Hide Forgot
Description of problem: /etc/httpd/conf.d/glpi.conf still contain this: <Directory /usr/share/glpi/config> Order Allow,Deny Deny from all </Directory> <Directory /usr/share/glpi/locales> Order Allow,Deny Deny from all </Directory> <Directory /usr/share/glpi/install/mysql> Order Allow,Deny Deny from all </Directory> <Directory /usr/share/glpi/scripts> Order Allow,Deny Deny from all </Directory> These ACL should be replaced with an apache 2.4 aware variant, <IfModule mod_authz_core.c> Require all denied </IfModule> <IfModule !mod_authz_core.c> Order Allow,Deny Deny from all </IfModule> Version-Release number of selected component (if applicable): glpi-0.84.3-1.fc21.noarch.rpm (affects EPEL too)
Apache 2.4 provides mod_access_compat.c, so Order/Deny directive works (only to restrict right, not to allow right) RHEL don't have Apache 2.4