X-CGP-ClamAV-Result: CLEAN X-VirusScanner: Niversoft's CGPClamav Helper v1.22.2a (ClamAV engine v0.102.2) X-Junk-Score: 0 [] X-KAS-Score: 0 [] From: "Jesse Tayler" Received: from mail-qt1-f169.google.com ([209.85.160.169] verified) by selbstdenker.ag (CommuniGate Pro SMTP 6.3.3) with ESMTPS id 26037356 for webobjects-dev@wocommunity.org; Thu, 17 Jun 2021 17:08:08 +0200 Received-SPF: none receiver=post.selbstdenker.com; client-ip=209.85.160.169; envelope-from=jtayler@oeinc.com Received: by mail-qt1-f169.google.com with SMTP id o20so4945185qtr.8 for ; Thu, 17 Jun 2021 08:08:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oeinc-com.20150623.gappssmtp.com; s=20150623; h=from:mime-version:subject:date:references:to:in-reply-to:message-id; bh=mTshgcQu+f54DQVwbTSxsCqS+mFWxFa71vIOpOLqwuQ=; b=Sl7l+8Rbrb/2ZDcRGEJPoYfcptKDl9gH6qeeyGvClzkDg4ZM+FRDBsFcSsxVBifCBc 20goPpLv4w0xSusyohjh07cBTOMGQ8BM5w2ouuvxsNsgBbA2aKmqXhjY6RhVaYfbM1L1 dBUijuTZVuVXYVBDgj4ghct3jrUZAr5GS91pmOZIVin0cTAb8oXiPcgR9aTFlPHTaXYa psHjPShEs5MsmFVyMiyP1QTjV9IuHdREy7qPPIrMhSpaw6E7KYoZhwXijD/CPNBeau2u gpPS1bxRKfDEeE8GhuFY/r+tv46O1qtyVgLzj8vcacja/VC2oAMPMqpPhBYYwlSfjMIy 3dwA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:date:references:to :in-reply-to:message-id; bh=mTshgcQu+f54DQVwbTSxsCqS+mFWxFa71vIOpOLqwuQ=; b=Nc9Ycuv0XZvhtmdftkcNkigdmI4W/7nowibUlJRDWrB1vX7lNYzYhd2KVw7KWUED3F cfv0JGdGSYvc9IcrJt3o7Jz2pfazHrJTidIDTcC2P+J/ZueBhzCawQ6t6yjXRqdTSPgq kc/Ml678MpcUNHtn0fRO9+mJOZJYwwwFWheBd94ADmzrNOyEbwFD4B152YesIhhlaI+6 OU0o/vSE2V52ed6nz4uE8ZqW7NWKi1IWAwOvY0ZgD4QnFrQLTCTnG1bUMlfvN9KK8BYl T7ivq03nltn0aefwVyXTBTsBWwbkf4sSwwsBOYUxVeN7gR/U1fEsHZ1QLgI6yCKcB6mV L79Q== X-Gm-Message-State: AOAM533wxA+LIKxEeEpcSx5sSI4PlLIvng59y5frfx/GKdeK9R5/cmwq 01WGdQuYneCbEO1MaJWdu40ME/zCkPNykMcI X-Google-Smtp-Source: ABdhPJyvtC0nyLX7zIrHN36D5TZmTT7RvGDKHO3nrFdnTaiUfPrrpxf3tpRwQe13Gz0/Ht42R06Q4g== X-Received: by 2002:ac8:5f88:: with SMTP id j8mr5582511qta.9.1623942468393; Thu, 17 Jun 2021 08:07:48 -0700 (PDT) Return-Path: Received: from [192.168.1.16] ([69.169.5.176]) by smtp.gmail.com with ESMTPSA id t8sm3420765qtp.7.2021.06.17.08.07.47 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 17 Jun 2021 08:07:47 -0700 (PDT) Content-Type: multipart/alternative; boundary="Apple-Mail=_38968593-FB27-42A1-8955-8F4805BF7ABB" Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.60.0.2.2\)) Subject: Re: [WO-DEV] Deployment issue on Catalina "You don't have permission to access this resource" Date: Thu, 17 Jun 2021 11:07:46 -0400 References: To: WebObjects & WOnder Development In-Reply-To: Message-Id: X-Mailer: Apple Mail (2.3654.60.0.2.2) --Apple-Mail=_38968593-FB27-42A1-8955-8F4805BF7ABB Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Well, gosh, it just has to be apache and the OS =E2=80=94 run down the = list of suspects "client denied by server configuration" is reported so that=E2=80=99s = basically the OS saying you can=E2=80=99t read =E2=80=94 I think? I can=E2=80=99t read your rules, but since apache doesn=E2=80=99t seem = to barf did you check user and OS level stuff carefully? - the user that is running apache? - the actual folder and parent folder settings? - read those folders as that user from the command line? Other random tests regarding OS level file permissions? I=E2=80=99m no expert here, but I=E2=80=99m pretty sure those files = gotta be 755 and it seems like the apache log is reporting a filesystem = level permission error=E2=80=A6? > On Jun 17, 2021, at 10:59 AM, Markus Ruggiero (rucotec) = wrote: >=20 > This is a new setup. Up to now I have had a dedicated deployment = machine that works. As this is for a customer I do not want to touch it. >=20 > We have a weird problem that only shows when more than one instance of = the same