Results 1 to 6 of 6

Thread: apache 403 on encrypted home dir in 10.10 maverick meerkat

Hybrid View

  1. #1
    Join Date
    Jul 2009
    Beans
    24

    apache 403 on encrypted home dir in 10.10 maverick meerkat

    I just installed 10.10 maverick meerkat with an encrypted home dir. I'm having the same problem as ChrisEffel in this thread: http://ubuntuforums.org/showthread.php?t=1509379 and jmblock2 in this thread: http://ohioloco.ubuntuforums.org/sho....php?t=1327157. their solutions don't work for me.

    Basically, I downloaded a fresh install of apache and went through the steps of installing a virtual host as per https://help.ubuntu.com/community/Ap...irtual%20Hosts, the ubuntu ApacheMySQLPHP guide. I followed the steps carefully. When I browse to http://localhost/ at the end of the steps I get 403 Forbidden, and
    Code:
    tail -n 1 /var/log/apache2/error.log
    reads
    Code:
    [error] [client 127.0.0.1] (13)Permission denied: access to /favicon.ico denied
    , which reflects what's really going on here - no amount of chmodding is giving apache access to files in the home dir.

    I thought maybe this was an encrypted home drive issue, as per this bug report in 10.04: https://bugs.launchpad.net/ubuntu/+s...e2/+bug/585212. but his solution, which is also ChrisEffel's solution in the thread mentioned above,
    Code:
    chmod o+x $HOME
    , does nothing for me. i've also
    Code:
    chmod 0755 public_html
    , and ~/public_html/index.html is also chmod 0755'd.

    This is driving me crazy because I had it set up just fine (without home disk encryption) under 9.10 just a week ago ... any of you apache gurus have any tips?

    jmblock2 said in http://ohioloco.ubuntuforums.org/sho....php?t=1327157 that "parent directory of www also needed to be set to www-data" which, since I've followed https://help.ubuntu.com/community/Ap...irtual%20Hosts (the ubuntu ApacheMySQLPHP guide) would be the parent directory of ~/public_html, namely, my home dir. do I really want to set my home dir, /home/`whoami`/, to www-data? how would I do that, anyway, with chgrp? seems sketchy.
    Last edited by tacitdynamite; September 20th, 2010 at 08:58 AM.

  2. #2
    Join Date
    Jan 2010
    Location
    opposing reality (VIC AU)
    Beans
    990
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: apache 403 on encrypted home dir in 10.10 maverick meerkat

    I reviewed the other threads you have linked and a notable difference between your problem and theirs is that you are trying from an encrypted home directory and that will take some beating - I didn't spot where either of the other people mentioned they are working from an encrypted home directory.

    Apache2, to the best of my understanding of both httpd & 'encrypted home dir', would have to run as you (or the user that owns the encrypted home directory) and have your password available to it so as to decrypt & mount your home folder and read from it when a page is requested.

    To the best of my understanding your encrypted home folder can either only be read by you or can only be read by yourself and root provided you are logged in to have decrypted your home folder.

    It would be better to use the default location /var/www/'your-site' with no encryption set on it.
    NEED HELP? | [SOLVED] | MS hide
    A little nonsense now and then...
    .
    If this is a game thread and you are going to post I hope you have read the Original Post.

  3. #3
    Join Date
    Jul 2009
    Beans
    24

    Re: apache 403 on encrypted home dir in 10.10 maverick meerkat

    Thanks for looking over the links and for your suggestions - you were totally right. I found the solution in this thread by cozman69.

    Basically, this is what I did:

    Code:
    sudo mkdir /home/public_html
    cd /home/public_html
    sudo mkdir $USERNAME
    sudo chown $USERNAME:$USERNAME $USERNAME
    # copies the CONTENTS of ~/public_html to the dir we just created, following symlinks and preserving permissions
    rsync -av public_html/ /home/public_html/$USERNAME/
    cd ~
    rm -rf public_html
    # creates a symlink so that your experience will be the same
    ln -s ../public_html/$USERNAME/ ./public_html
    Then to set up apache userdir permissions:
    Code:
    sudo vim /etc/apache2/conf.d/userdir
    Copy and paste, save and close:
    Code:
    UserDir /home/public_html
    UserDir disabled root
    
    <Directory /home/*/public_html>
    AllowOverride FileInfo AuthConfig Limit
    Options Indexes SymLinksIfOwnerMatch IncludesNoExec
    </Directory>
    Then enable the userdir mod:
    Code:
    cd /etc/apache2/mods-enabled/
    sudo ln -s ../mods-available/userdir.* .
    sudo /etc/init.d/apache2 reload
    Next, I created a Virtual Host for local dev that linked to the folder we created above:
    Code:
    cd /etc/apache2/sites-available/
    sudo cp default ldev
    # replace /var/www with /home/public_html/$USERNAME
    sudo sed -i 's|var/www|home/public_html/'$USERNAME'|g' ldev
    # enable the new virtual host
    cd ../sites-enabled/
    sudo ln -s ../sites-available/ldev ldev
    sudo a2ensite ldev
    sudo /etc/init.d/apache2 restart
    # make your hosts file register the ldev TLD
    # first backup the hosts file
    sudo cp /etc/hosts ~/.hosts.bak
    # append ldev to the localhost (::1) line for webkit browsers
    sudo sed -i '/::1/s|$| ldev|' /etc/hosts
    # append ldev to the 127.0.0.1 line for firefox
    sudo sed -i '/127.0.0.1/s|$| ldev|' /etc/hosts
    # now you should be able to see index.html at ldev
    # first copy a sample document 
    sudo cp /var/www/index.html ~/public_html
    # then open it in a browser
    gnome-open http://ldev/
    Last edited by tacitdynamite; September 20th, 2010 at 06:01 PM.

  4. #4
    Join Date
    Jan 2010
    Location
    opposing reality (VIC AU)
    Beans
    990
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: apache 403 on encrypted home dir in 10.10 maverick meerkat

    Please consider using 'thread tools' in red above to mark this thread as solved.
    NEED HELP? | [SOLVED] | MS hide
    A little nonsense now and then...
    .
    If this is a game thread and you are going to post I hope you have read the Original Post.

  5. #5
    Join Date
    Jan 2009
    Beans
    19
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: apache 403 on encrypted home dir in 10.10 maverick meerkat

    @tacitdynamite - cheers for posting this. I've just spent three hours pulling my hair out over why an imported site wouldn't work on my laptop with hosted files in my home dir. Like you no amount of chmod / chown / www-data / 777 combos would work... your post showed me the problem :: ENCRYPTION!!! (I'd completely forgotten I turned it on for this laptop install!)

    just wish that apache could have given a more helpful message than the default:

    Code:
    (13)Permission denied: access to / denied
    I might check out the work-arounds, or just go back to /var/www

  6. #6
    Join Date
    Jul 2009
    Beans
    24

    Re: apache 403 on encrypted home dir in 10.10 maverick meerkat

    Maverick Meerkat was the first time I had used the home disk encryption; before, I used the alternate install disk w/ full disk encryption, which gave me a transparent experience and let me really forget about it. When I upgrade next time, I'll definitely go back to that because now, when I have any kind of webdev problem, I think, "is this because my home disk is encrypted?" Glad this helped someone else!
    Last edited by tacitdynamite; September 29th, 2010 at 04:11 AM. Reason: grammar

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •