On Wed, Nov 13, 2013 at 10:49:10AM +0000, Karl E. Jorgensen wrote: > Hi > > On Tue, Nov 12, 2013 at 05:55:13PM +0100, rudu wrote: > > Hi, > > Well, I wouldn't have thought having so many difficulties setting up > > a simple monitoring system on my Jessie amd64 desktop, but after a > > few hours wandering the net, I guess I could use some guidance ... > > > > What I've done so far : > > aptitude install apache2 munin munin-node > > ii apache2 2.4.6-3 amd64 Apache > > HTTP Server > > ii munin 2.0.17-3 all > > network-wide graphing framework (grapher/gatherer) > > ii munin-node 2.0.17-3 all > > network-wide graphing framework (node) > > > > Then I tried to connect to http://localhost/munin only to get : > > Forbidden > > You don't have permission to access /munin on this server. > > Apache/2.4.6 (Debian) Server at localhost Port 80 > > At this point, your first stop should be the apache error log... > > > > > I found some threads here and there via google which lead me to try > > several things. > > First in /etc/munin/apache.conf : > > replace > > > > <Directory /var/cache/munin/www> > > Order allow,deny > > Allow from localhost 127.0.0.0/8 ::1 > > > > Options None > > [...] > > </Directory> > > > > by > > > > <Directory /var/cache/munin/www> > > Order allow,deny > > Allow from all > > > > Options None > > [...] > > </Directory> > > Hm.. Either should work. > > If it had no effect, then I suggest you revert that out before doing > other changes. > > > Then I did : > > chown -R www-data:munin /var/cache/munin/www > > chmod -R 775 /var/cache/munin/www > > > > I even added my user to the munin group > > This would have no effect... I suggest you tidy up again by undoing > that. > > > But I still get this error 403 from apache. > > > > FWIW I got this in /var/log/apache2/error.log : > > [Tue Nov 12 17:53:03.987560 2013] [authz_core:error] [pid 2758:tid > > 139900372383488] [client ::1:53049] AH01630: client denied by server > > configuration: /var/cache/munin/www > > Hm.. That is reasonably conclusive... > > But there is a clue: authz_core ... Isn't that the apache module that > is used for user authentication? > > Makes me wonder what the rest of your apache configuration is like - > there must be some interaction between munin and other things in > apache...
If you're running Apache 2.4 (which you are), you should add "Require all granted" below the Allow/Deny statements. This basically tells the new authorisation module to honour the configuration of the older module.
signature.asc
Description: Digital signature