[SOLVED] symlink not allowed

redssr · 11-04-2016, 04:15 AM

Hello, ember1205,

I had already provided the output for the same. Please find it again.

Code:

linux:/ # ls -lrth /srv/
total 4.0K
drwxr-xr-x 2 wwwrun www 4.0K Sep 25  2014 ftp
lrwxrwxrwx 1 wwwrun www    9 Oct 31 15:18 www -> /ssr/www

ember1205 · 11-04-2016, 06:41 AM

Quote:

Originally Posted by redssr

Dear TBOne,

These logs are after changing Options to All from my previous Options

Code:

linux:~ # cat /etc/apache2/conf.d/owncloud.conf
Alias /owncloud "/srv/www/htdocs/owncloud/"

<Directory "/srv/www/htdocs/owncloud">
    Options All
    AllowOverride All

    <IfModule mod_dav.c>
      Dav off
    </IfModule>

    SetEnv HOME /srv/www/htdocs/owncloud
    SetEnv HTTP_HOME /srv/www/htdocs/owncloud


</Directory>

<Directory "/srv/www/htdocs/owncloud/data/">
  # just in case if .htaccess gets disabled
  Require all denied
</Directory>

## Please enable this manually, if needed. See also
## https://doc.owncloud.org/server/8.2/admin_manual/issues/index.html#apple-ios
# Redirect 301 /.well-known/carddav /owncloud/remote.php/carddav
# Redirect 301 /.well-known/caldav  /owncloud/remote.php/caldav

<Directory "/srv/www>
    Options All
    AllowOverride All

    <IfModule mod_dav.c>
      Dav off
    </IfModule>
</Directory>

You have two errors in this last section. You're missing a trailing slash and a quote. It should look like this:

Code:

<Directory "/srv/www/">
    Options All
    AllowOverride All

    <IfModule mod_dav.c>
      Dav off
    </IfModule>
</Directory>

redssr · 11-04-2016, 07:01 AM

Hello ember1205,

I made the changes as per your suggestion, but still same error

Code:

[Fri Nov 04 11:57:45.260263 2016] [core:error] [pid 1092] [client 192.168.1.101:60241] AH00037: Symbolic link not allowed or link target not accessible: /srv/www
[Fri Nov 04 11:57:45.454518 2016] [core:error] [pid 1092] [client 192.168.1.101:60241] AH00037: Symbolic link not allowed or link target not accessible: /srv/www, referer: http://192.168.1.102/owncloud/

Is there anything security settings needs to be tweaked from OS side?

Regards,

Redssr

ember1205 · 11-04-2016, 07:05 AM

Instead of using a link from /srv/www to /ssr/www, try using a link from /srv/www/htdocs to /ssr/www/htdocs

There aren't really any directives for Apache to respect links that are "above" the directory level of your actual main documents folder.

bathory · 11-04-2016, 07:28 AM

@OP

Quote:

Is there anything security settings needs to be tweaked from OS side?

Check if AppArmor is enabled.

redssr · 11-04-2016, 07:41 AM

Dear bathory,

Tried to disable appamor but

Code:

linux:~ # service boot.apparmor stop
service: no such service boot.apparmor

linux:~ # yast
-bash: yast: command not found
linux:~ # yast2
-bash: yast2: command not found

Regards,

Redssr

bathory · 11-04-2016, 08:17 AM

Quote:

linux:~ # service boot.apparmor stop
service: no such service boot.apparmor

linux:~ # yast
-bash: yast: command not found
linux:~ # yast2
-bash: yast2: command not found

I don't use Suse, but I know that it comes with yast for admin purposes.
How is that yours does not have yast?

Re. Apparmor, if it's running, you may try the following from here

Code:

/etc/init.d/boot.apparmor stop

redssr · 11-04-2016, 08:52 AM

Hello bathory.

There is no boot.apparmor script on server

Code:

linux:~ # /etc/init.d/boot.
boot.d/     boot.local  boot.udev
linux:~ # /etc/init.d/boot.d/
K50boot.udev  S50boot.udev
linux:~ # /etc/init.d/boot.d/

Any other settings?

