Content
"client denied by server configuration" one one specific project
Added by Brad Smith over 9 years ago
Hello all,
Short Version:
I have one project that is failing with a `client denied by server configuration` error, whereas all other projects seem to work fine. For example, this URL works:
https://my_site:445/projects/nocc-courses/settings
…but this URL returns 403:
https://my_site:445/projects/sysops-courses/settings
Both projects are copies of the same other project. The exact error I’m seeing in Apache’s log is:
[Fri Jan 23 18:46:32.731766 2015] [access_compat:error] [pid 29889] [client my_IP:49206] AH01797: client denied by server configuration: proxy:http://127.0.0.1:6000/pro jects/sysops-courses/settings
I tried adding a `require all granted`, per suggestions like this one, but the error remains. And in any case, I’m completely stumped as to why this error would be specific to one project.
Further Details
As noted above, I don’t see how a server configuration error could cause a problem with a specific project, but then openproject’s logs show nothing when I try to access it, providing further evidence that openproject isn’t even getting the request, so it’s got to be somethings to do with the config. So…
I have my web server set up in a slightly kludgy way, where `my_site:443/openproject` proxies to another vhost that loads all the openproject-specific configs listening on :445, which proxies to the openproject app listening on `localhost:6000`, configured like this:
<VirtualHost *:445> ServerName my_site DocumentRoot /opt/openproject/public ProxyRequests off Include /etc/openproject/addons/apache2/includes/vhost/*.conf ProxyPass / http://127.0.0.1:6000/ retry=0 ProxyPassReverse / http://127.0.0.1:6000/ </VirtualHost> <Location /> Require all granted </Location>
Yeah, the 443->445 forward is ugly, but I needed a quick fix until I can verify that including all the openproject *.conf files in my main vhost won’t conflict with any of my settings.
Netstat shows that unicorn.rb is listening on port 6000 (as evidenced by the fact that other projects load fine).
If anyone has ideas or suggestions for further troubleshooting, I would greatly appreciate them! Thanks in advance!
Replies (1)
Turns out this is caused by one of the Apache access controls that OP sets up, which blocks access to any project that begins with “sys”. Disabling that access control restores access to the project. Filed a bug with more details here:
https://community.openproject.org/work_packages/18338