IdentifiantMot de passe
Loading...
Mot de passe oublié ?Je m'inscris ! (gratuit)
Navigation

Inscrivez-vous gratuitement
pour pouvoir participer, suivre les réponses en temps réel, voter pour les messages, poser vos propres questions et recevoir la newsletter

Apache Discussion :

[error] [client @IP] Symbolic link not allowed: /home/


Sujet :

Apache

Vue hybride

Message précédent Message précédent   Message suivant Message suivant
  1. #1
    Futur Membre du Club
    Profil pro
    Inscrit en
    Avril 2007
    Messages
    4
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Avril 2007
    Messages : 4
    Par défaut [error] [client @IP] Symbolic link not allowed: /home/
    Bonjour A tous,
    je ne suis pas un admin Apache et vous le comprendrez bien vite ...

    J'ai déjà exploité ce forum pour le PERL très bon d'ailleurs en espérant que le forum Apache sera pareil !!!!

    Voila ce qui m'amène :
    J'ai un message d'erreur dans les LOGS :
    [error] [client 172.20.27.139] Symbolic link not allowed: /home/
    Voici ma version d'apache : Apache/1.3.9 (Unix) (Red Hat/Linux)

    httpd.conf :
    Code : Sélectionner tout - Visualiser dans une fenêtre à part
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    45
    46
    47
    48
    49
    50
    51
    52
    53
    54
    55
    56
    57
    58
    59
    60
    61
    62
    63
    64
    65
    66
    67
    68
    69
    70
    71
    72
    73
    74
    75
    76
    77
    78
    79
    80
    81
    82
    83
    84
    85
    86
    87
    88
    89
    90
    91
    92
    93
    94
    95
    96
    97
    98
    99
    100
    101
    102
    103
    104
    105
    106
    107
    108
    109
    110
    111
    112
    113
    114
    115
    116
    117
    118
    119
    120
    121
    122
    123
    124
    125
    126
    127
    128
    129
    130
    131
    132
    133
    134
    135
    136
    137
    138
    139
    140
    141
    142
    143
    144
    145
    146
    147
    148
    149
    150
    151
    152
    153
    154
    155
    156
    157
    158
    159
    160
    161
    162
    163
    164
    165
    166
    167
    168
    169
    170
    171
    172
    173
    174
    175
    176
    177
    178
    179
    180
    181
    182
    183
    184
    185
    186
    187
    188
    189
    190
    191
    192
    193
    194
    195
    196
    197
    198
    199
    200
    201
    202
    203
    204
    205
    206
    207
    208
    209
    210
    211
    212
    213
    214
    215
    216
    217
    218
    219
    220
    221
    222
    223
    224
    225
    226
    227
    228
    229
    230
    231
    232
    233
    234
    235
    236
    237
    238
    239
    240
    241
    242
    243
    244
    245
    246
    247
    248
    249
    250
    251
    252
    253
    254
    255
    256
    257
    258
    259
    260
    261
    262
    263
    264
    265
    266
    267
    268
    269
    270
    271
    272
    273
    274
    275
    276
    277
    278
    279
    280
    281
    282
    283
    284
    285
    286
    287
    288
    289
    290
    291
    292
    293
    294
    295
    296
    297
    298
    299
    300
    301
    302
    303
    304
    305
    306
    307
    308
    309
    310
    311
    312
    313
    314
    315
    316
    317
    318
    319
    320
    321
    322
    323
    324
    325
    326
    327
    328
    329
    330
    331
    332
    333
    334
    335
    336
    337
    338
    ##
    ## httpd.conf -- Apache HTTP server configuration file
    ##
     
    # This is the main server configuration file. See URL <a href="http://www.apache.org/" target="_blank">http://www.apache.org/</a>
    # for instructions.
     
    # Do NOT simply read the instructions in here without understanding
    # what they do, if you are unsure consult the online docs. You have been
    # warned.  
     
    # Originally by Rob McCool
     
    # ServerType is either inetd, or standalone.
     
    ServerType standalone
     
    # If you are running from inetd, go to "ServerAdmin".
     
    # Port: The port the standalone listens to. For ports < 1023, you will
    # need httpd to be run as root initially.
     
    Port 80
     
    # HostnameLookups: Log the names of clients or just their IP numbers
    #   e.g.   <a href="http://www.apache.org" target="_blank">www.apache.org</a> (on) or 204.62.129.132 (off)
    # The default is off because it'd be overall better for the net if people
    # had to knowingly turn this feature on.
     
