Received: (qmail 21123 invoked by uid 2012); 15 Jan 1998 04:40:37 -0000
Message-Id: <19980115044037.21122.qmail@hyperreal.org>
Date: 15 Jan 1998 04:40:37 -0000
From: Gavin Lambert <uecasm@geocities.com>
Reply-To: uecasm@geocities.com
To: apbugs@hyperreal.org
Subject: Peculiar <Directory> results
X-Send-Pr-Version: 3.2

>Number:         1675
>Category:       mod_userdir
>Synopsis:       Peculiar <Directory> results
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    apache
>State:          closed
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Wed Jan 14 20:50:00 PST 1998
>Last-Modified:  Sat Jan 17 16:00:09 PST 1998
>Originator:     uecasm@geocities.com
>Organization:
>Release:        1.3b3
>Environment:
Win95, using precompiled NT binary
>Description:
When the server config files contain the following definitions:

-----
<Directory />
Options None
AllowOverride None
order deny,allow
deny from all
allow from none
</Directory>

UserDir users/*/public_html

<Directory /apache/users/*/public_html>
AllowOverride Indexes AuthConfig
Options Indexes IncludesNOEXEC
order allow,deny
allow from all
deny from none
</Directory>
-----

every access to /~test/ (for which c:\apache\users\test\public_html *did* exist)
resulted in a 403 Forbidden error, and the following line in the ErrorLog:
-----
[Thu Jan 15 12:22:46 1998] [error] Client denied by server configuration: c:/apa
che\users\test\public_html\
-----
>How-To-Repeat:
Try the above code (or similar) in your own setup.
>Fix:
When I removed the <Directory /> section, the /~test/ directory loaded correctly.
However all the clauses in the <Directory /> section should have been overridden
by those in the <Directory /apache/users/*/public_html> section... and that 
entry in the ErrorLog looks a bit iffy, using backslashes instead of forward
ones.
%0
>Audit-Trail:

From: Marc Slemko <marcs@znep.com>
To: Gavin Lambert <uecasm@geocities.com>
Cc: apbugs@hyperreal.org
Subject: Re: mod_userdir/1675: Peculiar <Directory> results
Date: Thu, 15 Jan 1998 20:24:21 -0700 (MST)

 On 15 Jan 1998, Gavin Lambert wrote:
 
 > <Directory />
 > Options None
 > AllowOverride None
 > order deny,allow
 > deny from all
 > allow from none
 
 "allow from none" is setting it to allow access from a host named "none".
 Just leave it out if you want to restrict all access.
 
 > </Directory>
 > 
 > UserDir users/*/public_html
 > 
 > <Directory /apache/users/*/public_html>
 > AllowOverride Indexes AuthConfig
 > Options Indexes IncludesNOEXEC
 > order allow,deny
 > allow from all
 > deny from none
 > </Directory>
 
 What happens if you try including the drive letter, eg. c:/ in the auth
 files?
 
 
State-Changed-From-To: open-closed
State-Changed-By: Lars.Eilebrecht@unix-ag.org
State-Changed-When: Sat Jan 17 10:21:20 PST 1998
State-Changed-Why:

The value of your UserDir directive appears to be wrong.
Please see the UserDir documentation for usage details.

Of course you are always welcome to submit a bug report
if you think you found an error in Apache.


From: Gavin Lambert <uecasm@geocities.com>
To: Lars.Eilebrecht@unix-ag.org
Cc: apbugs@apache.org, Marc Slemko <marcs@znep.com>
Subject: Re: mod_userdir/1675: Peculiar <Directory> results
Date: Sun, 18 Jan 1998 11:51:55 +1200

 At 18:21 17/01/98 -0000, Lars.Eilebrecht@unix-ag.org wrote:
 >State-Changed-From-To: open-closed
 
 This issue is definately still open.
 
 >The value of your UserDir directive appears to be wrong.
 >Please see the UserDir documentation for usage details.
 
 According to the documentation for UserDir, it *is* valid:
 
 ServerRoot c:/apache
 UserDir users/*/public_html
 
 will map the URL /~test/blah.html to
 C:\Apache\users\test\public_html\blah.html.
 
 And indeed it *does* work, unless the <Directory /> section is included, as
 is recommended in the FAQ.
 
 
 On Thu, 15 Jan 1998 20:24:21 -0700 (MST), Marc Slemko <marcs@znep.com> wrote:
 >What happens if you try including the drive letter, eg. c:/ in the auth
 >files?
 
 Ok, I've tried fiddling around with the entries, and have discovered the
 following:
 
  - The <Directory /> section, when present, seems to 403 my entire site.
  - If changed to <Directory C:>, everything works again (including the user
 dir)
  - If changed to <Directory C:/> or <Directory C:/.> everything stops
 working again.
 
 I definately think that it is a server bug when a single trailing slash
 stops the entire site from working, especially when it should have been
 overridden by later entries in any case.
 
 
 -----                                
 Gavin Lambert
 uecasm@geocities.com
 http://ue.home.ml.org/   (recommended)
 http://ue2.home.ml.org/  (alternate site, not updated often)
 Mirabilis ICQ UIN: 2274180
 
 ----
 5 out of 4 people have trouble with fractions.
 
 Death is nature's way of telling you to slow down.
 
 On the wall of the women's restroom on the Enterprise:
           'Where no man has gone before'
 ----
 
 Note:  the above quotes have been randomly selected from a huge list.  I
 take no responsibility should you find any of them offensive.
 
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <apbugs@Apache.Org> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]