493902 – net-analyzer/icinga-web with www-servers/apache - 403 Forbidden

Bug 493902 - net-analyzer/icinga-web with www-servers/apache - 403 Forbidden

Summary: net-analyzer/icinga-web with www-servers/apache - 403 Forbidden

Status:	RESOLVED UPSTREAM

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	[OLD] Server (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Matthew Thode ( prometheanfire )

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2013-12-11 04:30 UTC by three sixes
Modified:	2014-02-17 06:31 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description three sixes 2013-12-11 04:30:29 UTC

icinga-web.conf duplicates 99_icinga-web.conf & neither of them get past 403.  i have the icinga service running, and 99_icinga.conf's alias 403s also....  apache is in both icinga & nagios groups.

Reproducible: Always

Comment 1 Matthew Thode ( prometheanfire ) archtester

2013-12-11 16:30:05 UTC

Do you have logs to share?

Comment 2 Guido Jäkel 2013-12-20 10:24:54 UTC

I can't confirm this.

May this be related to your global apache configuration because you've migrated from 2.2 to 2.4? If you're still using the legacy access_compat_module, you may miss to switch the new access module to "transparent mode" with a global statement like

<Location />
        Require all granted
</Location>

because the default is to reject all requests.

Comment 3 Matthew Thode ( prometheanfire ) archtester

2013-12-23 00:11:50 UTC

gonna leave this open for a little while longer, but if no more information is presented I will close this as 'resolved worksforme' in a couple of weeks.

Comment 4 Matthew Thode ( prometheanfire ) archtester

2013-12-23 00:12:45 UTC

ping about this bug, you were not subscribed to it, we need more info to proceed.

Comment 5 three sixes 2013-12-23 00:55:54 UTC

apache installed versions:
	Slot 2: 2.2.25
mkultra@mkultra [ ~ ]$ sudo emerge -av icinga icinga-web

seriously all it takes to confirm it is a fresh deploy of gentoo, merge apache & icinga & icinga-web.  403 out of the box....

/etc/apache2/modules.d/99_icinga* is where some of the problems start.

rm /etc/apache2/modules.d/99_*
& re emerge icinga....