    HostnameLookups off
     
    # If you wish httpd to run as a different user or group, you must run
    # httpd as root initially and it will switch.  
     
    # User/Group: The name (or #number) of the user/group to run httpd as.
    #  On SCO (ODT 3) use User nouser and Group nogroup
    #  On HPUX you may not be able to use shared memory as nobody, and the
    #  suggested workaround is to create a user www and use that user.
    #  NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET)
    #  when the value of (unsigned)Group is above 60000; 
    #  don't use Group nobody on these systems!
     
    User nobody
    Group nobody
     
    # ServerAdmin: Your address, where problems with the server should be
    # e-mailed.
     
    ServerAdmin root@localhost
     
    # ServerRoot: The directory the server's config, error, and log files
    # are kept in.
    # NOTE!  If you intend to place this on a NFS (or otherwise network)
    # mounted filesystem then please read the LockFile documentation,
    # you will save yourself a lot of trouble.
     
    #ServerRoot /etc/httpd
    ServerRoot /var/www/phpsyslogng/
    # BindAddress: You can support virtual hosts with this option. This option
    # is used to tell the server which IP address to listen to. It can either
    # contain "*", an IP address, or a fully qualified Internet domain name.
    # See also the VirtualHost directive.
     
    #BindAddress *
     
    # ErrorLog: The location of the error log file. If this does not start
    # with /, ServerRoot is prepended to it.
     
    ErrorLog logs/error_log
     
    # LogLevel: Control the number of messages logged to the error_log.
    # Possible values include: debug, info, notice, warn, error, crit,
    # alert, emerg.
     
    LogLevel warn
     
    # Dynamic Shared Object (DSO) Support
    #
    # To be able to use the functionality of a module which was built as a DSO you
    # have to place corresponding `LoadModule' lines at this location so the
    # directives contained in it are actually available _before_ they are used.
    # Please read the file README.DSO in the Apache 1.3 distribution for more
    # details about the DSO mechanism and run `httpd -l' for the list of already
    # built-in (statically linked and thus always available) modules in your httpd
    # binary.
    #
    # Example:
    # LoadModule foo_module libexec/mod_foo.so
    #
    # Documentation for modules is in "/home/httpd/manual/mod" in HTML format.
     
    #LoadModule mmap_static_module modules/mod_mmap_static.so
    LoadModule env_module         modules/mod_env.so
    LoadModule config_log_module  modules/mod_log_config.so
    LoadModule agent_log_module   modules/mod_log_agent.so
    LoadModule referer_log_module modules/mod_log_referer.so
    #LoadModule mime_magic_module  modules/mod_mime_magic.so
    LoadModule mime_module        modules/mod_mime.so
    LoadModule negotiation_module modules/mod_negotiation.so
    LoadModule status_module      modules/mod_status.so
    LoadModule info_module        modules/mod_info.so
    LoadModule includes_module    modules/mod_include.so
    LoadModule autoindex_module   modules/mod_autoindex.so
    LoadModule dir_module         modules/mod_dir.so
    LoadModule cgi_module         modules/mod_cgi.so
    LoadModule asis_module        modules/mod_asis.so
    LoadModule imap_module        modules/mod_imap.so
    LoadModule action_module      modules/mod_actions.so
    #LoadModule speling_module     modules/mod_speling.so
    LoadModule userdir_module     modules/mod_userdir.so
    LoadModule proxy_module       modules/libproxy.so
    LoadModule alias_module       modules/mod_alias.so
    LoadModule rewrite_module     modules/mod_rewrite.so
    LoadModule access_module      modules/mod_access.so
    LoadModule auth_module        modules/mod_auth.so
    LoadModule anon_auth_module   modules/mod_auth_anon.so
    #LoadModule dbm_auth_module    modules/mod_auth_dbm.so
    LoadModule db_auth_module     modules/mod_auth_db.so
    LoadModule digest_module      modules/mod_digest.so
    #LoadModule cern_meta_module   modules/mod_cern_meta.so
    LoadModule expires_module     modules/mod_expires.so
    LoadModule headers_module     modules/mod_headers.so
    LoadModule usertrack_module   modules/mod_usertrack.so
    #LoadModule example_module     modules/mod_example.so
    #LoadModule unique_id_module   modules/mod_unique_id.so
    LoadModule setenvif_module    modules/mod_setenvif.so
     
    # Extra Modules
    #LoadModule php_module         modules/mod_php.so
    #LoadModule php3_module        modules/libphp3.so
    #LoadModule perl_module        modules/libperl.so
     
