Freeze break request: Fix mirrorlist2 static files

[Patrick Uiterwijk]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

Currently, static files for Mirrorlist2 give 403 Access Denied's.
Could I get +1s to apply this fix:


commit ee955fa452df4c753c276b37a34af04933288e20
Author: Patrick Uiterwijk <puiterwijk(a)redhat.com&gt;
Date:   Tue Apr 14 09:58:38 2015 +0000

    Add a Location tag for static
    
    For every alias, you need to have either a Directory or a Location
    that matches it.
    Source: https://wiki.apache.org/httpd/ClientDeniedByServerConfiguration
    
    Upstream PR: https://github.com/fedora-infra/mirrormanager2/pull/41
    
    Signed-off-by: Patrick Uiterwijk <puiterwijk(a)redhat.com&gt;

diff --git a/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
b/roles/mirrormanager/mirrorlist2/templa
index 91800c5..adb5182 100644
- --- a/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
+++ b/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
@@ -52,3 +52,15 @@ WSGIScriptAlias /mirrorlist
/usr/share/mirrormanager2/mirrorlist_client.wsgi
         Allow from all
     </IfModule>
 </Location>
+
+<Location /static>
+    <IfModule mod_authz_core.c>
+        # Apache 2.4
+        Require all granted
+    </IfModule>
+    <IfModule !mod_authz_core.c>
+        # Apache 2.2
+        Order deny,allow
+        Allow from all
+    </IfModule>
+</Location>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
>
> iQIcBAEBCgAGBQJVLOWQAAoJEIZXmA2atR5Q1BUQAIn2p750BOsqOdo0PDB/s266
> qnmwLnAeGUFbpZLL0RTTcKO+6hxQD/nAvWuvFfx9/YyhWkrHHeor18pdZnzXKCWZ
> vdVhfo3jNP4zLkavFeV0m5rHArEmjD95Clc7cv7CYhdWQgT/B6DKvTJUFKb1HgfP
> FkYK6KYpo7aVY7odbrIMUlxFkTzX5x7ydwlHkwiQqTREwShpNCyczKdr2f1Q0yIi
> +T7Aeh0341aym/VcT7DlkIq3fYS381ulmpA4NOHyEJ9v2DVdhEqbCRW94iqAdMZw
> uYXSfJI6oLeRYUbXbnBA8VqPnpP2AI07kBh+eS+ji/+CfOzP0G+kCA5sQqwTZKkm
> 2RJH3TlpS5iPnq9J5tFl1wUBRlLBIjJK4xrILYYrXY9jonNyzfHXlq+6preE1duf
> qNb5YBtbIcSZJnTZOupoHeSqz2tklMEi0oCVn5g14SUN0Zvf0csv0vSNwH74UgCv
> sulJyb/prdYlGC+pqSI/QD7Z7z+1vyl+31D6qxfbT8QlBh2I/oErPB1ganoLA2KQ
> AfoOT3QhrorhJh0aLm0mit0GQrYGCnHHlQmgNN5WBY6+ft/aG19gGrF710pZN8eF
> UDquJHxuw0REEi7/EaHr9Hhegw0ON+xWjkLwqqvCM6ndjFfMla8gazi2re071wgD
> gs6Ey7ejfdGhDzLX+qJv
> =Iz0I
> -----END PGP SIGNATURE-----

[Kevin Fenzi]

+1

kevin

[David Gay]

