http 403 error only with Chrome / Chromium

[bytesoup]

Hi Folks,

I got cacti up and running on Linux (RH/Fedora derivative) and using Firefox and Midori I can login and use cacti perfectly ok. When I use Chrome or Chromium, I get a http 403 forbidden error.

The chrome browser is: Version 26.0.1410.63
The chromium browser is: Version 25.0.1364.160 Ubuntu 10.04 (25.0.1364.160-0ubuntu0.10.04.1)

The server side:

Code: Select all

$ uname -a
Linux dougal 2.6.32-131.0.15.el6.x86_64 #1 SMP Fri May 20 15:04:03 EDT 2011 x86_64 x86_64 x86_64 GNU/Linux

$ php -v
PHP 5.3.3 (cli) (built: Feb 22 2013 13:05:52) 
Copyright (c) 1997-2010 The PHP Group
Zend Engine v2.3.0, Copyright (c) 1998-2010 Zend Technologies

$ apachectl -v
Server version: Apache/2.2.15 (Unix)
Server built:   May 21 2011 00:57:51

$ mysql -v
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 2548
Server version: 5.1.69 Source distribution

I am also running MRTG on this same box with no errors and I can connect ok to the http server to html files in the /var/www/html directory.

I have a feeling its more a browser related problem than server side.

[bytesoup]

I checked the /var/log/httpd logs for messages and this is what I see:

Failed attempts in access_log

Chromium:

Code: Select all

138.3.236.232 - - [29/May/2013:08:40:43 +0100] "GET /cacti HTTP/1.1" 403 293 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.22 (KHTML, like Gecko) Ubuntu Chromium/25.0.1364.160 Chrome/25.0.1364.160 Safari/537.22"
138.3.236.232 - - [29/May/2013:08:40:43 +0100] "GET /favicon.ico HTTP/1.1" 404 295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.22 (KHTML, like Gecko) Ubuntu Chromium/25.0.1364.160 Chrome/25.0.1364.160 Safari/537.22"

Chrome:

Code: Select all

138.3.236.232 - - [29/May/2013:08:41:16 +0100] "GET /cacti/ HTTP/1.1" 403 294 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63 Safari/537.31"
138.3.236.232 - - [29/May/2013:08:41:17 +0100] "GET /favicon.ico HTTP/1.1" 404 295 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63 Safari/537.31"

Failed attempts in error_log (same for Chrome and Chromium)

Code: Select all

[Wed May 29 08:41:16 2013] [error] [client 138.3.236.232] client denied by server configuration: /usr/share/cacti/
[Wed May 29 08:41:17 2013] [error] [client 138.3.236.232] File does not exist: /var/www/html/favicon.ico

Successful attempts in access_log

Firefox:

Code: Select all

10.175.36.81 - - [29/May/2013:08:41:31 +0100] "GET /cacti/ HTTP/1.1" 200 6575 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:20.0) Gecko/20100101 Firefox/20.0"

So if the client is denied in /usr/share/cacti where exactly should I be looking?

Note: my apache web server is serving up pages under /var/www/html for these browsers ok

[bytesoup]

Problem solved:

The file below had these lines (note this is not the complete file)

$ cat /etc/httpd/conf.d/cacti.conf

Code: Select all

<Directory /usr/share/cacti>
	<IfModule mod_authz_core.c>
		# httpd 2.4
		Require all granted
	</IfModule>
	<IfModule !mod_authz_core.c>
		# httpd 2.2
		Order deny,allow
		Deny from all
		Allow from 10.0.0.0/8
</Directory>

I modified as follows:

Code: Select all

<Directory /usr/share/cacti>
	<IfModule mod_authz_core.c>
		# httpd 2.4
		Require all granted
	</IfModule>
	<IfModule !mod_authz_core.c>
		# httpd 2.2
		Order deny,allow
		Deny from all
		Allow from 10.0.0.0/8
	</IfModule>
	Order Deny,Allow
	Deny from all
	Allow from all 
</Directory>

Then restarted httpd

Code: Select all

sudo service httpd restart

Problem solved