    #  Reconstruction of the complete module list from all available modules
    #  (static and shared ones) to achieve correct module execution order.
    #  [WHENEVER YOU CHANGE THE LOADMODULE SECTION ABOVE UPDATE THIS, TOO]
    ClearModuleList
    #AddModule mod_mmap_static.c
    AddModule mod_env.c
    AddModule mod_log_config.c
    AddModule mod_log_agent.c
    AddModule mod_log_referer.c
    #AddModule mod_mime_magic.c
    AddModule mod_mime.c
    AddModule mod_negotiation.c
    AddModule mod_status.c
    AddModule mod_info.c
    AddModule mod_include.c
    AddModule mod_autoindex.c
    AddModule mod_dir.c
    AddModule mod_cgi.c
    AddModule mod_asis.c
    AddModule mod_imap.c
    AddModule mod_actions.c
    #AddModule mod_speling.c
    AddModule mod_userdir.c
    AddModule mod_proxy.c
    AddModule mod_alias.c
    AddModule mod_rewrite.c
    AddModule mod_access.c
    AddModule mod_auth.c
    AddModule mod_auth_anon.c
    #AddModule mod_auth_dbm.c
    AddModule mod_auth_db.c
    AddModule mod_digest.c
    #AddModule mod_cern_meta.c
    AddModule mod_expires.c
    AddModule mod_headers.c
    AddModule mod_usertrack.c
    #AddModule mod_example.c
    #AddModule mod_unique_id.c
    AddModule mod_so.c
    AddModule mod_setenvif.c
     
    # Extra Modules
    #AddModule mod_php.c
    #AddModule mod_php3.c
    #AddModule mod_perl.c
     
     
    # The following directives define some format nicknames for use with
    # a CustomLog directive (see below).
     
    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    LogFormat "%{Referer}i -> %U" referer
    LogFormat "%{User-agent}i" agent
     
    # The location of the access logfile (Common Logfile Format).
    # If this does not start with /, ServerRoot is prepended to it.
     
    CustomLog logs/access_log common
     
    # If you would like to have an agent and referer logfile uncomment the
    # following directives.
     
    #CustomLog logs/referer_log referer
    #CustomLog logs/agent_log agent
     
    # If you prefer a single logfile with access, agent and referer information
    # (Combined Logfile Format) you can use the following directive.
     
    #CustomLog logs/access_log combined
     
    # PidFile: The file the server should log its pid to
    PidFile /var/run/httpd.pid
     
    # ScoreBoardFile: File used to store internal server process information.
    # Not all architectures require this.  But if yours does (you'll know because
    # this file is created when you run Apache) then you *must* ensure that
    # no two invocations of Apache share the same scoreboard file.
    ScoreBoardFile /var/run/httpd.scoreboard
     
    # The LockFile directive sets the path to the lockfile used when Apache
    # is compiled with either USE_FCNTL_SERIALIZED_ACCEPT or
    # USE_FLOCK_SERIALIZED_ACCEPT. This directive should normally be left at
    # its default value. The main reason for changing it is if the logs
    # directory is NFS mounted, since the lockfile MUST BE STORED ON A LOCAL
    # DISK. The PID of the main server process is automatically appended to
    # the filename. 
    #
    #LockFile /var/lock/httpd.lock
     
    # ServerName allows you to set a host name which is sent back to clients for
    # your server if it's different than the one the program would get (i.e. use
    # "www" instead of the host's real name).
    #
    # Note: You cannot just invent host names and hope they work. The name you 
    # define here must be a valid DNS name for your host. If you don't understand
    # this, ask your network administrator.
     
    #ServerName new.host.name
     
    # UseCanonicalName:  (new for 1.3)  With this setting turned on, whenever
    # Apache needs to construct a self-referencing URL (a url that refers back
    # to the server the response is coming from) it will use ServerName and
    # Port to form a "canonical" name.  With this setting off, Apache will
    # use the hostname:port that the client supplied, when possible.  This
    # also affects SERVER_NAME and SERVER_PORT in CGIs.
    UseCanonicalName on
     
    # CacheNegotiatedDocs: By default, Apache sends Pragma: no-cache with each
    # document that was negotiated on the basis of content. This asks proxy
    # servers not to cache the document. Uncommenting the following line disables
    # this behavior, and proxies will be allowed to cache the documents.
     
    #CacheNegotiatedDocs
     
    # Timeout: The number of seconds before receives and sends time out
     
    Timeout 300
     
    # KeepAlive: Whether or not to allow persistent connections (more than
    # one request per connection). Set to "Off" to deactivate.
     