app is running. To be able to debug and analyze this I thought = I=E2=80=99d configure my dev machine so that I can deploy to it easily = without disturbing anything productive. >=20 > Yes, of course mod_webobjects is loaded. This is the full = wo_apache.config: >=20 > LoadModule WebObjects_module = /Users/Shared/Developer/Libraries/Wonder/ApacheWOAdaptor/Apache2.4/macOS/m= od_WebObjects.so > WebObjectsAlias /apps/WebObjects > WebObjectsConfig http://woapps:1085 10 >=20 > all the other nice stuff in there is commented and not active. >=20 > If on a command line I type > apachectl -F >=20 > I get a whole list of known directives and there are many WO related = ons. Where else would Apache get those if not through mod_webobjects? = This indicates that the module is properly loaded. >=20 >=20 >> On 17 Jun 2021, at 16:44, Jesse Tayler = > = wrote: >>=20 >> Sounds like apache, are you sure things like mod_webobjects are = loaded and those base things? >>=20 >> I can=E2=80=99t read apache rules=E2=80=A6sorry! They are all just = random characters to me=E2=80=A6I guess the questions is what=E2=80=99s = changed or is this a new setup giving you a hard time? >>=20 >>> On Jun 17, 2021, at 10:40 AM, Markus Ruggiero (rucotec) = > = wrote: >>>=20 >>> Probably missing something so basic that I simply do not see it. = Must be too hot outside (33 Celsius) and no aircon in the office (31 = Celsius).=20 >>> Hope someone can point me in the right direction. >>>=20 >>> Deployment setup on my dev machine (MBpro, macOS Catalina, JRE 15). = Apache installed via homebrew (Apache/2.4.46 (Unix)), Apple's Apache not = in use >>>=20 >>> Apache configured with various virtual hosts, resolved through = /etc/hosts. This all works, Apache serves static resources from these = hosts. >>>=20 >>> JavaMonitor runs, wotaskd runs, Apache loads WOAdaptor by including = wo_apache.conf >>> apachectl -F knows about WOAdaptor, so I assume it is properly = loaded >>>=20 >>> wo_apache.conf has this line: >>> WebObjectsAlias /apps/WebObjects=20 >>>=20 >>> The Apache config file http.conf has this line >>> # ScriptAliasMatch ^/cgi-bin/((?!(?i:webobjects)).*$) = "/usr/local/var/www/CGI-Executables/$1" >>> ScriptAliasMatch ^/apps/((?!(?i:webobjects)).*$) = "/usr/local/var/www/CGI-Executables/$1" >>>=20 >>> (tried both variants, with cgi-bin and the one with apps) >>>=20 >>> In WOMonitor this is the URL to the adaptor: >>> http://woapps/apps/WebObjects >>> (woapps being one of my virtual hosts) >>>=20 >>> When I try to access an installed app the browser reports an error >>> "You don't have permission to access this resource=E2=80=9D >>>=20 >>> and Apache puts a message into the error log file: >>> [Thu Jun 17 13:43:57.329921 2021] [authz_core:error] [pid 42093] = [client 127.0.0.1:64420] AH01630: client denied by server configuration: = /apps >>>=20 >>> /apps is not a directory but the first part of the WO URL and thus = should go to the WOAdaptor. Has the ScriptAliasMatch (see above) = anything to do with this? >>>=20 >>> Thanks for any help >>> ---markus--- >>>=20 >>>=20 >>> Markus Ruggiero >>>=20 >>> rucotec GmbH web https://rucotec.ch = >>> Steinenvorstadt 79 email markus.ruggiero@rucotec.ch = >>> 4051 Basel / Switzerland mobile +41 79 508 4701 >>>=20 >>>=20 >>>=20 >>>=20 >>>=20 >>>=20 >>>=20 >>>=20 >>=20 >=20 >=20 >=20 >=20 > Markus Ruggiero >=20 > rucotec GmbH web https://rucotec.ch = > Steinenvorstadt 79 email markus.ruggiero@rucotec.ch = > 4051 Basel / Switzerland mobile +41 79 508 4701 >=20 >=20 >=20 >=20 >=20 >=20 >=20 >=20 --Apple-Mail=_38968593-FB27-42A1-8955-8F4805BF7ABB Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Well,= gosh, it just has to be apache and the OS =E2=80=94 run down the list = of suspects

