Access denied because search permissions are missing on a component of the path

psm0110

Hello. I am attempting to install and setup osticket for the first time. It has been awhile since I have used apache, but it is coming back to me. I cannot bring up the installation page because of a 403 error, apache log is the subject line. I suspect this is due to an SElinux or apache config issue. Using CentOS 7. My install path is /var/www/html and directories' permissions are set to 755 & files to 644 with the exception of the /include/ost-config.php file which I set to 777; all owned by apache.To double check my sanity I installed WordPress successfully so I know my LAMP skills are at least passable and the server is "working." I'm not familiar with osticket so I'm unsure which directories & settings to examine.Thanks in advance for any guidance.

ntozier

You have left out a couple important pieces of information. (version of osticket and where you installed the files).Are you putting the contents of the upload folder into /var/www/html?Have you consulted the Apache error log to see what the full error for the 403 is?CentOS.. are you running SELinux?

psm0110

(13)Permission denied: AH00035: access to /osticket/setup denied (filesystem path '/var/www/html/osticket/setup') because search permissions are missing on a component of the path.Yes I am running SELinux

psm0110

Also, have this in the log as well: PHP Fatal error: Unknown: Failed opening required '/var/www/html/osticket/index.php' (include_path='.:/usr/share/pear:/usr/share/php') in Unknown on line 0

JRogers

(13)Permission denied: AH00035: access to /osticket/setup denied (filesystem path '/var/www/html/osticket/setup') because search permissions are missing on a component of the path.

Yes I am running SELinux

That doesn't look like an Apache error log. Is it? I still don't see answers to ntozier's questions, other than the one about SELinux.Based on what I see here, I'd run:$> restorecon That may not fix it, but it shouldn't hurt.Jack

psm0110

Here is the full content of the log file from a restart to request and error. I changed ownership of /usr/share/pear to apache. The /usr/share/php directory is empty, but I did the same for it as well. Thanks for the quick reply.---# tail /var/log/httpd/error_log AH00170: caught SIGWINCH, shutting down gracefully SELinux policy enabled; httpd running as context system_u AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec) AH01757: generating secret for digest authentication ... AH02282: No slotmem from mod_heartmonitor AH00163: Apache/2.4.6 (CentOS) PHP/5.4.16 configured -- resuming normal operations AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND' PHP Warning: Unknown: failed to open stream: Permission denied in Unknown on line 0 PHP Fatal error: Unknown: Failed opening required '/var/www/html/osticket/index.php' (include_path='.:/usr/share/pear:/usr/share/php') in Unknown on line 0

JRogers

# tail /var/log/httpd/error_log

AH00170: caught SIGWINCH, shutting down gracefully

SELinux policy enabled; httpd running as context system_u

AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)

AH01757: generating secret for digest authentication ...

AH02282: No slotmem from mod_heartmonitor

AH00163: Apache/2.4.6 (CentOS) PHP/5.4.16 configured -- resuming normal operations

AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'

PHP Warning: Unknown: failed to open stream: Permission denied in Unknown on line 0

PHP Fatal error: Unknown: Failed opening required '/var/www/html/osticket/index.php' (include_path='.:/usr/share/pear:/usr/share/php') in Unknown on line 0

I'll repeat my question, it did not get answered: That doesn't look like an Apache error log. Is it?And, I'll repeat my comment regarding ntozier's questions, as they did not get answered (other than the SELinux question):I still don't see answers to ntozier's questions, other than the one about SELinux.Finally, you changed ownership of some directories. Did you run the restorecon command that I suggested? I should have included the -r (-R) option, so I'd run it as follows:$> restorecon -r Jack

psm0110

It is an apache log. The upload contents have been moved to /var/www/html/osticket as exhibited in the log. Yes I executed the restorecon recursively as you recommended.Is there a preferred distro / configuration of LAMP for osticket? I merely selected CentOS because I'm familiar with it in a server context.

JRogers

I don't see any "GET" requests in your log file, or any URLs. Which Apache log file is this?I don't know of a "preferred distro". We're using CentOS with SELinux enabled, CentOS has a large user base, so that helps from a support standpoint. We seem to have quite a few Ubuntu users as well. It's not that big a deal, as long as the system meets the published requirements.You may want to temporarily disable SELinux to see if the errors persist.Jack

psm0110

It's the error log, not the main app log. I just disabled SELinux and it served up the page. That's okay while I'm kicking the tires, but I'll need to figure it out if we decide to go live with osticket. Thanks for your help.

JRogers

So is it working with SELinux disabled?Jack

psm0110

so far - I need to find a rpm for php-imap & CentOS 7...

JRogers

That may answer your question about which distro. Being an early adopter comes at a price. ;)I've avoided CentOS7 so far, but mainly due to systemd. I want to give that some time to shake out.Jack

psm0110

you're quite right. I nuked the testing VM and recreated it in CentOS 6 and it's working fine. Though I did have to disable SELinux again.