[Help]I really confused about the permission of DocumentRoot in Apache

daozhaocom · #1 8th June 2012, 05:06 PM

My system is Fedora17, my username is sp, I installed lampp in /opt/lampp,the default ServerRoot in /opt/lampp/etc/httpd.conf is "/opt/lampp".
I just changed the following places in /opt/lampp/etc/httpd.conf:

Code:

DocumentRoot "/home/sp/workspace"

<Directory />
Options FollowSymLinks
AllowOverride All
</Directory>

<Directory "/home/sp/workspace">
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
</Directory>

After I restart the lampp, I received the notice "Access forbidden!"

only when I changed the DocumentRoot to "/opt/lampp/mysite", it worked,but I really hate to set it to a folder under /opt,I really want to set it to a fold under /home/sp.

Help me,plz

hmmsjan · #2 8th June 2012, 05:10 PM

Dear daozhaocom,

Do you have selinux activated? As far I remember, selinux does not like apache access to home directories.

Good luck.

daozhaocom · #3 8th June 2012, 05:27 PM

Quote:

Originally Posted by hmmsjan

Dear daozhaocom,

Do you have selinux activated? As far I remember, selinux does not like apache access to home directories.

Good luck.

---------- Post added at 04:27 PM ---------- Previous post was at 04:17 PM ----------

[/COLOR]I just check it.
when iit is enforcing ,I restart lampp ,I received the notice "Access forbidden!".
when it is permissive, I also restart lampp ,I received the notice "Access forbidden!".

hmmsjan · #4 8th June 2012, 06:27 PM

Dear daozhaocom,

In permissive mode, you should get a warning message but access will be allowed.
Is it not a trivial permission problem? Apache normally runs under his own user name,
and the file permissions in the users home directory might prevent access, including /home/sp.

Normal document root directory for the webserver is /var/www/html in Redhat based distributions.

Good luck.

Fenrin · #5 9th June 2012, 12:33 AM

you shouldn't use the lampp package, better use Fedora apache server package (package name: httpd). This guide is probably helpful.

the following SELinux flag should be set, if you want to use the home dir

Code:

setsebool -P httpd_enable_homedirs 1

you also have to edit /etc/httpd/conf/httpd.conf:
in the section <IfModule mod_userdir.c> there should be "UserDir enabled" and uncomment the user dir, you want to use (default is public_html).

maybe it works already at this point, but probably you also have to set suitable permissions. For example add your user to the apache group (either edit the file /etc/group or use the user and groups tool).
Then set the permissions for example like this:

Code:

chgrp -R apache /home/username/public_html
chmod -R g+r /home/username/public_html

for folders where you need write access, you should use +rw instead of +r.

if you have any write permission issues.

Code:

chcon -R -h -t httpd_sys_content_t /home/username/public_html
chcon -R -h -t httpd_sys_script_rw_t /home/username/public_html/webapp/folderwhereyouneedwriteaccess

daozhaocom · #6 9th June 2012, 02:33 AM

Thank you for all , I think i should give up lampp,just use Fedora apache server package,special thanks to Fenrin

daozhaocom · #7 9th June 2012, 04:55 PM

I have just changed to the apache server package , I solved the problems.so I come back to lampp,I also solve the problems.BecauseI realise that I really made some stupid mistakes as following:
1、 I should never change

Code:

DocumentRoot "/opt/lampp/htdocs"

2、 I should never change

Code:

<Directory "/opt/lampp/htdocs">

I just need to uncomment

Code:

Include etc/extra/httpd-userdir.conf

In /opt/lampp/etc/extra/httd-userdir.conf,make sure

Code:

UserDir public_html

is uncommented

Okay, just restart lampp,enjoy it.

hmmsjan · #8 9th June 2012, 07:09 PM

OK, very nice that it's resolved !!

But I assume you access the documents now as "http://server/~sp" ?

In that case, apache switches to user "sp" and accesses the folder as user sp.

In the original config, it should have worked too, provided you use "http://server/" and
the file owner in the homedir is set unconventionally to the user apache is running as , I think.

Good luck

daozhaocom · #9 10th June 2012, 02:35 AM

You are right,I access the documents now as "http://server/~sp".When I visit "http://server",it just show me the files under the folder "/var/www/html"