    KeepAlive On
     
    # MaxKeepAliveRequests: The maximum number of requests to allow
    # during a persistent connection. Set to 0 to allow an unlimited amount.
    # We reccomend you leave this number high, for maximum performance.
     
    MaxKeepAliveRequests 100
     
    # KeepAliveTimeout: Number of seconds to wait for the next request
     
    KeepAliveTimeout 15
     
    # Server-pool size regulation.  Rather than making you guess how many
    # server processes you need, Apache dynamically adapts to the load it
    # sees --- that is, it tries to maintain enough server processes to
    # handle the current load, plus a few spare servers to handle transient
    # load spikes (e.g., multiple simultaneous requests from a single
    # Netscape browser).
     
    # It does this by periodically checking how many servers are waiting
    # for a request.  If there are fewer than MinSpareServers, it creates
    # a new spare.  If there are more than MaxSpareServers, some of the
    # spares die off.  These values are probably OK for most sites ---
     
    MinSpareServers 8
    MaxSpareServers 20
     
    # Number of servers to start --- should be a reasonable ballpark figure.
     
    StartServers 10
     
    # Limit on total number of servers running, i.e., limit on the number
    # of clients who can simultaneously connect --- if this limit is ever
    # reached, clients will be LOCKED OUT, so it should NOT BE SET TOO LOW.
    # It is intended mainly as a brake to keep a runaway server from taking
    # Unix with it as it spirals down...
     
    MaxClients 150
     
    # MaxRequestsPerChild: the number of requests each child process is
    #  allowed to process before the child dies.
    #  The child will exit so as to avoid problems after prolonged use when
    #  Apache (and maybe the libraries it uses) leak.  On most systems, this
    #  isn't really needed, but a few (such as Solaris) do have notable leaks
    #  in the libraries.
     
    MaxRequestsPerChild 100
     
    # Proxy Server directives. Uncomment the following line to
    # enable the proxy server:
     
    #ProxyRequests On
     
    # To enable the cache as well, edit and uncomment the following lines:
     
    #CacheRoot /var/cache/httpd
    #CacheSize 5
    #CacheGcInterval 4
    #CacheMaxExpire 24
    #CacheLastModifiedFactor 0.1
    #CacheDefaultExpire 1
    #NoCache a_domain.com another_domain.edu joes.garage_sale.com
     
    # Listen: Allows you to bind Apache to specific IP addresses and/or
    # ports, in addition to the default. See also the VirtualHost command
     
    #Listen 3000
    #Listen 12.34.56.78:80
     
    # VirtualHost: Allows the daemon to respond to requests for more than one
    # server address, if your server machine is configured to accept IP packets
    # for multiple addresses. This can be accomplished with the ifconfig 
    # alias flag, or through kernel patches like VIF.
     
    # Any httpd.conf or srm.conf directive may go into a VirtualHost command.
    # See also the BindAddress entry.
     
    #<VirtualHost host.some_domain.com>
    #ServerAdmin <a href="mailto:webmaster@host.some_domain.com">webmaster@host.some_domain.com</a>
    #DocumentRoot /www/docs/host.some_domain.com
    #ServerName host.some_domain.com
    #ErrorLog logs/host.some_domain.com-error_log
    #TransferLog logs/host.some_domain.com-access_log
    #</VirtualHost>
    Voici également le chemin ou se trouve les pages web:
    Code : Sélectionner tout - Visualiser dans une fenêtre à part
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    [root@gcc-mus-8 phpsyslogng]# pwd
    /var/www/phpsyslogng
    [root@gcc-mus-8 phpsyslogng]# ll
    total 60
    -rwxr-xr-x  1 www users  6209 Jul  7  2005 CHANGELOG*
    drwxr-xr-x  2 www users  4096 Nov 12 10:37 config/
    drwxr-xr-x  2 www users  4096 May 29  2005 css/
    drwxr-xr-x  2 www users  4096 Jul  7  2005 includes/
    -rwxr-xr-x  1 www users  2944 Jun 14  2005 index.php*
    -rwxr-xr-x  1 www users 18011 May 23  2005 LICENSE*
    drwxr-xr-x  2 www users  4096 Nov 12 11:33 logs/
    drwxr-xr-x  2 www users  4096 Nov 12 11:31 modules/
    -rwxr-xr-x  1 www users  1512 Jul  1  2005 README*
    drwxr-xr-x  2 www users  4096 Nov  9 15:41 scripts/
    J'espère vous avoir donné suffisamment d'informations pour que vous puissiez m'aider.

