On 9/24/2019 12:30 PM, Trever Noggle wrote:

I now have Xymon built and running.? But I am unable to view the web interface.? I copied the xymon apache config file to /etc/conf.d directory and have confirmed that permissions are set to allow apache all the way in.? It is failing with this error: Symbolic link not allowed or link target not accessible: /home/xymon/server/www/index.html

strace shows: [pid? 4941] stat("/home/xymon/server/www/index.html", 0x7ffd6bd288a0) = -1 EACCE S (Permission denied)

here is the directory listing:

[root at monsrv www]# ls -la total 60 drwxr-xr-x. 10 xymon apache?? 195 Sep 24 13:24 . drwxr-xr-x.? 9 xymon apache?? 104 Sep 24 12:17 .. -rw-r--r--.? 1 xymon xymon?? 5283 Sep 24 13:24 critical.html drwxr-xr-x.? 2 xymon apache? 4096 Sep 24 12:17 gifs drwxr-xr-x.? 3 xymon apache? 4096 Sep 24 12:17 help drwxr-xr-x.? 2 xymon apache???? 6 Sep 24 12:17 html lrwxrwxrwx.? 1 xymon xymon???? 10 Sep 24 13:24 index.html -> xymon.html drwxr-xr-x.? 2 xymon apache?? 138 Sep 24 12:17 menu -rw-r--r--.? 1 xymon xymon? 21609 Sep 24 13:24 nongreen.html drwxr-xr-x.? 2 xymon apache???? 6 Sep 24 12:17 notes -rw-r--r--.? 1 xymon xymon?? 7193 Sep 24 13:24 red.html drwxrwxr-x.? 2 xymon apache???? 6 Sep 24 12:17 rep drwxrwxr-x.? 2 xymon apache???? 6 Sep 24 12:17 snap drwxr-xr-x.? 2 xymon apache???? 6 Sep 24 12:17 wml -rw-r--r--.? 1 xymon xymon? 12044 Sep 24 13:24 xymon.html

Not sure if the fact that xymon.html is set to 644 or not.? I have tried to change it to 655 and it keeps getting reset back to 644. Even if I hit it before it changes back I still get the above error.

The most common cause of this is some path in /home/xymon/server/www/ not being readable/executable as a directory, but if you've confirmed this you might also want to double-check that both Indexes and FollowSymLinks are enabled as Options in your apache config for the location in question. (You could also try hitting xymon.html directly to exclude the symlink.)

Finally, if you're compiling from source you'll want to check the audit.log for SELinux denials if you have it enabled and enforcing. Setting enforcement to 'Permissive' should be a useful test.

Side note: What issues were you having with the RPM packages on attempted install?

HTH -jc

On 9/24/19 12:30 PM, Trever Noggle wrote:

I now have Xymon built and running.? But I am unable to view the web interface.? I copied the xymon apache config file to /etc/conf.d directory and have confirmed that permissions are set to allow apache all the way in.? It is failing with this error: Symbolic link not allowed or link target not accessible: /home/xymon/server/www/index.html

strace shows: [pid? 4941] stat("/home/xymon/server/www/index.html", 0x7ffd6bd288a0) = -1 EACCE S (Permission denied)

here is the directory listing:

[root at monsrv www]# ls -la total 60 drwxr-xr-x. 10 xymon apache?? 195 Sep 24 13:24 . drwxr-xr-x.? 9 xymon apache?? 104 Sep 24 12:17 .. -rw-r--r--.? 1 xymon xymon?? 5283 Sep 24 13:24 critical.html drwxr-xr-x.? 2 xymon apache? 4096 Sep 24 12:17 gifs drwxr-xr-x.? 3 xymon apache? 4096 Sep 24 12:17 help drwxr-xr-x.? 2 xymon apache???? 6 Sep 24 12:17 html lrwxrwxrwx.? 1 xymon xymon???? 10 Sep 24 13:24 index.html -> xymon.html drwxr-xr-x.? 2 xymon apache?? 138 Sep 24 12:17 menu -rw-r--r--.? 1 xymon xymon? 21609 Sep 24 13:24 nongreen.html drwxr-xr-x.? 2 xymon apache???? 6 Sep 24 12:17 notes -rw-r--r--.? 1 xymon xymon?? 7193 Sep 24 13:24 red.html drwxrwxr-x.? 2 xymon apache???? 6 Sep 24 12:17 rep drwxrwxr-x.? 2 xymon apache???? 6 Sep 24 12:17 snap drwxr-xr-x.? 2 xymon apache???? 6 Sep 24 12:17 wml -rw-r--r--.? 1 xymon xymon? 12044 Sep 24 13:24 xymon.html

Not sure if the fact that xymon.html is set to 644 or not.? I have tried to change it to 655 and it keeps getting reset back to 644. Even if I hit it before it changes back I still get the above error.

Any ideas?

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

The problem is there an apache option not set FollowSymlinks.

<Directory"/usr/local/httpd/htdocs">OptionsIndexesFollowSymLinks</Directory> I think you can get the drift