----- Original Message -----
>  From: "Patrick Uiterwijk" <puiterwijk(a)redhat.com&gt;
>  To: infrastructure(a)lists.fedoraproject.org
>  Sent: Tuesday, April 14, 2015 3:01:52 AM
>  Subject: Freeze break request: Fix mirrorlist2 static files
>  
>  -----BEGIN PGP SIGNED MESSAGE-----
>  Hash: SHA512
>  
>  Hi,
>  
>  Currently, static files for Mirrorlist2 give 403 Access Denied's.
>  Could I get +1s to apply this fix:
>  
>  
>  commit ee955fa452df4c753c276b37a34af04933288e20
>  Author: Patrick Uiterwijk <puiterwijk(a)redhat.com&gt;
>  Date:   Tue Apr 14 09:58:38 2015 +0000
>  
>      Add a Location tag for static
>      
>      For every alias, you need to have either a Directory or a Location
>      that matches it.
>      Source: https://wiki.apache.org/httpd/ClientDeniedByServerConfiguration
>      
>      Upstream PR: https://github.com/fedora-infra/mirrormanager2/pull/41
>      
>      Signed-off-by: Patrick Uiterwijk <puiterwijk(a)redhat.com&gt;
>  
>  diff --git a/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
>  b/roles/mirrormanager/mirrorlist2/templa
>  index 91800c5..adb5182 100644
>  - --- a/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
>  +++ b/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
>  @@ -52,3 +52,15 @@ WSGIScriptAlias /mirrorlist
>  /usr/share/mirrormanager2/mirrorlist_client.wsgi
>           Allow from all
>       </IfModule>
>   </Location>
>  +
>  +<Location /static>
>  +    <IfModule mod_authz_core.c>
>  +        # Apache 2.4
>  +        Require all granted
>  +    </IfModule>
>  +    <IfModule !mod_authz_core.c>
>  +        # Apache 2.2
>  +        Order deny,allow
>  +        Allow from all
>  +    </IfModule>
>  +</Location>
> >  -----BEGIN PGP SIGNATURE-----
> >  Version: GnuPG v1
> >  
> >  iQIcBAEBCgAGBQJVLOWQAAoJEIZXmA2atR5Q1BUQAIn2p750BOsqOdo0PDB/s266
> >  qnmwLnAeGUFbpZLL0RTTcKO+6hxQD/nAvWuvFfx9/YyhWkrHHeor18pdZnzXKCWZ
> >  vdVhfo3jNP4zLkavFeV0m5rHArEmjD95Clc7cv7CYhdWQgT/B6DKvTJUFKb1HgfP
> >  FkYK6KYpo7aVY7odbrIMUlxFkTzX5x7ydwlHkwiQqTREwShpNCyczKdr2f1Q0yIi
> >  +T7Aeh0341aym/VcT7DlkIq3fYS381ulmpA4NOHyEJ9v2DVdhEqbCRW94iqAdMZw
> >  uYXSfJI6oLeRYUbXbnBA8VqPnpP2AI07kBh+eS+ji/+CfOzP0G+kCA5sQqwTZKkm
> >  2RJH3TlpS5iPnq9J5tFl1wUBRlLBIjJK4xrILYYrXY9jonNyzfHXlq+6preE1duf
> >  qNb5YBtbIcSZJnTZOupoHeSqz2tklMEi0oCVn5g14SUN0Zvf0csv0vSNwH74UgCv
> >  sulJyb/prdYlGC+pqSI/QD7Z7z+1vyl+31D6qxfbT8QlBh2I/oErPB1ganoLA2KQ
> >  AfoOT3QhrorhJh0aLm0mit0GQrYGCnHHlQmgNN5WBY6+ft/aG19gGrF710pZN8eF
> >  UDquJHxuw0REEi7/EaHr9Hhegw0ON+xWjkLwqqvCM6ndjFfMla8gazi2re071wgD
> >  gs6Ey7ejfdGhDzLX+qJv
> >  =Iz0I
> >  -----END PGP SIGNATURE----- 
>  _______________________________________________
>  infrastructure mailing list
>  infrastructure(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/infrastructure 
+1

-- David

[Pierre-Yves Chibon]

On Tue, Apr 14, 2015 at 12:01:52PM +0200, Patrick Uiterwijk wrote:
>  -----BEGIN PGP SIGNED MESSAGE-----
>  Hash: SHA512
>  
>  Hi,
>  
>  Currently, static files for Mirrorlist2 give 403 Access Denied's.
>  Could I get +1s to apply this fix:
>  
>  
>  commit ee955fa452df4c753c276b37a34af04933288e20
>  Author: Patrick Uiterwijk <puiterwijk(a)redhat.com&gt;
>  Date:   Tue Apr 14 09:58:38 2015 +0000
>  
>      Add a Location tag for static
>      
>      For every alias, you need to have either a Directory or a Location
>      that matches it.
>      Source: https://wiki.apache.org/httpd/ClientDeniedByServerConfiguration
>      
>      Upstream PR: https://github.com/fedora-infra/mirrormanager2/pull/41
>      
>      Signed-off-by: Patrick Uiterwijk <puiterwijk(a)redhat.com&gt;
>  
>  diff --git a/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
> b/roles/mirrormanager/mirrorlist2/templa
>  index 91800c5..adb5182 100644
>  - --- a/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
>  +++ b/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
>  @@ -52,3 +52,15 @@ WSGIScriptAlias /mirrorlist
> /usr/share/mirrormanager2/mirrorlist_client.wsgi
>           Allow from all
>       </IfModule>
>   </Location>
>  +
>  +<Location /static>
>  +    <IfModule mod_authz_core.c>
>  +        # Apache 2.4
>  +        Require all granted
>  +    </IfModule>
>  +    <IfModule !mod_authz_core.c>
>  +        # Apache 2.2
>  +        Order deny,allow
>  +        Allow from all
>  +    </IfModule>
>  +</Location> 
I'm not too happy with this because we are putting MM1 related code into MM2,
but since it'll fix the current situation +1 for now


Pierre

[Stephen John Smoogen]

+1 to the apache fix. It looks to cover the issues needed.

On 14 April 2015 at 04:01, Patrick Uiterwijk <puiterwijk(a)redhat.com&gt; wrote:

>  -----BEGIN PGP SIGNED MESSAGE-----
>  Hash: SHA512
>
>  Hi,
>
>  Currently, static files for Mirrorlist2 give 403 Access Denied's.
>  Could I get +1s to apply this fix:
>
>
>  commit ee955fa452df4c753c276b37a34af04933288e20
>  Author: Patrick Uiterwijk <puiterwijk(a)redhat.com&gt;
>  Date:   Tue Apr 14 09:58:38 2015 +0000
>
>      Add a Location tag for static
>
>      For every alias, you need to have either a Directory or a Location
>      that matches it.
>      Source:
>  https://wiki.apache.org/httpd/ClientDeniedByServerConfiguration
>
>      Upstream PR: https://github.com/fedora-infra/mirrormanager2/pull/41
>
>      Signed-off-by: Patrick Uiterwijk <puiterwijk(a)redhat.com&gt;
>
>  diff --git
>  a/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
>  b/roles/mirrormanager/mirrorlist2/templa
>  index 91800c5..adb5182 100644
>  - --- a/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
>  +++ b/roles/mirrormanager/mirrorlist2/templates/mirrorlist-server.conf
>  @@ -52,3 +52,15 @@ WSGIScriptAlias /mirrorlist
>  /usr/share/mirrormanager2/mirrorlist_client.wsgi
>           Allow from all
>       </IfModule>
>   </Location>
>  +
>  +<Location /static>
>  +    <IfModule mod_authz_core.c>
>  +        # Apache 2.4
>  +        Require all granted
>  +    </IfModule>
>  +    <IfModule !mod_authz_core.c>
>  +        # Apache 2.2
>  +        Order deny,allow
>  +        Allow from all
>  +    </IfModule>
>  +</Location>
> >  -----BEGIN PGP SIGNATURE-----
> >  Version: GnuPG v1
> >
> >  iQIcBAEBCgAGBQJVLOWQAAoJEIZXmA2atR5Q1BUQAIn2p750BOsqOdo0PDB/s266
> >  qnmwLnAeGUFbpZLL0RTTcKO+6hxQD/nAvWuvFfx9/YyhWkrHHeor18pdZnzXKCWZ
> >  vdVhfo3jNP4zLkavFeV0m5rHArEmjD95Clc7cv7CYhdWQgT/B6DKvTJUFKb1HgfP
> >  FkYK6KYpo7aVY7odbrIMUlxFkTzX5x7ydwlHkwiQqTREwShpNCyczKdr2f1Q0yIi
> >  +T7Aeh0341aym/VcT7DlkIq3fYS381ulmpA4NOHyEJ9v2DVdhEqbCRW94iqAdMZw
> >  uYXSfJI6oLeRYUbXbnBA8VqPnpP2AI07kBh+eS+ji/+CfOzP0G+kCA5sQqwTZKkm
> >  2RJH3TlpS5iPnq9J5tFl1wUBRlLBIjJK4xrILYYrXY9jonNyzfHXlq+6preE1duf
> >  qNb5YBtbIcSZJnTZOupoHeSqz2tklMEi0oCVn5g14SUN0Zvf0csv0vSNwH74UgCv
> >  sulJyb/prdYlGC+pqSI/QD7Z7z+1vyl+31D6qxfbT8QlBh2I/oErPB1ganoLA2KQ
> >  AfoOT3QhrorhJh0aLm0mit0GQrYGCnHHlQmgNN5WBY6+ft/aG19gGrF710pZN8eF
> >  UDquJHxuw0REEi7/EaHr9Hhegw0ON+xWjkLwqqvCM6ndjFfMla8gazi2re071wgD
> >  gs6Ey7ejfdGhDzLX+qJv
> >  =Iz0I
> >  -----END PGP SIGNATURE----- 
>  _______________________________________________
>  infrastructure mailing list
>  infrastructure(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/infrastructure 



-- 
Stephen J Smoogen.