"client = denied by server configuration" is reported so that=E2=80=99s basically = the OS saying you can=E2=80=99t read =E2=80=94 I think?

I can=E2=80=99t read = your rules, but since apache doesn=E2=80=99t seem to barf did you check = user and OS level stuff carefully?

- the user that is running = apache?
- the actual folder and parent folder = settings?
- read those folders as that user from = the command line?

Other random tests regarding OS level file = permissions?

I=E2=80=99m no expert here, but I=E2=80=99m pretty sure those = files gotta be 755 and it seems like the apache log is reporting a = filesystem level permission error=E2=80=A6?




On Jun 17, 2021, at 10:59 AM, Markus Ruggiero (rucotec) = <webobjects-dev@wocommunity.org> wrote:

This is a new setup. = Up to now I have had a dedicated deployment machine that works. As this = is for a customer I do not want to touch it.

We have a weird problem that only shows = when more than one instance of the same app is running. To be able to = debug and analyze this I thought I=E2=80=99d configure my dev machine so = that I can deploy to it easily without disturbing anything = productive.

Yes,= of course mod_webobjects is loaded. This is the full = wo_apache.config:

LoadModule WebObjects_module = /Users/Shared/Developer/Libraries/Wonder/ApacheWOAdaptor/Apache2.4/macOS/m= od_WebObjects.so
WebObjectsAlias = /apps/WebObjects
WebObjectsConfig http://woapps:1085 10

all the other nice stuff in there is = commented and not active.

If on a command line I type
apachectl = -F

I get a = whole list of known directives and there are many WO related ons. Where = else would Apache get those if not through mod_webobjects? This = indicates that the module is properly loaded.


On 17 Jun 2021, at 16:44, Jesse = Tayler <webobjects-dev@wocommunity.org> wrote:

Sounds like apache, = are you sure things like mod_webobjects are loaded and those base = things?

I can=E2=80=99= t read apache rules=E2=80=A6sorry! They are all just random characters = to me=E2=80=A6I guess the questions is what=E2=80=99s changed or is this = a new setup giving you a hard time?

On Jun = 17, 2021, at 10:40 AM, Markus Ruggiero (rucotec) <webobjects-dev@wocommunity.org> wrote:

Probably missing = something so basic that I simply do not see it. Must be too hot outside = (33 Celsius) and no aircon in the office (31 Celsius). 
Hope someone can point me in the right direction.

Deployment setup on my = dev machine (MBpro, macOS Catalina, JRE 15). Apache installed via = homebrew (Apache/2.4.46 (Unix)), Apple's Apache not in use

Apache configured with = various virtual hosts, resolved through /etc/hosts. This all works, = Apache serves static resources from these hosts.

JavaMonitor runs, wotaskd runs, Apache = loads WOAdaptor by including wo_apache.conf
apachectl -F knows about = WOAdaptor, so I assume it is properly loaded

wo_apache.conf has this = line:
WebObjectsAlias   = /apps/WebObjects 

The Apache config file http.conf has this line
# ScriptAliasMatch = ^/cgi-bin/((?!(?i:webobjects)).*$) = "/usr/local/var/www/CGI-Executables/$1"
ScriptAliasMatch ^/apps/((?!(?i:webobjects)).*$) = "/usr/local/var/www/CGI-Executables/$1"

(tried both variants, with cgi-bin and = the one with apps)

In WOMonitor this is the URL to the adaptor:
http://woapps/apps/WebObjects
(woapps = being one of my virtual hosts)

When I try to = access an installed app the browser reports an error
"You don't have permission to access this = resource=E2=80=9D

and Apache puts a message into the error log file:
[Thu Jun 17 13:43:57.329921 2021] = [authz_core:error] [pid 42093] [client 127.0.0.1:64420] AH01630: client = denied by server configuration: /apps

/apps is not a directory but the first = part of the WO URL and thus should go to the WOAdaptor. Has the = ScriptAliasMatch (see above) anything to do with this?

Thanks for any = help
---markus---


Markus = Ruggiero

rucotec GmbH              =           web https://rucotec.ch
Steinenvorstadt 79          =       email markus.ruggiero@rucotec.ch
4051 Basel / = Switzerland         mobile +41 79 508 4701













Markus = Ruggiero

rucotec GmbH              =           web https://rucotec.ch
Steinenvorstadt 79          =       email markus.ruggiero@rucotec.ch
4051 Basel / = Switzerland         mobile +41 79 508 4701









= --Apple-Mail=_38968593-FB27-42A1-8955-8F4805BF7ABB--