Regards

Redssr

ember1205 · 11-04-2016, 09:27 AM

Did you change the link as suggested? And restart Apache afterward?

redssr · 11-04-2016, 09:38 AM

Hello ember1205,

Yes dear after making changes as per your request i restarted the apache. but no luck.

Regards,

Redssr

bathory · 11-04-2016, 09:56 AM

Quote:

Any other settings?

Nope, told you I don't run suse, so I'm familiar with it.
But still it's strange that there is no yast!!

Anyway if it isn't an apparmor restriction, I would ditch the symlink(s) and point the Alias to the actual /ssr directory

Code:

Alias /owncloud "/ssr/www/htdocs/owncloud/"

<Directory "/ssr/www/htdocs/owncloud">
    Options All
    AllowOverride All

    <IfModule mod_dav.c>
      Dav off
    </IfModule>

    SetEnv HOME /ssr/www/htdocs/owncloud
    SetEnv HTTP_HOME /ssr/www/htdocs/owncloud
</Directory>

#Replace all other occurrences of /srv with /ssr
..

ember1205 · 11-04-2016, 09:59 AM

Is /ssr another filesytem that's mounted there? If so, you need to ensure that the underlying filesystem has appropriate permissions as well.

redssr · 11-04-2016, 10:00 AM

Hello bathory,

If i change from srv to ssr it works but its not my requirement, i want it to work with srv only.

Regards,

Redssr

redssr · 11-04-2016, 10:03 AM

Hello ember1205,

I+t lies in the same file system

Code:

linux:~ # df -h
Filesystem      Size  Used Avail Use% Mounted on
/dev/sda1        32G  1.9G   28G   7% /
devtmpfs        494M     0  494M   0% /dev
tmpfs           499M  4.0K  499M   1% /dev/shm
tmpfs           499M  6.7M  492M   2% /run
tmpfs           499M     0  499M   0% /sys/fs/cgroup
linux:~ # ls -lrth /
total 88K
drwxr-xr-x  2 root   root 4.0K Sep 25  2014 home
drwxr-xr-x  2 root   root 4.0K Sep 25  2014 selinux
drwxr-xr-x  2 root   root 4.0K Sep 25  2014 mnt
drwxr-xr-x 13 root   root 4.0K Dec 13  2015 usr
drwxr-xr-x  5 root   root 4.0K Dec 13  2015 lib64
drwxr-xr-x  8 root   root 4.0K Dec 13  2015 lib
drwxr-xr-x  2 root   root 4.0K Dec 13  2015 bin
drwxr-xr-x  4 root   root 4.0K Dec 13  2015 opt
-rw-r--r--  1 root   root 2.7K Dec 13  2015 bootincluded_archives.filelist
drwx------  2 root   root  16K Dec 13  2015 lost+found
drwxr-xr-x  2 root   root 4.0K Dec 13  2015 sbin
drwxr-xr-x  5 root   root 4.0K Dec 13  2015 boot
drwxr-xr-x  2 root   root 4.0K Dec 13  2015 studio
drwxr-xr-x 12 root   root 4.0K Oct 31 14:30 var
drwxrwxrwx  3 wwwrun www  4.0K Oct 31 15:17 ssr
drwxr-xr-x  3 wwwrun www  4.0K Oct 31 15:18 srv
drwx------  5 root   root 4.0K Nov  4 11:56 root
dr-xr-xr-x 12 root   root    0 Nov  4 12:33 sys
drwxr-xr-x 17 root   root 3.6K Nov  4 12:33 dev
dr-xr-xr-x 95 root   root    0 Nov  4 12:33 proc
drwxr-xr-x 69 root   root 4.0K Nov  4 12:33 etc
drwxr-xr-x 16 root   root  440 Nov  4 12:33 run
drwxrwxrwt  8 root   root 4.0K Nov  4 12:34 tmp

ember1205 · 11-04-2016, 10:18 AM

What's the output of "mount"?