X-CGP-ClamAV-Result: CLEAN X-VirusScanner: Niversoft's CGPClamav Helper v1.22.2a (ClamAV engine v0.102.2) X-Junk-Score: 0 [] X-KAS-Score: 0 [] From: "Markus Ruggiero (rucotec)" Received: from miniserver.rucotec.ch ([213.189.151.242] verified) by post.selbstdenker.com (CommuniGate Pro SMTP 6.3.3) with ESMTPS id 26037326 for webobjects-dev@wocommunity.org; Thu, 17 Jun 2021 16:59:49 +0200 Received-SPF: none receiver=post.selbstdenker.com; client-ip=213.189.151.242; envelope-from=markus.ruggiero@rucotec.ch Received: from localhost (localhost [127.0.0.1]) by miniserver.rucotec.ch (Postfix) with ESMTP id D11DE2ACC4CA for ; Thu, 17 Jun 2021 16:59:29 +0200 (CEST) Received: from miniserver.rucotec.ch ([127.0.0.1]) by localhost (miniserver.rucotec.ch [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3kt8OTLwp7ki for ; Thu, 17 Jun 2021 16:59:27 +0200 (CEST) Received: from [192.168.56.49] (unknown [192.168.56.49]) by miniserver.rucotec.ch (Postfix) with ESMTPSA id C26442ACC4B0 for ; Thu, 17 Jun 2021 16:59:27 +0200 (CEST) Content-Type: multipart/signed; boundary="Apple-Mail=_A5C8F50C-3148-46BD-99DC-3DB665B23C9F"; protocol="application/pkcs7-signature"; micalg=sha-256 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.7\)) Subject: Re: [WO-DEV] Deployment issue on Catalina "You don't have permission to access this resource" Date: Thu, 17 Jun 2021 16:59:27 +0200 References: To: WebObjects & WOnder Development In-Reply-To: Message-Id: <1E71B28B-2168-4630-A5E6-FF301A658CCD@rucotec.ch> X-Mailer: Apple Mail (2.3608.120.23.2.7) --Apple-Mail=_A5C8F50C-3148-46BD-99DC-3DB665B23C9F Content-Type: multipart/alternative; boundary="Apple-Mail=_F61C0506-C057-4BCE-A74D-0878D0B486F9" --Apple-Mail=_F61C0506-C057-4BCE-A74D-0878D0B486F9 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 This is a new setup. Up to now I have had a dedicated deployment machine = that works. As this is for a customer I do not want to touch it. We have a weird problem that only shows when more than one instance of = the same app is running. To be able to debug and analyze this I thought = I=E2=80=99d configure my dev machine so that I can deploy to it easily = without disturbing anything productive. Yes, of course mod_webobjects is loaded. This is the full = wo_apache.config: LoadModule WebObjects_module = /Users/Shared/Developer/Libraries/Wonder/ApacheWOAdaptor/Apache2.4/macOS/m= od_WebObjects.so WebObjectsAlias /apps/WebObjects WebObjectsConfig http://woapps:1085 10 all the other nice stuff in there is commented and not active. If on a command line I type apachectl -F I get a whole list of known directives and there are many WO related = ons. Where else would Apache get those if not through mod_webobjects? = This indicates that the module is properly loaded. > On 17 Jun 2021, at 16:44, Jesse Tayler > wrote: >=20 > Sounds like apache, are you sure things like mod_webobjects are loaded = and those base things? >=20 > I can=E2=80=99t read apache rules=E2=80=A6sorry! They are all just = random characters to me=E2=80=A6I guess the questions is what=E2=80=99s = changed or is this a new setup giving you a hard time? >=20 >> On Jun 17, 2021, at 10:40 AM, Markus Ruggiero (rucotec) = > = wrote: >>=20 >> Probably missing something so basic that I simply do not see it. Must = be too hot outside (33 Celsius) and no aircon in the office (31 = Celsius).=20 >> Hope someone can point me in the right direction. >>=20 >> Deployment setup on my dev machine (MBpro, macOS Catalina, JRE 15). = Apache installed via homebrew (Apache/2.4.46 (Unix)), Apple's Apache not = in use >>=20 >> Apache configured with various virtual hosts, resolved through = /etc/hosts. This all works, Apache serves static resources from these = hosts. >>=20 >> JavaMonitor runs, wotaskd runs, Apache loads WOAdaptor by including = wo_apache.conf >> apachectl -F knows about WOAdaptor, so I assume it is properly loaded >>=20 >> wo_apache.conf has this line: >> WebObjectsAlias /apps/WebObjects=20 >>=20 >> The Apache config file http.conf has this line >> # ScriptAliasMatch ^/cgi-bin/((?!(?i:webobjects)).*$) = "/usr/local/var/www/CGI-Executables/$1" >> ScriptAliasMatch ^/apps/((?!(?i:webobjects)).*$) = "/usr/local/var/www/CGI-Executables/$1" >>=20 >> (tried both variants, with cgi-bin and the one with apps) >>=20 >> In WOMonitor this is the URL to the adaptor: >> http://woapps/apps/WebObjects >> (woapps being one of my virtual hosts) >>=20 >> When I try to access an installed app the browser reports an error >> "You don't have permission to access this resource=E2=80=9D >>=20 >> and Apache puts a message into the error log file: >> [Thu Jun 17 13:43:57.329921 2021] [authz_core:error] [pid 42093] = [client 127.0.0.1:64420] AH01630: client denied by server configuration: = /apps >>=20 >> /apps is not a directory but the first part of the WO URL and thus = should go to the WOAdaptor. Has the ScriptAliasMatch (see above) = anything to do with this? >>=20 >> Thanks for any help >> ---markus--- >>=20 >>=20 >> Markus Ruggiero >>=20 >> rucotec GmbH web https://rucotec.ch = >> Steinenvorstadt 79 email markus.ruggiero@rucotec.ch = >> 4051 Basel / Switzerland mobile +41 79 508 4701 >>=20 >>=20 >>=20 >>=20 >>=20 >>=20 >>=20 >>=20 >=20 Markus Ruggiero rucotec GmbH web https://rucotec.ch Steinenvorstadt 79 email markus.ruggiero@rucotec.ch 4051 Basel / Switzerland mobile +41 79 508 4701 --Apple-Mail=_F61C0506-C057-4BCE-A74D-0878D0B486F9 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
This is a new setup. = Up to now I have had a dedicated deployment machine that works. As this = is for a customer I do not want to touch it.

