Mailing List webobjects-dev@wocommunity.org Message #211
From: Jesse Tayler <webobjects-dev@wocommunity.org>
Subject: Re: [WO-DEV] Deployment issue on Catalina "You don't have permission to access this resource"
Date: Thu, 17 Jun 2021 11:07:46 -0400
To: WebObjects & WOnder Development <webobjects-dev@wocommunity.org>
Well, gosh, it just has to be apache and the OS — run down the list of suspects

"client denied by server configuration" is reported so that’s basically the OS saying you can’t read — I think?

I can’t read your rules, but since apache doesn’t seem to barf did you check user and OS level stuff carefully?

- the user that is running apache?
- the actual folder and parent folder settings?
- read those folders as that user from the command line?

Other random tests regarding OS level file permissions?

I’m no expert here, but I’m pretty sure those files gotta be 755 and it seems like the apache log is reporting a filesystem level permission error…?




On Jun 17, 2021, at 10:59 AM, Markus Ruggiero (rucotec) <webobjects-dev@wocommunity.org> wrote:

This is a new setup. Up to now I have had a dedicated deployment machine that works. As this is for a customer I do not want to touch it.

We have a weird problem that only shows when more than one instance of the same app is running. To be able to debug and analyze this I thought I’d configure my dev machine so that I can deploy to it easily without disturbing anything productive.

Yes, of course mod_webobjects is loaded. This is the full wo_apache.config:

LoadModule WebObjects_module /Users/Shared/Developer/Libraries/Wonder/ApacheWOAdaptor/Apache2.4/macOS/mod_WebObjects.so
WebObjectsAlias /apps/WebObjects
WebObjectsConfig http://woapps:1085 10

all the other nice stuff in there is commented and not active.

If on a command line I type
apachectl -F

I get a whole list of known directives and there are many WO related ons. Where else would Apache get those if not through mod_webobjects? This indicates that the module is properly loaded.


On 17 Jun 2021, at 16:44, Jesse Tayler <webobjects-dev@wocommunity.org> wrote:

Sounds like apache, are you sure things like mod_webobjects are loaded and those base things?

I can’t read apache rules…sorry! They are all just random characters to me…I guess the questions is what’s changed or is this a new setup giving you a hard time?

On Jun 17, 2021, at 10:40 AM, Markus Ruggiero (rucotec) <webobjects-dev@wocommunity.org> wrote:

Probably missing something so basic that I simply do not see it. Must be too hot outside (33 Celsius) and no aircon in the office (31 Celsius). 
Hope someone can point me in the right direction.

Deployment setup on my dev machine (MBpro, macOS Catalina, JRE 15). Apache installed via homebrew (Apache/2.4.46 (Unix)), Apple's Apache not in use

Apache configured with various virtual hosts, resolved through /etc/hosts. This all works, Apache serves static resources from these hosts.

JavaMonitor runs, wotaskd runs, Apache loads WOAdaptor by including wo_apache.conf
apachectl -F knows about WOAdaptor, so I assume it is properly loaded

wo_apache.conf has this line:
WebObjectsAlias   /apps/WebObjects 

The Apache config file http.conf has this line
# ScriptAliasMatch ^/cgi-bin/((?!(?i:webobjects)).*$) "/usr/local/var/www/CGI-Executables/$1"
ScriptAliasMatch ^/apps/((?!(?i:webobjects)).*$) "/usr/local/var/www/CGI-Executables/$1"

(tried both variants, with cgi-bin and the one with apps)

In WOMonitor this is the URL to the adaptor:
(woapps being one of my virtual hosts)

When I try to access an installed app the browser reports an error
"You don't have permission to access this resource”

and Apache puts a message into the error log file:
[Thu Jun 17 13:43:57.329921 2021] [authz_core:error] [pid 42093] [client 127.0.0.1:64420] AH01630: client denied by server configuration: /apps

/apps is not a directory but the first part of the WO URL and thus should go to the WOAdaptor. Has the ScriptAliasMatch (see above) anything to do with this?

Thanks for any help
---markus---


Markus Ruggiero

rucotec GmbH                        web https://rucotec.ch
Steinenvorstadt 79                email markus.ruggiero@rucotec.ch
4051 Basel / Switzerland         mobile +41 79 508 4701













Markus Ruggiero

rucotec GmbH                        web https://rucotec.ch
Steinenvorstadt 79                email markus.ruggiero@rucotec.ch
4051 Basel / Switzerland         mobile +41 79 508 4701









Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster