Comments on: Curing ‘Symbolic link not allowed’ (Apache 2.0)

By: Drew

Drew — Thu, 20 Jan 2011 19:10:11 +0000

@anunay:
Great to hear!

By: anunay

anunay — Thu, 20 Jan 2011 15:32:38 +0000

thanks for co-ordination.

It is working by making system into permissive mode

echo 0 >/selinux/enforce

apache is accessing

By: anunay

anunay — Wed, 19 Jan 2011 11:52:02 +0000

[Wed Jan 19 11:24:54 2011] [notice] Apache/2.0.52 (Red Hat) configured — resuming normal operations
[Wed Jan 19 11:25:20 2011] [error] [client 10.14.0.230] Symbolic link not allowed: /var/www/sierra/sierra
[Wed Jan 19 11:25:26 2011] [error] [client 10.14.0.230] Symbolic link not allowed: /var/www/sierra/test
[Wed Jan 19 11:25:32 2011] [error] [client 10.14.0.230] Symbolic link not allowed: /var/www/sierra/sierra
[Wed Jan 19 11:34:43 2011] [error] [client 10.14.0.230] Symbolic link not allowed: /var/www/sierra/sierra
[Wed Jan 19 11:34:48 2011] [error] [client 10.14.0.230] File does not exist: /var/www/sierra/s
[Wed Jan 19 11:34:51 2011] [error] [client 10.14.0.230] File does not exist: /var/www/sierra/styles, referer: http://10.14.0.60/sierra
[Wed Jan 19 11:34:52 2011] [error] [client 10.14.0.230] File does not exist: /var/www/sierra/images, referer: http://10.14.0.60/sierra
[root@cdrserver sierra]#

By: anunay

anunay — Wed, 19 Jan 2011 10:48:22 +0000

thanks for responding.

no error logs regarding that.

at this location: /u01/app/oracle/product/9.2.0/Apache/Apache/logs

in the browser it opens the base directory path “/var/www/sierra”, but it doesn’t show that symlink, however other files created there it is showing.

By: Drew

Drew — Tue, 18 Jan 2011 22:55:03 +0000

@ anunay: What do your apache logs show?

By: anunay

anunay — Tue, 18 Jan 2011 19:56:02 +0000

[root@cdrserver sierra]# cat /etc/httpd/conf/httpd.conf | grep ^Group
Group apache

[root@cdrserver READER]# pwd
/home/sierraleone/READER
[root@cdrserver READER]# ls -ltr
drwxr-xr-x  2 sierraleone apache        4096 Jan 18 19:34 test

[root@cdrserver sierra]# pwd
/var/www/sierra
lrwxrwxrwx  1 sierraleone apache        30 Jan 18 19:31 test -> /home/sierraleone/READER/test/

and used

DocumentRoot "/var/www/sierra"
    AllowOverride None
    Options Indexes Includes FollowSymLinks
     Order allow,deny
    Allow from all

http://10.14.0.60/test

apache is showing:
You don't have permission to access /test on this server. Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

Please check…

By: Drew

Drew — Thu, 27 Aug 2009 22:39:24 +0000

Habib,

What does your error logs for Apache say? Usually you can find out what the error logs are telling you and do a simple search on the error on Google, and figure it out pretty fast. Let me know if you still need some help.

By: Habib

Habib — Fri, 17 Jul 2009 18:39:58 +0000

Hi,
I’m having the same problem. I have my DocumentRoot directory on the local filesystem. However, I cannot follow the links! My DocumentRoot is /web and here is the permission for it:

drwxrwxrwx 3 root apache 4096 Jul 17 11:09 /web

In /web directory I have a symlink:
lrwxrwxrwx 1 root root 31 Jul 16 17:00 /web/habib.html -> /home/habib/web/habib.html

Permissions for /web (DocumentRoot) and other directories:


drwxrwxrwx 3 root       root        0 Jul 17 10:33 /home
drwxrwxrwx 2 habib groupa 64 Jul 17 10:58 /home/habib
drwxrwxrwx 2 habib groupa 64 Jul 16 17:04 /home/habib/web
-rwxrwxrwx 1 nfsnobody  nfsnobody  69 Jul 16 16:57 /home/habib/web/habib.html

As you can see, I have read, write and execute permissions on all files and directories.

And here is from my httpd.conf:


User apache
Group apache

Options FollowSymLinks
AllowOverride None

Options Indexes FollowSymLinks
AllowOverride None

Order allow,deny
Allow from all

Would you help me please?

Thanks.

By: dean

dean — Fri, 07 Nov 2008 16:45:16 +0000

Setting every directory to executable all the way down from the root to the directory I was linking to did the trick for me. THANK YOU VERY MUCH!!!

By: Aaron

Aaron — Wed, 29 Oct 2008 21:23:29 +0000

qw(Add a new (larger) disk to the system, format it accordingly, migrate the old /var/ mount-point to the new partition and change the DocumentRoot in the Apache configuration. This requires backing up old files and pushing them to the new partition and reconfiguring a small part of Apache; could cause a lot of downtime.)

If you have the luxury of being able to add a seprate partion to the system it’s actually way easier than this and doesn’t require reconfiguring apache.

add the new partition to the system (however you are going to do that based on your hardware)
mount it temporarily at something like /mnt/myNewDisk or just /mnt (see man mount)
*Take a backup*
move all the files from /var/www (or whatever your web dir is.
mv /var/www/* /mnt/myNewDisk/
unmount said new disk
umount /mnt/myNewDisk
remount it on the now empty /var/www/ which makes a great mount point
edit your fstab (or vfstab) file to ensure this mounts at startup.

I’m leaving out details on things like mount and fstab because they are a little os/vendor/filesystem specific. Generally they are pretty similar but you may need to brush up on the man page. In a pinch the /etc/fstab or /etc/vfstab can give you the options that you need but you’ll have to double check your syntax for the command line.