RE: Apache Migration from HTTP Server Instance

The one thing that I found out, and I really had to dig around to find,
was the user that the Apache server is running under (QTMHHTTP)is NOT
the user you need to give authority to.  The user, QTMHHTTP, you would
think needs access/authority, but QTMHHTP1 is the user who actually
accesses files and does the dirty-work.  Thus, give QTMHHTP1 the
authority it needs and your issues should cease.

regards

Jeffrey Flaker
Senior Programmer/Analyst
Linens 'N Things
6 Brighton Rd
Clifton, NJ 07015
Phone: 973-249-4384
Fax: 973-249-4901
<http://www.lnt.com/> 
"A good player makes himself look good; a great player makes the team
look good."
Author unknown



-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
On Behalf Of edolon@xxxxxxxxxx
Sent: Tuesday, November 30, 2004 8:48 PM
To: web400@xxxxxxxxxxxx
Cc: lloyd_watkinson@xxxxxxxxxxxxxx
Subject: [WEB400] Apache Migration from HTTP Server Instance

I am getting frustrated with migrating our original HTTP instances into
APACHE.  I am already using Server UserID with a very HIGH authorisation
but the Errorlog still say something like this.........

The browser says
HTTP403: You are not authorized to view this page.You might not have
permission to view this directory or page using the credentials you
supplied. 

And inspecting the log it says

[Tue Nov 30 15:41:43 2004] [error] [client 10.44.211.108]
(3101) A non-recoverable I/O error occurred.: ZSRV_MSG0019: Permissions
on file /qsys.lib/testcgi.lib/ERCMMAIN.pgm deny server access 

Below are the original & migrated configurations.

Any HELP is appreciated



Configuration: ERPGSVR2 

===================================================
# * * * * * * * * * * * * * * * * * * * * * * * * * * *
#               IBM HTTP Server for AS/400
# * * * * * * * * * * * * * * * * * * * * * * * * * * * # HostName
10.44.3.43 UserID PGUSER Port 1025 enable get enable post enable head
Map /claims/erpgdir/* /erpgdir/*
MAP /claims/cgibin/*    /qsys.lib/testcgi.lib/*.pgm
MAP /claims/cgibin6/*    /qsys.lib/junitg.lib/*.pgm
Map /claims/cgibin/* /QSYS.LIB/SUNCGI.LIB/*.PGM exec
/qsys.lib/testcgi.lib/* Exec /QSYS.LIB/SUNCGI.LIB/* Exec
/QSYS.LIB/JUNITG.LIB/* Exec /cgidevpgm/* /QSYS.LIB/SUNCGI.LIB/* Pass
/QSYS.LIB/SUNCGI.LIB/* AccessLog /HTTPLOGS/httpqualogs 2000 LogFormat
Common CgiErrorLog /cgierrlogs/cgiquaerrlogs 2000 ErrorLog
/errorlogs/quaerrorlogs 2000 *DFT *DFT pass /erpgdir/* CacheExpiryCheck
ON CacheNoConnect Off CacheTimeMargin 0 CacheLastModifiedFactor 0.14
CacheLocalMaxBytes 2 M CacheLocalMaxFiles 200 LiveLocalCache On
BindSpecific Off DNS-Lookup Off RuleCaseSense Off Imbeds Off SSIOnly
LogTime localtime AccessLogArchive None AccessLogExpire 0
AccessLogSizeLimit 0 ErrorLogArchive None ErrorLogExpire 0
ErrorLogSizeLimit 0 MaxActiveThreads 100
===================================================



Migrated and modified apache config
  1    ServerUserID LIBRARIAN 
  2    <Location /> 
  3        <LimitExcept GET HEAD OPTIONS POST TRACE> 
  4             Order Allow,Deny 
  5             Deny From all 
  6        </LimitExcept> 
  7    </Location> 
  8    LogFormat "%h %l %u %t \"%r\" %>s %b" common 
  9    CustomLog /HTTPLOGS/httpqualogs common env=!LogExclusion 
  10    Options +ExecCGI -SymLinksIfOwnerMatch -Includes -IncludesNoExec

-MultiViews 
  11    DefaultType www/unknown 
  12    ServerName 10.44.3.43 
  13    Listen *:1025 
  14    LogLength 2048000 
  15    ErrorLog /qsys.lib/qusrsys.lib/HTTPERRJUN.file 
  16    MaxKeepAliveRequests 5 
  17    TimeOut 120 
  18    KeepAliveTimeout 4 
  19    ThreadsPerChild 100 
  20    DocumentRoot / 
  21    DirectoryIndex welcome.html index.html 
  22    CGIConvMode %%MIXED/MIXED%% 
  23    ScriptLog /cgierrlogs/cgiquaerrlogs 
  24    ScriptLogLength 2048000 
  25    IndexOptions -DescriptionWidth -FancyIndexing -FoldersFirst 
-IconHeight -IconsAreLinks -IconWidth -IgnoreCase -IgnoreClient
-NameWidth -NameMinWidth -ScanHTMLTitles -SelectiveDirAccess
-ShowSmallFileBytes -ShowOwner -SuppressColumnSorting
-SuppressDescription -SuppressHTMLPreamble -SuppressIcon
-SuppressLastModified -SuppressRules -SuppressSize -TrackModified
-VersionSort 
  26    HeaderName README 
  27    <Directory /erpgdir/*> 
  28         Allow From all 
  29    </Directory> 
  30    <Directory /QSYS.LIB/JUNITG.LIB/> 
  31         Options +ExecCGI 
  32         Allow From all 
  33    </Directory> 
  34    <Directory /QSYS.LIB/SUNCGI.LIB/> 
  35         Options +ExecCGI 
  36         Allow From all 
  37    </Directory> 
  38    <Directory /qsys.lib/testcgi.lib/> 
  39         Options +ExecCGI 
  40         Allow From all 
  41    </Directory> 
  42    <Directory /> 
  43         Order Allow,Deny 
  44         allow from all 
  45         UserID LIBRARIAN 
  46    </Directory> 
  47    AliasMatch /claims/erpgdir/(.*) /erpgdir/$1 
  48    AliasMatch /claims/cgibin/(.*) /qsys.lib/testcgi.lib/$1.pgm 
  49    AliasMatch /claims/cgibin6/(.*) /qsys.lib/junitg.lib/$1.pgm 
  50    AliasMatch /claims/cgibin/(.*) /QSYS.LIB/SUNCGI.LIB/$1.PGM 
  51    AliasMatch /qsys\.lib/testcgi\.lib/(.*) /qsys.lib/testcgi.lib/$1

  52    AliasMatch /QSYS\.LIB/SUNCGI\.LIB/(.*) /QSYS.LIB/SUNCGI.LIB/$1 
  53    AliasMatch /QSYS\.LIB/JUNITG\.LIB/(.*) /QSYS.LIB/JUNITG.LIB/$1 
  54    AliasMatch /cgidevpgm/(.*) /QSYS.LIB/SUNCGI.LIB/$1 
  55    ScriptAlias /QSYS\.LIB/SUNCGI\.LIB/(.*) /QSYS.LIB/SUNCGI.LIB/$1 
  56    AliasMatch /erpgdir/(.*) /erpgdir/$1 

 



 
**********************************************************************
CAUTION - This message is intended for the addressee named above. It may
contain privileged or confidential information. If you are not the
intended recipient of this message you must not use, copy, distribute or
disclose it to anyone.
**********************************************************************

_______________________________________________
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list To
post a message email: WEB400@xxxxxxxxxxxx To subscribe, unsubscribe, or
change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/web400.