SID-02065: unexplained loss of permission for twiki/pub

Status:	Answered	TWiki version:	6.0.1	Perl version:	5.14.2
Category:	CategoryAccessControl	Server OS:	3.2.0-77-generic #114-Ubuntu SMP	Last update:	10 years ago

I set up TWiki a couple of days ago without difficulty. I did a bit of basic testing. I implemented CAS authentication yesterday. Seemed fine.

For practice I uploaded an image today and replaced the banner on the default main page. It failed to appear, and the apache2 log indicated a 403 error on the pub directory where the uploaded jpg was contained:

/srv/www/<mysitename>/twiki/pub/Main/WebHome

Next time I visited the wiki, all of the jpg's were gone, and my web server logged lots of these:

[Thu May 21 19:35:46 2015] [error] [client <?>.255.246.85] client denied by server configuration: /srv/www/<mysitename>/twiki/pub/TWiki/TopMenuSkin/action-button-area.gif, referer: https://<mysitename>/wiki

The thing to stress is that I did not make any changes to my apache2 config files between having access to /twiki/pub and being denied.

The config file remains unchanged, the interesting lines of twiki.conf being maybe:

Alias /wiki/pub "/srv/www/<mysitename>/twiki/pub"

<Directory "/srv/www/<mysitename>/wiki/pub"> Options None AllowOverride None Order Allow,Deny Allow from all Deny from env=blockAccess etc.

Directory permissions continue to be 777 for the web server:

drwxr-xr-x 8 www-data www-data 4096 May 12 15:34 pub

My configure output has no errors. Available on request.

I also turned off CAS authentication, but the problem persisted.

-- Graham Denham - 2015-05-22

Discussion and Answer

Not sure. Check your BrowserMatchNoCase ... blockAccess settings if there is anything suspicious.

For testing, comment out Deny from env=blockAccess

-- Peter Thoeny - 2015-05-22

Thanks, Peter. It seems that in trying to solve the permission problem for one file, I introduced a typo into the the Directory name! Fixing that recovers my access to wiki/pub, of course. (Oops!)

I can't reproduce my original complaint, so I will not worry about it.

-- Graham Denham - 2015-05-22

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.