Description of problem: When using Apache as web server for monitorix, the file monitorix-apache.conf have to be modified/fixed if Apache 2.4 is used. The conf file contains old Apache <= 2.2 syntax grants and denies, instead of the new Require. Version-Release number of selected component (if applicable): monitorix-3.4.0-1.fc19.noarch httpd-2.4.6-2.fc19.x86_64 How reproducible: Install httpd 2.4 or above, and monitorix, Disable use of monitorix internal web server in monitorix.conf copy /usr/share/doc/monitorix-3.4.0/monitorix-apache.conf to /etc/httpd/conf.d (restart both) Attempt to access x.x.x.x/monitorix on server hosting the application. Actual results: Forbidden You don't have permission to access /monitorix on this server. log: [Thu Feb 06 13:49:15.383285 2014] [authz_core:error] [pid 799] [client 1.1.1.1:1222] AH01630: client denied by server configuration: /usr/share/monitorix Expected results: access to monitorix Additional info: should look something like this: <IfModule mod_authz_core.c> # Apache 2.4 Require all 127.0.0.1 </IfModule> <IfModule !mod_authz_core.c> # Apache 2.2 Order deny,allow Allow from 127.0.01 </IfModule> http://httpd.apache.org/docs/2.4/upgrading.html
Conf looks the same in monitorix-3.4.0-1.fc20.noarch
(In reply to frollic nilsson from comment #0) Hi Frollic, I wasn't aware of that bug. I just discovered it yesterday when I was browsing the page <https://apps.fedoraproject.org/packages/monitorix/>. The new 3.5.0 version is already out but, if you agree, I could introduce the following modifications to the file 'monitorix-apache.conf' to include support for Apache 2.2 and 2.4 access control: # Monitorix is a lightweight system monitoring tool # Alias /monitorix /var/lib/monitorix/www ScriptAlias /monitorix-cgi /var/lib/monitorix/www/cgi <Directory /var/lib/monitorix/www/cgi/> DirectoryIndex monitorix.cgi Options ExecCGI <IfModule mod_authz_core.c> # Apache 2.4 Require all denied Require host 127.0.0.1 </IfModule> <IfModule !mod_authz_core.c> # Apache 2.2 Order deny,allow Deny from all Allow from 127.0.01 </IfModule> </Directory> [...] Please, let me know. Thanks.
(In reply to Jordi Sanfeliu from comment #2) fix typo: Allow from 127.0.0.1
sure!
It's done. https://github.com/mikaku/Monitorix/commit/878dcf1fe41639ac41f79a147b06bcc8f4cbf1d3 Regards.