We have a weird problem that only shows = when more than one instance of the same app is running. To be able to = debug and analyze this I thought I=E2=80=99d configure my dev machine so = that I can deploy to it easily without disturbing anything = productive.

Yes,= of course mod_webobjects is loaded. This is the full = wo_apache.config:

LoadModule WebObjects_module = /Users/Shared/Developer/Libraries/Wonder/ApacheWOAdaptor/Apache2.4/macOS/m= od_WebObjects.so
WebObjectsAlias = /apps/WebObjects
WebObjectsConfig http://woapps:1085 10

all the other nice stuff in there is = commented and not active.

If on a command line I type
apachectl = -F

I get a = whole list of known directives and there are many WO related ons. Where = else would Apache get those if not through mod_webobjects? This indicates that the module is properly = loaded.


On 17 Jun 2021, at 16:44, Jesse Tayler <webobjects-dev@wocommunity.org> wrote:

Sounds like apache, = are you sure things like mod_webobjects are loaded and those base = things?

I can=E2=80=99= t read apache rules=E2=80=A6sorry! They are all just random characters = to me=E2=80=A6I guess the questions is what=E2=80=99s changed or is this = a new setup giving you a hard time?

On Jun = 17, 2021, at 10:40 AM, Markus Ruggiero (rucotec) <webobjects-dev@wocommunity.org> wrote:

Probably missing = something so basic that I simply do not see it. Must be too hot outside = (33 Celsius) and no aircon in the office (31 Celsius). 
Hope someone can point me in the right direction.

Deployment setup on my = dev machine (MBpro, macOS Catalina, JRE 15). Apache installed via = homebrew (Apache/2.4.46 (Unix)), Apple's Apache not in use

Apache configured with = various virtual hosts, resolved through /etc/hosts. This all works, = Apache serves static resources from these hosts.

JavaMonitor runs, wotaskd runs, Apache = loads WOAdaptor by including wo_apache.conf
apachectl -F knows about = WOAdaptor, so I assume it is properly loaded

wo_apache.conf has this = line:
WebObjectsAlias   = /apps/WebObjects 

The Apache config file http.conf has this line
# ScriptAliasMatch = ^/cgi-bin/((?!(?i:webobjects)).*$) = "/usr/local/var/www/CGI-Executables/$1"
ScriptAliasMatch ^/apps/((?!(?i:webobjects)).*$) = "/usr/local/var/www/CGI-Executables/$1"

(tried both variants, with cgi-bin and = the one with apps)

In WOMonitor this is the URL to the adaptor:
http://woapps/apps/WebObjects
(woapps = being one of my virtual hosts)

When I try to = access an installed app the browser reports an error
"You don't have permission to access this = resource=E2=80=9D

and Apache puts a message into the error log file:
[Thu Jun 17 13:43:57.329921 2021] = [authz_core:error] [pid 42093] [client 127.0.0.1:64420] AH01630: client = denied by server configuration: /apps

/apps is not a directory but the first = part of the WO URL and thus should go to the WOAdaptor. Has the = ScriptAliasMatch (see above) anything to do with this?

Thanks for any = help
---markus---


Markus = Ruggiero

rucotec GmbH              =           web https://rucotec.ch
Steinenvorstadt 79          =       email markus.ruggiero@rucotec.ch
4051 Basel / = Switzerland         mobile +41 79 508 4701













Markus = Ruggiero


rucotec GmbH              =           web https://rucotec.ch
Steinenvorstadt 79          =       email markus.ruggiero@rucotec.ch
4051 Basel / = Switzerland         mobile +41 79 508 4701