    A Pluche Jules

  2. #2
    Membre expérimenté

    Profil pro
    Inscrit en
    Juin 2002
    Messages
    6 152
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Juin 2002
    Messages : 6 152
    Par défaut
    Quel rapport avec /home dans tout ça ? /home est un lien symbolique sur votre système ? A quoi cette erreur fait-elle suite : une requête utilisant le module userdir ?

    En tout cas il manque probablement l'option FollowSymLinks à un répertoire (directive Directory - d'ailleurs vous n'en avez donné aucune).

  3. #3
    Futur Membre du Club
    Profil pro
    Inscrit en
    Avril 2007
    Messages
    4
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Avril 2007
    Messages : 4
    Par défaut
    Merci pour tes éléments de réponse cependant comment ce fait il que je n ai aucun "directory" de specifie dans le httpd.conf et que dans le log le demon httpd parle /home ?
    je ne vois pas ou je fais appel a /home ?

    As tu une idée ?
    merci d avance
    Julien

  4. #4
    Membre expérimenté

    Profil pro
    Inscrit en
    Juin 2002
    Messages
    6 152
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Juin 2002
    Messages : 6 152
    Par défaut
    Citation Envoyé par calimero642fr
    comment ce fait il que je n ai aucun "directory" de specifie dans le httpd.conf
    Apache applique les options par défaut donc ce n'est pas réellement grave et encore moins vital à son fonctionnement.

    Citation Envoyé par calimero642fr
    que dans le log le demon httpd parle /home ?
    je ne vois pas ou je fais appel a /home ?
    Citation Envoyé par julp
    /home est un lien symbolique sur votre système ? A quoi cette erreur fait-elle suite : une requête utilisant le module userdir ?
    C'est à vous de nous le dire puisque vous avez accès à votre propre système et aux fichiers de logs

    Cependant, vous pouvez toujours essayer d'ajouter :
    Code : Sélectionner tout - Visualiser dans une fenêtre à part
    1
    2
    3
    <Directory />
        Options FollowSymLinks
    </Directory>
    Mais niveau sécurité c'est à déconseiller ...

  5. #5
    Futur Membre du Club
    Profil pro
    Inscrit en
    Avril 2007
    Messages
    4
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Avril 2007
    Messages : 4
    Par défaut
    Merci pour ta réponse j'ai réalisé la modif, mais pour être honnête pas de changement.

    Alors voici les logs
    -fichier access_log

    172.20.27.139 - - [13/Nov/2007:09:51:42 +0100] "GET /phpsyslogng HTTP/1.1" 403 221
    172.20.27.139 - - [13/Nov/2007:09:51:43 +0100] "GET /phpsyslogng HTTP/1.1" 403 221
    172.20.27.139 - - [13/Nov/2007:12:03:14 +0100] "GET / HTTP/1.1" 403 210


    -fichier access_log
    [Tue Nov 13 12:02:42 2007] [notice] Apache/1.3.9 (Unix) (Red Hat/Linux) configured -- resuming normal operations
    [Tue Nov 13 12:02:42 2007] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
    [Tue Nov 13 12:03:14 2007] [error] [client 172.20.27.139] Symbolic link not allowed: /home/


    Donc je ne comprend pas bien le probleme et je trouve les log pas assez explicite pour un padawane.

    Mais si jamais je peux te donner plus d'info je suis dispo. Car c'est vrai que la je ne comprend pas trop.
    Et si je peux me permettre comment savoir qu'elle version PHP est compatible avec ma version appache ? Ou puis touver l'info.

    Jules

Discussions similaires

  1. Réponses: 0
    Dernier message: 23/06/2015, 11h39
  2. error 405 method not allowed
    Par lapitch dans le forum Windows Communication Foundation
    Réponses: 4
    Dernier message: 29/03/2011, 16h25
  3. Xbap error : That assembly does not allow partially trusted callers
    Par amandinerenard dans le forum Windows Presentation Foundation
    Réponses: 1
    Dernier message: 02/07/2008, 22h31
  4. Réponses: 0
    Dernier message: 18/12/2007, 12h49
  5. ERROR 1314 (0A000): LOAD DATA is not allowed in stored proce
    Par pointe dans le forum SQL Procédural
    Réponses: 7
    Dernier message: 17/11/2005, 12h50

Partager

Partager
  • Envoyer la discussion sur Viadeo
  • Envoyer la discussion sur Twitter
  • Envoyer la discussion sur Google
  • Envoyer la discussion sur Facebook
  • Envoyer la discussion sur Digg
  • Envoyer la discussion sur Delicious
  • Envoyer la discussion sur MySpace
  • Envoyer la discussion sur Yahoo