You don't have permission to access /pipermail/ on this server.

[Paul Howarth]

On Sat, 2006-04-22 at 06:25 -0800, Noah wrote: 
> On Sat, 22 Apr 2006 15:21:06 +0100, Paul Howarth wrote
> > On Sat, 2006-04-22 at 01:51 -0800, Noah wrote:
> > > mailman-2.1.7
> > > apache 2.2.0
> > > 
> > > Okay I just upgrade from apache 1.3.x to apache 2.2.0 and arriving at a
> > > permissions problem when viewing pipermail mailman directories.  
> > > 
> > > 
> > > 
> > > --- Browser error message ---
> > > 
> > > You don't have permission to access /pipermail/list/ on this server.
> > > Additionally, a 403 Forbidden error was encountered while trying to use an
> > > ErrorDocument to handle the request.
> > > 
> > > --- snip ---
> > > 
> > > Here is what apache places in the error_log:
> > > 
> > > --- snip ---
> > > 
> > > Symbolic link not allowed or link target not accessible:
> > > /usr/home/mailman/archives/public/list, referer:
> > > http://hostname.garbled.com/mailman/listinfo/list
> > > 
> > > ---- snip ----
> > > 
> > > 
> > > Here is what I've done so far:
> > > 
> > > ---- apache httpd.conf file ----
> > > 
> > > in the virtual host stanza
> > > 
> > >         ScriptAlias /mailman/ /usr/home/mailman/cgi-bin/
> > >         Alias /pipermail/ /usr/home/mailman/archives/public/
> > >         Alias /icons/ /usr/home/mailman/icons/
> > >         <Directory /usr/home/mailman/archives/public/>
> > >                   Options +FollowSymlinks
> > >                   Allow from all 
> > >         </Directory>
> > > 
> > > --- snip ---
> > > 
> > > then restarted apache.
> > > 
> > > --- snip ---
> > > 
> > > looks like the directories have proper permissions:
> > > typhoon# ls -ld /usr/local/mailman/archives/private
> > > drwxrws---  103 mailman  mailman  2560 Apr 21 21:49
> > > /usr/local/mailman/archives/private
> > > typhoon# ls -ld /usr/local/mailman/archives/public/
> > > drwxrwsr-x  2 mailman  mailman  1536 Apr 21 21:49
> > > /usr/local/mailman/archives/public/
> > > typhoon# ls -ld /usr/local/mailman/archives/public/list
> > > lrwxr-xr-x  1 root  mailman  54 Apr 21 19:00
> > > /usr/local/mailman/archives/public/list ->
> > > /usr/local/mailman/archives/private/list
> > > typhoon# ls -ld /usr/local/mailman/archives/private/list
> > > drwxrwsr-x  50 www  mailman  4096 Apr 21 18:34
> > > /usr/local/mailman/archives/private/list
> > > 
> > > --- snip ---
> > > 
> > > 
> > > 
> > > what else could be the problem here?
> > 
> > 1. Are you running SELinux? If yes, see my response to your previous
> > posting on this subject.
> 
> 
> nope - FC
> 
> > 
> > 2. Is the apache user a member of the mailman group? If not, how is the
> > web server (usually running as user apache, group apache) supposed to
> > read things under /usr/local/mailman/archives/private, which has no
> > permissions open for anyone other than user and group apache?
> 
> 
> hmmm - that didnt fix it.
> 
> I did this:
> mailman:*:89:www
> 
> also a side note - my private archieves are viewable.  its only the public
> archives that are getting the 403 error.

The next oddity I notice is that your virtual host configuration
specifies /usr/home/mailman yet your files live
under /usr/local/mailman. I'm guessing you've got a symlink somewhere
but you may need a <Directory> section for the directory containing the
symlink too.

Paul.