Hide Forgot
Description of problem: >> After upgrade from Red Hat Satellite 6.6 to 6.7, browsing capsule.example.com/pub directory fails with Forbidden errors. You don't have permission to access /pub/ on this server - /var/log/httpd/pulp-https_error_ssl.log [autoindex:error] [pid 34896] [client 10.10.49.10:46870] AH01276: Cannot serve directory /var/www/html/pub/: No matching DirectoryIndex (index.html,index.html.var,index.cgi,index.pl,index.php,index.xhtml) found, and server-generated directory index forbidden by Options directive Version-Release number of selected component (if applicable): >>> 6.7 6.8-beta How reproducible: >>> 1) Browse https://capsule.example.com/pub --> It does not work 2) Browsing http://capsule.example.com/pub --> It works Actual results: >>> Forbidden You don't have permission to access /pub/ on this server Additional Info:- >>> Issue started after upgrade from 6.6 to 6.7 only. Workaround : # sed -i -e 's/ Options/Options +FollowSymLinks +Indexes/g' /etc/httpd/conf.d/05-pulp-https.conf - Installer overwrites Options directives, [ WARN 2020-07-25T00:10:22 main] /Stage[main]/Pulp::Apache/Apache::Vhost[pulp-https]/Concat[05-pulp-https.conf]/File[/etc/httpd/conf.d/05-pulp-https.conf]/content: [ WARN 2020-07-25T00:10:22 main] --- /etc/httpd/conf.d/05-pulp-https.conf 2020-07-24 21:29:40.458852002 +0530 [ WARN 2020-07-25T00:10:22 main] +++ /tmp/puppet-file20200725-6707-190w1gd 2020-07-25 00:10:22.083480630 +0530 [ WARN 2020-07-25T00:10:22 main] @@ -19,7 +19,7 @@ [ WARN 2020-07-25T00:10:22 main] <IfModule mod_passenger.c> [ WARN 2020-07-25T00:10:22 main] PassengerEnabled off [ WARN 2020-07-25T00:10:22 main] </IfModule> [ WARN 2020-07-25T00:10:22 main] - Options +FollowSymLinks +Indexes [ WARN 2020-07-25T00:10:22 main] + Options [ WARN 2020-07-25T00:10:22 main] Require all granted
I'm confused: the message mentions 6.6 -> 6.7 but the version is set to 6.8.0? Either way, this looks to be introduced by https://github.com/theforeman/puppet-foreman_proxy_content/commit/f6790c4a940267602450e7d9284f2f2b6d5a92db. The template is used in pub_dir.pp (for the Satellite) and init.pp (for the Capsule). In the former the pub_dir_options variable is set, but in the latter it isn't.
Hi, Issue is reproducible on 6.8-beta as well so set higher version instead.
Created redmine issue https://projects.theforeman.org/issues/30716 from this bug
Upstream bug assigned to ehelms
Moving this bug to POST for triage into Satellite since the upstream issue https://projects.theforeman.org/issues/30716 has been resolved.
Verified on 6.8 Snap14 Verification points. 1- /pub accessible from capsule via https attachd https.png 2. /pub accessible from capsule via http attached http.png 3. Verfied the foreman-installer version # rpm -qa|grep foreman-installer foreman-installer-2.1.2.4-1.el7sat.noarch
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: Satellite 6.8 release), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2020:4366