= --Apple-Mail=_F61C0506-C057-4BCE-A74D-0878D0B486F9-- --Apple-Mail=_A5C8F50C-3148-46BD-99DC-3DB665B23C9F Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCCzkw ggUhMIIECaADAgECAhBDXz2PBS4rcSTMoUCPbeA+MA0GCSqGSIb3DQEBCwUAMIGWMQswCQYDVQQG EwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYD VQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50 aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBMB4XDTE5MDUyMjAwMDAwMFoXDTIyMDUyMTIzNTk1 OVowKzEpMCcGCSqGSIb3DQEJARYabWFya3VzLnJ1Z2dpZXJvQHJ1Y290ZWMuY2gwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAEK8S00IWrMmIpBkw5CcIS9RfaNGWyJOxskmtuYoHWE4 +QYfOO5tlWt4O5F6bTYsRWp1PpLirrdLhQoYIFp0P5Mi0nsBjNVP0zR0jNpDZreNcLcP7wmuIkUY C0fzxFgnRieFFgaXFm5yf46rqAJMVry/uR/KqwvY1d2F2gOb4DmntPp7TJtDsVyWQDtB82Uep+EO 9j71phQuMUb5TyA4aOdSb6UfCev1RgEw8vXrTdf+1rLzRZvIR1syfsqcLVmIO9WSl9mTH7IlZQhx SmTLqSTvTLssRGprVK8dhJl0nDvFuKknUGNxwCwON1ojJdZPgUJi1K+VvkCqDlI61czNAgMBAAGj ggHTMIIBzzAfBgNVHSMEGDAWgBQJwPL8C9qU21/+K9+omULPyeCtADAdBgNVHQ4EFgQUFRQz2DQf fM2xz9tI/Gy05p6XXc0wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI KwYBBQUHAwQGCCsGAQUFBwMCMEAGA1UdIAQ5MDcwNQYMKwYBBAGyMQECAQEBMCUwIwYIKwYBBQUH AgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwu c2VjdGlnby5jb20vU2VjdGlnb1JTQUNsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxD QS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdvLmNv bS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVudGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNydDAjBggr BgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wJQYDVR0RBB4wHIEabWFya3VzLnJ1Z2dp ZXJvQHJ1Y290ZWMuY2gwDQYJKoZIhvcNAQELBQADggEBACeso6Iombd/K2MXqk+u5cFNAi3kNRv5 t1WMA2YodqQxz/i/H9OxagG8Ukk5IcHgrikpy0dlOgJ9nOGEWJYrzZbLWZCMd7I8NQpT28vnkgKM 51tzAARg7mHu+SPKwvnDfYB8CFNSQ+Wlkq8wJHL9ALuTeGCRdnRmNtit8o/sRV25KoH6+0U2k08U TO5J+bzVendvcfygdf3bPp3+imRIlXJihwb2fg6OOMqVCnUFHKrdJULZ+SWSWNclriu5GbM1pKql d5dIrApf9M9b9XbY89XgHdFHA5bx7taL1Ie1msC23llmUVSYTHjNOqNrprgfKXvao1taAQvpDhzx BQXzO6YwggYQMIID+KADAgECAhBNlCwQ1DvglAnFgS06KwZPMA0GCSqGSIb3DQEBDAUAMIGIMQsw CQYDVQQGEwJVUzETMBEGA1UECBMKTmV3IEplcnNleTEUMBIGA1UEBxMLSmVyc2V5IENpdHkxHjAc BgNVBAoTFVRoZSBVU0VSVFJVU1QgTmV0d29yazEuMCwGA1UEAxMlVVNFUlRydXN0IFJTQSBDZXJ0 aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0xODExMDIwMDAwMDBaFw0zMDEyMzEyMzU5NTlaMIGWMQsw CQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3Jk MRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBB dXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAyjztlApB/975Rrno1jvm2pK/KxBOqhq8gr2+JhwpKirSzZxQgT9tlC7zl6hn1fXj So5MqXUfItMltrMaXqcESJuK8dtK56NCSrq4iDKaKq9NxOXFmqXX2zN8HHGjQ2b2Xv0v1L5Nk1MQ PKA19xeWQcpGEGFUUd0kN+oHox+L9aV1rjfNiCj3bJk6kJaOPabPi2503nn/ITX5e8WfPnGw4VuZ 79Khj1YBrf24k5Ee1sLTHsLtpiK9OjG4iQRBdq6Z/TlVx/hGAez5h36bBJMxqdHLpdwIUkTqT8se 3ed0PewDch/8kHPo5fZl5u1B0ecpq/sDN/5sCG52Ds+QU5O5EwIDAQABo4IBZDCCAWAwHwYDVR0j BBgwFoAUU3m/WqorSs9UgOHYm8Cd8rIDZsswHQYDVR0OBBYEFAnA8vwL2pTbX/4r36iZQs/J4K0A MA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdJQQWMBQGCCsGAQUFBwMC BggrBgEFBQcDBDARBgNVHSAECjAIMAYGBFUdIAAwUAYDVR0fBEkwRzBFoEOgQYY/aHR0cDovL2Ny bC51c2VydHJ1c3QuY29tL1VTRVJUcnVzdFJTQUNlcnRpZmljYXRpb25BdXRob3JpdHkuY3JsMHYG CCsGAQUFBwEBBGowaDA/BggrBgEFBQcwAoYzaHR0cDovL2NydC51c2VydHJ1c3QuY29tL1VTRVJU cnVzdFJTQUFkZFRydXN0Q0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3Qu Y29tMA0GCSqGSIb3DQEBDAUAA4ICAQBBRHUAqznCFfXejpVtMnFojADdF9d6HBA4kMjjsb0XMZHz tuOCtKF+xswhh2GqkW5JQrM8zVlU+A2VP72Ky2nlRA1GwmIPgou74TZ/XTarHG8zdMSgaDrkVYzz 1g3nIVO9IHk96VwsacIvBF8JfqIs+8aWH2PfSUrNxP6Ys7U0sZYx4rXD6+cqFq/ZW5BUfClN/rhk 2ddQXyn7kkmka2RQb9d90nmNHdgKrwfQ49mQ2hWQNDkJJIXwKjYA6VUR/fZUFeCUisdDe/0ABLTI +jheXUV1eoYV7lNwNBKpeHdNuO6Aacb533JlfeUHxvBz9OfYWUiXu09sMAviM11Q0DuMZ5760CdO 2VnpsXP4KxaYIhvqPqUMWqRdWyn7crItNkZeroXaecG03i3mM7dkiPaCkgocBg0EBYsbZDZ8bsG3 a08LwEsL1Ygz3SBsyECa0waq4hOf/Z85F2w2ZpXfP+w8q4ifwO90SGZZV+HR/Jh6rEaVPDRF/CEG VqR1hiuQOZ1YL5ezMTX0ZSLwrymUE0pwi/KDaiYB15uswgeIAcA6JzPFf9pLkAFFWs1QNyN++niF hsM47qodx/PL+5jR87myx5uYdBEQkkDc+lKB1Wct6ucXqm2EmsaQ0M95QjTmy+rDWjkDYdw3Ms6m SWE3Bn7i5ZgtwCLXgAIe5W8mybM2JzGCA8QwggPAAgEBMIGrMIGWMQswCQYDVQQGEwJHQjEbMBkG A1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0 aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBh bmQgU2VjdXJlIEVtYWlsIENBAhBDXz2PBS4rcSTMoUCPbeA+MA0GCWCGSAFlAwQCAQUAoIIB6TAY BgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTA2MTcxNDU5MjdaMC8G CSqGSIb3DQEJBDEiBCCTVkJhOHATVWzofqw3DjXpUmQGUfv4ik9Qb+35BHC8OjCBvAYJKwYBBAGC NxAEMYGuMIGrMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAw DgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3Rp Z28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhBDXz2PBS4r cSTMoUCPbeA+MIG+BgsqhkiG9w0BCRACCzGBrqCBqzCBljELMAkGA1UEBhMCR0IxGzAZBgNVBAgT EkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBM aW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNl Y3VyZSBFbWFpbCBDQQIQQ189jwUuK3EkzKFAj23gPjANBgkqhkiG9w0BAQEFAASCAQCn1zMkAJvb RUX+ilrTdsT8mnqlomc3wzKYKzK7QfRVxH+yzGxf+aZmayfBBE1GChlu/10C5a+DjKTxlPCxKjks cei3gTjvwBj0C7iDxhzo54UTMCLJDc3oWk3ncii/j2jI6ZC5q8uPx3b1NFqwUn/QD6nCm6ke2p9C JKVF06d5om9rxfoOHIoppGBJNhbd5qJC3Fmzp8jJFZXbHivY6SYGnjSbrgNUOgSd6oA2Uoc9/AiF wJpzQu4n/n1kI9yyTAdrwT009nsQFbsyudmkxJc9txFRjGoQJ/RTU9kRiEAn9vVHekcClfh1A2zz yPTn0vacR6fq0DG6fQnkrwIeuH7EAAAAAAAA --Apple-Mail=_A5C8F50C-3148-46BD-99DC-3DB665B23C9F--