[old logs]
127.0.0.1 - - [01/Dec/2013:18:53:42 -0500] "POST /joomla/installation/index.php HTTP/1.1" 200 105334
127.0.0.1 - - [01/Dec/2013:18:53:43 -0500] "GET /joomla/installation/template/images/j_button1_prev.png HTTP/1.1" 200 1471
127.0.0.1 - - [01/Dec/2013:18:53:43 -0500] "GET /joomla/installation/template/images/j_button1_right.png HTTP/1.1" 200 448
::1 - - [01/Dec/2013:18:53:59 -0500] "OPTIONS * HTTP/1.0" 200 -
::1 - - [10/Dec/2013:21:49:20 -0500] "GET / HTTP/1.1" 200 137
::1 - - [10/Dec/2013:21:49:21 -0500] "GET /matrix.gif HTTP/1.1" 200 432979
::1 - - [10/Dec/2013:21:49:21 -0500] "GET /favicon.ico HTTP/1.1" 404 268
::1 - - [10/Dec/2013:21:49:21 -0500] "GET /favicon.ico HTTP/1.1" 404 268
::1 - - [10/Dec/2013:21:53:57 -0500] "GET /icinga HTTP/1.1" 403 267
127.0.0.1 - - [10/Dec/2013:21:54:31 -0500] "GET / HTTP/1.0" 200 137
::1 - - [10/Dec/2013:21:58:54 -0500] "GET /icinga-web HTTP/1.1" 302 271
::1 - - [10/Dec/2013:21:58:54 -0500] "GET /icinga-web/ HTTP/1.1" 403 272
127.0.0.1 - - [10/Dec/2013:21:59:31 -0500] "GET / HTTP/1.0" 200 137
::1 - - [10/Dec/2013:22:00:33 -0500] "GET /icinga-web/ HTTP/1.1" 403 272
::1 - - [10/Dec/2013:22:00:38 -0500] "GET /icinga HTTP/1.1" 403 267
127.0.0.1 - - [10/Dec/2013:22:04:31 -0500] "GET / HTTP/1.0" 200 137
::1 - - [10/Dec/2013:22:06:42 -0500] "GET /icinga HTTP/1.1" 403 267
::1 - - [10/Dec/2013:22:06:46 -0500] "GET /icinga-web HTTP/1.1" 302 271
::1 - - [10/Dec/2013:22:06:46 -0500] "GET /icinga-web/ HTTP/1.1" 403 272
::1 - - [10/Dec/2013:22:09:11 -0500] "GET /icinga-web/ HTTP/1.1" 403 272
127.0.0.1 - - [10/Dec/2013:22:09:31 -0500] "GET / HTTP/1.0" 200 137
::1 - - [10/Dec/2013:22:09:36 -0500] "GET /icinga HTTP/1.1" 403 267
::1 - - [10/Dec/2013:22:09:40 -0500] "GET /icinga-web HTTP/1.1" 302 271
::1 - - [10/Dec/2013:22:09:40 -0500] "GET /icinga-web/ HTTP/1.1" 403 272
::1 - - [10/Dec/2013:22:09:45 -0500] "GET /icinga HTTP/1.1" 403 267
127.0.0.1 - - [10/Dec/2013:22:14:31 -0500] "GET / HTTP/1.0" 200 137
127.0.0.1 - - [10/Dec/2013:22:19:31 -0500] "GET / HTTP/1.0" 200 137
127.0.0.1 - - [10/Dec/2013:22:24:31 -0500] "GET / HTTP/1.0" 200 137
127.0.0.1 - - [10/Dec/2013:22:29:31 -0500] "GET / HTTP/1.0" 200 137
127.0.0.1 - - [10/Dec/2013:22:34:31 -0500] "GET / HTTP/1.0" 200 137
::1 - - [10/Dec/2013:22:35:52 -0500] "GET /icinga HTTP/1.1" 403 267
::1 - - [10/Dec/2013:22:35:57 -0500] "GET /icinga-web HTTP/1.1" 302 271
::1 - - [10/Dec/2013:22:35:57 -0500] "GET /icinga-web/ HTTP/1.1" 403 272
::1 - - [10/Dec/2013:22:41:00 -0500] "GET /icinga HTTP/1.1" 403 267
::1 - - [10/Dec/2013:22:41:04 -0500] "GET /icinga-web HTTP/1.1" 302 271
::1 - - [10/Dec/2013:22:41:04 -0500] "GET /icinga-web/ HTTP/1.1" 403 272
127.0.0.1 - - [10/Dec/2013:22:41:22 -0500] "GET / HTTP/1.0" 200 137
127.0.0.1 - - [10/Dec/2013:22:46:22 -0500] "GET / HTTP/1.0" 200 137
127.0.0.1 - - [10/Dec/2013:22:51:22 -0500] "GET / HTTP/1.0" 200 137
::1 - - [10/Dec/2013:22:51:23 -0500] "GET /icinga HTTP/1.1" 403 267
::1 - - [10/Dec/2013:22:51:27 -0500] "GET /icinga-web HTTP/1.1" 302 271
::1 - - [10/Dec/2013:22:51:27 -0500] "GET /icinga-web/ HTTP/1.1" 403 272
::1 - - [10/Dec/2013:22:51:30 -0500] "GET /icinga HTTP/1.1" 403 267
::1 - - [10/Dec/2013:22:54:34 -0500] "GET /icinga2k HTTP/1.1" 301 293
::1 - - [10/Dec/2013:22:54:34 -0500] "GET /icinga2k/ HTTP/1.1" 500 1985
::1 - - [10/Dec/2013:22:55:51 -0500] "GET /icinga2k/ HTTP/1.1" 200 765
[/old logs]

[ebuild  N    ~] net-analyzer/icinga-1.10.2  USE="apache2 idoutils mysql plugins ssl vim-syntax web -contrib -eventhandler -lighttpd -perl -postgres" 14,938 kB
[ebuild  N    ~] net-analyzer/icinga-web-1.10.0  USE="apache2 mysql -pnp -postgres" 0 kB


root@mkultra [ /var/log/apache2 ]# diff /etc/apache2/modules.d/99_icinga-web.conf /etc/apache2/modules.d/icinga-web.conf 
1d0
< <IfDefine ICINGA_WEB>
81d79
< </IfDefine>

fresh post emerge logs of apache access

::1 - - [22/Dec/2013:19:54:44 -0500] "GET /icinga HTTP/1.1" 404 263
::1 - - [22/Dec/2013:19:54:44 -0500] "GET /favicon.ico HTTP/1.1" 404 268
::1 - - [22/Dec/2013:19:54:44 -0500] "GET /favicon.ico HTTP/1.1" 404 268
::1 - - [22/Dec/2013:19:54:48 -0500] "GET /icinga-web HTTP/1.1" 404 267
::1 - - [22/Dec/2013:19:55:34 -0500] "OPTIONS * HTTP/1.0" 200 -
::1 - - [22/Dec/2013:19:55:37 -0500] "GET /icinga-web HTTP/1.1" 302 271
::1 - - [22/Dec/2013:19:55:37 -0500] "GET /icinga-web/ HTTP/1.1" 403 272
::1 - - [22/Dec/2013:19:55:42 -0500] "GET /icinga HTTP/1.1" 404 263

Comment 6 Matthew Thode ( prometheanfire ) archtester

2013-12-23 02:50:14 UTC

I removed the icinga-web.conf file. in favor of the 99_icinga-web.conf file (for the ifdef).  icinga-web is not the best maintained upstream, and I am using their conf file, so I'd ask them :D

Comment 7 Matthew Thode ( prometheanfire ) archtester

2014-02-17 06:31:34 UTC

closing upstream :D