.44 "; loaded version="8.44 2020-02-12"
[:notice] [pid 5015] ModSecurity: LIBXML compiled version="2.9.10"
[:notice] [pid 5015] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On.
[mpm_prefork:notice] [pid 5016] AH00163: Apache/2.4.46 (Unix) OpenSSL/1.1.1g PHP/7.4.11 configured -- resuming normal operations
Wed Dec 02 20:38:26.746392 2020] [core:notice] [pid 5016] AH00094: Command line: '/usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D SSL -D SSL_DEFAULT_VHOST -D LANGUAGE -D PHP -D SECURITY -d /usr/lib64/apache2 -f /etc/apache2/httpd.conf'
[authz_core:error] [pid 4900] [client ::1:46226] AH01630: client denied by server configuration: /usr/local/sql-ledger/index.html


The above error log entry has nothing to with the below configuration except the last line:
[authz_core:error] [pid 4900] [client ::1:46226] AH01630: client denied by server configuration: /usr/local/sql-ledger/index.html

My sql-ledger_apache.config  2.4 config

Alias /sql-ledger /usr/local/sql-ledger/
<Directory /usr/local/sql-ledger>
  AllowOverride All
  AddHandler cgi-script .pl
  AddDefaultCharset On
  Options ExecCGI Includes FollowSymlinks
  Require ip 10.0.0.109
</Directory>

<Directory /usr/local/sql-ledger/users>
  Require all denied
</Directory>

All the configuration entries are in main server (not in .htaccess)

-- 
Thelma

Re: [gentoo-user] Another apache 2.4 - Forbidden: You don't have permission to access this resource.

[Richard Snow]

[-- Attachment #1: Type: text/plain, Size: 2014 bytes --]

H Richard

On Wed, Dec 2, 2020, 10:09 PM <thelma@sys-concept.com> wrote:

> When I try to configure sql-ledger, /localhost/sql-ledger/index.html
> I get an error:  Forbidden: You don't have permission to access this
> resource.
>
> Apache starts normally but there is an entry in
> /var/logs/apache/error_log  (how to make it go way)
>
> [:notice] [pid 5015] ModSecurity for Apache/2.9.3 (
> http://www.modsecurity.org/) configured.
> [:notice] [pid 5015] ModSecurity: APR compiled version="1.7.0"; loaded
> version="1.7.0"
> [:notice] [pid 5015] ModSecurity: PCRE compiled version="8.44 "; loaded
> version="8.44 2020-02-12"
> [:notice] [pid 5015] ModSecurity: LIBXML compiled version="2.9.10"
> [:notice] [pid 5015] ModSecurity: Status engine is currently disabled,
> enable it by set SecStatusEngine to On.
> [mpm_prefork:notice] [pid 5016] AH00163: Apache/2.4.46 (Unix)
> OpenSSL/1.1.1g PHP/7.4.11 configured -- resuming normal operations
> Wed Dec 02 20:38:26.746392 2020] [core:notice] [pid 5016] AH00094: Command
> line: '/usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D SSL -D
> SSL_DEFAULT_VHOST -D LANGUAGE -D PHP -D SECURITY -d /usr/lib64/apache2 -f
> /etc/apache2/httpd.conf'
> [authz_core:error] [pid 4900] [client ::1:46226] AH01630: client denied by
> server configuration: /usr/local/sql-ledger/index.html
>
>
> The above error log entry has nothing to with the below configuration
> except the last line:
> [authz_core:error] [pid 4900] [client ::1:46226] AH01630: client denied by
> server configuration: /usr/local/sql-ledger/index.html
>
> My sql-ledger_apache.config  2.4 config
>
> Alias /sql-ledger /usr/local/sql-ledger/
> <Directory /usr/local/sql-ledger>
>   AllowOverride All
>   AddHandler cgi-script .pl
>   AddDefaultCharset On
>   Options ExecCGI Includes FollowSymlinks
>   Require ip 10.0.0.109
> </Directory>
>
> <Directory /usr/local/sql-ledger/users>
>   Require all denied
> </Directory>
>
> All the configuration entries are in main server (not in .htaccess)
>
> --
> Thelma
>
>

[-- Attachment #2: Type: text/html, Size: 2559 bytes --]

Re: [gentoo-user] Another apache 2.4 - Forbidden: You don't have permission to access this resource.

[Michael]

[-- Attachment #1: Type: text/plain, Size: 2183 bytes --]

On Thursday, 3 December 2020 04:09:15 GMT thelma@sys-concept.com wrote:
> When I try to configure sql-ledger, /localhost/sql-ledger/index.html
> I get an error:  Forbidden: You don't have permission to access this
> resource.
> 
> Apache starts normally but there is an entry in /var/logs/apache/error_log 
> (how to make it go way)
> 
> [:notice] [pid 5015] ModSecurity for Apache/2.9.3
> (http://www.modsecurity.org/) configured. [:notice] [pid 5015] ModSecurity:
> APR compiled version="1.7.0"; loaded version="1.7.0" [:notice] [pid 5015]
> ModSecurity: PCRE compiled version="8.44 "; loaded version="8.44
> 2020-02-12" [:notice] [pid 5015] ModSecurity: LIBXML compiled
> version="2.9.10" [:notice] [pid 5015] ModSecurity: Status engine is
> currently disabled, enable it by set SecStatusEngine to On.
> [mpm_prefork:notice] [pid 5016] AH00163: Apache/2.4.46 (Unix)
> OpenSSL/1.1.1g PHP/7.4.11 configured -- resuming normal operations Wed Dec
> 02 20:38:26.746392 2020] [core:notice] [pid 5016] AH00094: Command line:
> '/usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D SSL -D SSL_DEFAULT_VHOST -D
> LANGUAGE -D PHP -D SECURITY -d /usr/lib64/apache2 -f
> /etc/apache2/httpd.conf' [authz_core:error] [pid 4900] [client ::1:46226]
> AH01630: client denied by server configuration:
> /usr/local/sql-ledger/index.html
> 
> 
> The above error log entry has nothing to with the below configuration except
> the last line: [authz_core:error] [pid 4900] [client ::1:46226] AH01630:
> client denied by server configuration: /usr/local/sql-ledger/index.html
> 
> My sql-ledger_apache.config  2.4 config
> 
> Alias /sql-ledger /usr/local/sql-ledger/
> <Directory /usr/local/sql-ledger>
>   AllowOverride All
>   AddHandler cgi-script .pl
>   AddDefaultCharset On
>   Options ExecCGI Includes FollowSymlinks
>   Require ip 10.0.0.109
> </Directory>
> 
> <Directory /usr/local/sql-ledger/users>
>   Require all denied
> </Directory>
> 
> All the configuration entries are in main server (not in .htaccess)

