Look at the error message from the log.  The IP is

[client 192.168.160.20:52060 <http://192.168.160.20:52060>]

This is surely in the range of

Require ip 192.168.0.0/16 <http://192.168.0.0/16>

The URL being asked for is:

http://klovia.htt-consult.com/mailadmin/setup.php

I have the following:

cat /etc/httpd/conf.d/00-init.conf ServerAdmin postmas...@htt-consult.com ServerName klovia.htt-consult.com <VirtualHost *:80> <Directory "/var/www/html"> Options Indexes FollowSymLinks AllowOverride None Require all granted </Directory> </VirtualHost> <VirtualHost *:443> SSLEngine On SSLCertificateFile /etc/pki/tls/certs/htt-consult.com.crt SSLCertificateKeyFile /etc/pki/tls/private/htt-consult.com.key <Directory "/var/www/html"> Options Indexes FollowSymLinks AllowOverride None Require all granted </Directory> </VirtualHost>


cat /etc/httpd/conf.d/postfixadmin.conf

alias /mailadmin /usr/share/postfixadmin
<Directory "/usr/share/postfixadmin/public">
AllowOverride AuthConfig
Require ip 192.168.0.0/16 <http://192.168.0.0/16>
</Directory>


?

On 2/3/19 5:51 AM, Daniel wrote:
Client does not match the required ip,make sure you have a directory directive matching the resource you are asking for ,and allowing permissions to the up range of the client or with a "require all granted"

El dom., 3 feb. 2019 1:35, Robert Moskowitz <r...@htt-consult.com <mailto:r...@htt-consult.com>> escribió:

    I have google around and the obvious reasons for this..

    I am working on a new setup with posrfixadmin ver 3.2 on
    Centos7-armv7 with SElinux enforcing. Last I worked with
    postfixadmin it was ver 3.0.2 and my notes are based on that and
    Apache 2.4.

    My postfixadmin.conf file for Apache is:

    alias /mailadmin /usr/share/postfixadmin
    <Directory "/usr/share/postfixadmin/public">
    AllowOverride AuthConfig
    Require ip 192.168.0.0/16 <http://192.168.0.0/16>
    </Directory>

    I added the /public on the Directory statement based on the content of

    /usr/share/postfixadmin/index.php

    when I try connecting to host/mailadmin/setup.php I get:

    Forbidden
    You don't have permission to access /mailadmin/setup.php on this
    server.

    Checking error_log I see:

    [Fri Feb 01 15:40:43.714302 2019] [authz_core:error] [pid 7692]
    [client 192.168.160.20:52060 <http://192.168.160.20:52060>]
    AH01630: client denied by server configuration:
    /usr/share/postfixadmin/setup.php

    My IP addr is in the required range, but it fails. I tried opening
    it up to "require all granted" and still no access.

    In 3.0.2 I had to do:

    chcon -R -t httpd_sys_content_rw_t /usr/share/postfixadmin/templates_c
    setsebool -P httpd_can_network_connect on

    I noted that the directory is now /templates but the INSTALL.TXT
    still points to templates_c. I have made the change to the above
    chcon command with no results.

    What am I missing? What has changed?

    thanks



Reply via email to