Re: Curious symlink problem with Apache -- FC12

[James McKenzie]

Robert Moskowitz <rgm(a)htt-consult.com&gt; wrote:

> # ls -lsZ
> total 8
> lrwxrwxrwx root root ?                                Centos-5.5 -> 
> /media/d4ae05a3-c60f-489d-8159-e16c9a271f0b/repos/centos/5.5
> lrwxrwxrwx root root ?                                FC12 -> 
> /var/hda/files/repo/fedora/FC12
> -rw-r--r-- root root ?                                index.html
>
> selinux is disabled...
>  
What are the permissions on the original directories?  The symlink should pick them
up and use them.

The previous comment about Apache following symlinks would apply if BOTH directories were
unavailable.

James McKenzie

Curious symlink problem with Apache -- FC12

[Tim]

On Wed, 2010-11-03 at 15:15 +0100, Roberto Ragusa wrote:
>  Try this,as root:
>   
>  su apache 
I wouldn't expect that to work.  The default set up for the apache user
doesn't let you (anybody or anything) login as apache to be able to do
anything.

-- 
[tim@localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.

Curious symlink problem with Apache -- FC12

[Mike Klinke]

On Wednesday 03 November 2010 10:31, Robert Moskowitz wrote:

>  Well this is not going well... 
Give this a try:

# sudo -u apache -s -H 
bash-4.1$ whoami
apache
bash-4.1$

This is on a stock F-13 box with an unmodified /etc/passwd, i.e.:

apache:x:48:48:Apache:/var/www:/sbin/nologin


Regards, Mike Klinke

Solved - Re: Curious symlink problem with Apache -- FC12

[Robert Moskowitz]

The problem was permissions at:

[root@homebase /]# ls -ls /media/
total 4
4 drwx------ 6 root root 4096 2010-11-01 09:52 
d4ae05a3-c60f-489d-8159-e16c9a271f0b

I changed that from 700 to 755 and now everything works. I kind of 
thought that symlink permissions were inherited for the current path, 
not the 'real' path. Well now I know...


On 11/03/2010 10:15 AM, Roberto Ragusa wrote:
>  James Mckenzie wrote:
>     
> > Robert Moskowitz<rgm(a)htt-consult.com>  wrote:
> >
> >      
> >> # ls -lsZ
> >> total 8
> >> lrwxrwxrwx root root ?                                Centos-5.5 ->
> >> /media/d4ae05a3-c60f-489d-8159-e16c9a271f0b/repos/centos/5.5
> >> lrwxrwxrwx root root ?                                FC12 ->
> >> /var/hda/files/repo/fedora/FC12
> >> -rw-r--r-- root root ?                                index.html
> >>
> >> selinux is disabled...
> >>
> >>        
> > What are the permissions on the original directories?  The symlink should pick them
> up and use them.
> >
> > The previous comment about Apache following symlinks would apply if BOTH directories
> were unavailable.
> >      
>  Also check the permission of the entire path.
>  For example, what about the permission of /media/d4ae05a3-c60f-489d-8159-e16c9a271f0b?
>
>  Try this,as root:
>
>  cd /
>  su apache
>  cd /media
>  cd d4ae05a3-c60f-489d-8159-e16c9a271f0b
>  cd repos
>  cd centos
>  cd 5.5
>  ls -l
>
>  Maybe one of this steps fails when you are user apache.
>
>

Curious symlink problem with Apache -- FC12

[Robert Moskowitz]

Well this is not going well...

On 11/03/2010 10:15 AM, Roberto Ragusa wrote:
>  James Mckenzie wrote:
>     
> > Robert Moskowitz<rgm(a)htt-consult.com>  wrote:
> >
> >      
> >> # ls -lsZ
> >> total 8
> >> lrwxrwxrwx root root ?                                Centos-5.5 ->
> >> /media/d4ae05a3-c60f-489d-8159-e16c9a271f0b/repos/centos/5.5
> >> lrwxrwxrwx root root ?                                FC12 ->
> >> /var/hda/files/repo/fedora/FC12
> >> -rw-r--r-- root root ?                                index.html
> >>
> >> selinux is disabled...
> >>
> >>        
> > What are the permissions on the original directories?  The symlink should pick them
> up and use them.
> >
> > The previous comment about Apache following symlinks would apply if BOTH directories
> were unavailable.
> >      
>  Also check the permission of the entire path.
>  For example, what about the permission of /media/d4ae05a3-c60f-489d-8159-e16c9a271f0b?
>
>  Try this,as root:
>
>  cd /
>  su apache
>      
# cd /
[root@homebase /]# su apache
This account is currently not available.

Huh? So I checked:

# grep apache /etc/passwd
apache:x:48:100:Apache:/var/www:/sbin/nologin



>  cd /media
>  cd d4ae05a3-c60f-489d-8159-e16c9a271f0b
>  cd repos
>  cd centos
>  cd 5.5
>  ls -l
>
>  Maybe one of this steps fails when you are user apache.
>
>

Curious symlink problem with Apache -- FC12

[Roberto Ragusa]

James Mckenzie wrote:
>  Robert Moskowitz <rgm(a)htt-consult.com&gt; wrote:
>  
> > # ls -lsZ
> > total 8
> > lrwxrwxrwx root root ?                                Centos-5.5 -> 
> > /media/d4ae05a3-c60f-489d-8159-e16c9a271f0b/repos/centos/5.5
> > lrwxrwxrwx root root ?                                FC12 -> 
> > /var/hda/files/repo/fedora/FC12
> > -rw-r--r-- root root ?                                index.html
> >
> > selinux is disabled...
> >
>  What are the permissions on the original directories?  The symlink should pick them up
> and use them.
>  
>  The previous comment about Apache following symlinks would apply if BOTH directories were
> unavailable. 
Also check the permission of the entire path.
For example, what about the permission of /media/d4ae05a3-c60f-489d-8159-e16c9a271f0b?

Try this,as root:

cd /
su apache
cd /media
cd d4ae05a3-c60f-489d-8159-e16c9a271f0b
cd repos
cd centos
cd 5.5
ls -l

Maybe one of this steps fails when you are user apache.

-- 
   Roberto Ragusa    mail at robertoragusa.it