In the first instance try adding double quotes for all paths, e.g.

Alias "/sql-ledger" "/usr/local/sql-ledger/"
Directory "/usr/local/sql-ledger">
...

and so on.  Then restart the server.

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: [gentoo-user] [SOLVED] Another apache 2.4 - Forbidden: You don't have permission to access this resource.

[thelma]

On 12/03/2020 03:42 AM, Michael wrote:
> On Thursday, 3 December 2020 04:09:15 GMT thelma@sys-concept.com wrote:
>> When I try to configure sql-ledger, /localhost/sql-ledger/index.html
>> I get an error:  Forbidden: You don't have permission to access this
>> resource.
>>
>> Apache starts normally but there is an entry in /var/logs/apache/error_log 
>> (how to make it go way)
>>
>> [:notice] [pid 5015] ModSecurity for Apache/2.9.3
>> (http://www.modsecurity.org/) configured. [:notice] [pid 5015] ModSecurity:
>> APR compiled version="1.7.0"; loaded version="1.7.0" [:notice] [pid 5015]
>> ModSecurity: PCRE compiled version="8.44 "; loaded version="8.44
>> 2020-02-12" [:notice] [pid 5015] ModSecurity: LIBXML compiled
>> version="2.9.10" [:notice] [pid 5015] ModSecurity: Status engine is
>> currently disabled, enable it by set SecStatusEngine to On.
>> [mpm_prefork:notice] [pid 5016] AH00163: Apache/2.4.46 (Unix)
>> OpenSSL/1.1.1g PHP/7.4.11 configured -- resuming normal operations Wed Dec
>> 02 20:38:26.746392 2020] [core:notice] [pid 5016] AH00094: Command line:
>> '/usr/sbin/apache2 -D DEFAULT_VHOST -D INFO -D SSL -D SSL_DEFAULT_VHOST -D
>> LANGUAGE -D PHP -D SECURITY -d /usr/lib64/apache2 -f
>> /etc/apache2/httpd.conf' [authz_core:error] [pid 4900] [client ::1:46226]
>> AH01630: client denied by server configuration:
>> /usr/local/sql-ledger/index.html
>>
>>
>> The above error log entry has nothing to with the below configuration except
>> the last line: [authz_core:error] [pid 4900] [client ::1:46226] AH01630:
>> client denied by server configuration: /usr/local/sql-ledger/index.html
>>
>> My sql-ledger_apache.config  2.4 config
>>
>> Alias /sql-ledger /usr/local/sql-ledger/
>> <Directory /usr/local/sql-ledger>
>>   AllowOverride All
>>   AddHandler cgi-script .pl
>>   AddDefaultCharset On
>>   Options ExecCGI Includes FollowSymlinks
>>   Require ip 10.0.0.109
>> </Directory>
>>
>> <Directory /usr/local/sql-ledger/users>
>>   Require all denied
>> </Directory>
>>
>> All the configuration entries are in main server (not in .htaccess)
> 
> In the first instance try adding double quotes for all paths, e.g.
> 
> Alias "/sql-ledger" "/usr/local/sql-ledger/"
> Directory "/usr/local/sql-ledger">
> ...
> 
> and so on.  Then restart the server.

Thanks Michael, the correct setting is:

Alias /sql-ledger /usr/local/sql-ledger/
AddHandler cgi-script .pl

<Directory /usr/local/sql-ledger>
  Options ExecCGI Includes FollowSymlinks
  AllowOverride all
  Require all granted
</Directory>

<Directory /usr/local/sql-ledger/users>
  AllowOverride none
  Require all denied
</Directory>

But it wasn't my only problem, the old sql-ledger-2.8.35  was not
compatible with the newer software; the solution was to upgrade to newer
sql-ledger-3.2.9 that run with current postgresql-12
But this version of sql-ledger-3.2.9  has a bugs.
The backup script doesn't work correctly.  It works with one database
but, with another database when trying to back it up it  gave an error
(the backup doesn't work):
(The backup worked correctly on sql-ledger-2.8.35)

"Wide character in print at line 2060" and CPU goes 100%

The solution (fix, courtesy of my daughter) is to make a change in the
file:
sql-ledger/SL/AM.pm

(line #2040   add after "my $fields;" line:
 my $myString;

(line #2059   after:
      $fields .= join ',', map { $dbh->quote($_) } @arr;
      $fields .= ")";

------ replace  --------
    print OUT qq|$query $fields;\n|;
}
------ end replace ------

----  with ----------
      $myString = qq|$query $fields;\n|;
      $myString =~ s/[^\x00-\x7f]//g;
      print OUT $myString;
}
--- end with ----------

Hope, it will save somebody hours of trying to troubleshoot this error.