<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 18 Jun2021, at 8:00 AM, Bill Cole <<a href="mailto:billcole@apache.org" class="">billcole@apache.org</a>>wrote:</div></blockquote><blockquote type="cite" class=""><br class="Apple-interchange-newline"><div class=""><div class=""><br class="">I?m at a loss what to do in response to the reply, below, from Bill Cole.<br class=""><br class="">I note that to the best of my knowledge, nothing changed as to the attributes or permissions of any of the user doc folders listed in my httpd-vhosts.conf file except as may have been done without my knowledge in an update to macOS 11.3 or 11.4, or in case of some change in the MacPorts files supporting apache ? but I believe I?m still using the very same configuration files, including httpd.conf, httpd-vhosts.conf, and httpd-userdir.conf (and /private/etc/hosts) as I have in the past!<br class=""><br class="">1. What should I do with respect to extended attributes? I get:<br class=""><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>[~] % ls -le Sites<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>total 32 [some results omitted from list]<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x@ 23 me staff 736 Jul 31 2020 Math421Blog<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x@ 92 me staff 2944 Apr 10 2015 MyHomePage<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x 32 me staff 1024 Jun 12 15:32 RapidWeaver<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x@ 20 me staff 640 Jun 17 10:23 html<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x 10 me staff 320 Aug 27 2017 newsite<br class=""><br class="">And:<br class=""><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>[~] % ls -le Sites/MyHomePage<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>total 541576 [I show only a couple of the files & folders]<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x@ 73 me staff 2336 Jan 31 2015 Math_127<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x@ 146 me staff 4672 Jan 31 2015 Math_131<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-rw-r--r--@ 1 me staff 8331 Apr 10 2015 index.html<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-rw-r--r--@ 1 me staff 39890 Jun 2 2010 me.jpg<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-rw-r--r--@ 1 me staff 695 Feb 24 2011 site.css<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-rw-r--r--@ 1 me staff 1385 Feb 24 2011 style.css<br class=""><br class="">2. In the vhost-specific error log /opt/local/var/log/apache2/me-MyHomePageerror_log I?m finding entries like this:<br class="">[Thu Jun 17 15:17:10.509589 2021] [core:error] [pid 13543] (13)Permission denied: [client 127.0.0.1:53851] AH00035: access to / denied (filesystem path '/Users/me/Sites') because search permissions are missing on a component of the path<br class="">[Thu Jun 17 15:17:10.551868 2021] [core:error] [pid 13543] (13)Permission denied: [client 127.0.0.1:53851] AH00035: access to /favicon.ico denied (filesystem path '/Users/me/Sites') because search permissions are missing on a component of the path, referer: <a href="http://myhomepage.local/" class="">http://myhomepage.local/</a><br class="">[Thu Jun 17 15:19:00.531386 2021] [core:error] [pid 13498] (13)Permission denied: [client 127.0.0.1:53909] AH00035: access to / denied (filesystem path '/Users/me/Sites') because search permissions are missing on a component of the path<br class="">3. File httpd.conf includes the lines:<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>DocumentRoot "/opt/local/www/apache2/html"<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span><Directory "/opt/local/www/apache2/html"><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span> Options Indexes FollowSymLinks<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span> AllowOverride None<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span> Require all granted<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span></Directory><br class="">I don?t think that?s changed.<br class="">4. The errors are occurring with Opera as well as with Safari. I don?t know if there?s any browser setting that?s upgrading http to https; I am explicitly using the ?http:? prefix in ?<a href="http://MyHomePage.local" class="">http://MyHomePage.local</a> <<a href="http://myhomepage.local/" class="">http://myhomepage.local/</a>>"<br class="">On June 13 at 16:21 UTC 2021, Bill Cole <<a href="mailto:billcole@apache.org" class="">billcole@apache.org</a>> wrote:<br class=""><br class="">On 2021-06-13 at 11:47:53 UTC-0400 (Sun, 13 Jun 2021 11:47:53 -0400)<br class="">Murray Eisenberg <murrayeisenberg at <a href="http://gmail.com" class="">gmail.com</a> <<a href="https://lists.macports.org/mailman/listinfo/macports-users" class="">https://lists.macports.org/mailman/listinfo/macports-users</a>>><br class="">is rumored to have said:<br class=""><br class=""><blockquote type="cite" class="">ls -ld Sites<br class="">drwxr-xr-x@ 18 me staff 576 Feb 27 10:37 Sites<br class=""></blockquote><br class="">4 thoughts:<br class=""><br class="">1. The '@' indicating the existence of extended attributes could be <br class="">overriding the '+' that is shown on files with extended ACLs, so any <br class="">level in the directory tree COULD have an ACL blocking the webserver <br class="">from reading the files or scanning the directories. Check with 'ls -le' <br class="">to be sure. This would be a simple but unlikely cause of the problem.<br class=""><br class="">2. Check the error logs for details of the failure. There is a <br class="">vhost-specific error log defined, but there should also be a server-wide <br class="">error log which may contain illuminating entries.<br class=""><br class="">3. Check the main httpd.conf for Directory or Location directives that <br class="">may be interfering with the Directory directives in the VirtualHost <br class="">definition.<br class=""><br class="">4. Make sure you don't have anything automatically 'upgrading' you to <br class="">HTTPS. This can be in the server config or in a browser setting.<br class=""><br class=""><blockquote type="cite" class=""><blockquote type="cite" class="">On 12 Jun2021, at 8:37 PM, Jeff Greenberg <br class=""><listmail.ayendesigns at <a href="http://gmail.com" class="">gmail.com</a> <<a href="https://lists.macports.org/mailman/listinfo/macports-users" class="">https://lists.macports.org/mailman/listinfo/macports-users</a>>> wrote:<br class=""><br class="">How about the permissions on the Sites folder?<br class=""><br class="">On Jun 12, 2021, at 20:24, Murray Eisenberg <br class=""><murrayeisenberg at <a href="http://gmail.com" class="">gmail.com</a> <<a href="https://lists.macports.org/mailman/listinfo/macports-users" class="">https://lists.macports.org/mailman/listinfo/macports-users</a>>> wrote:<br class=""><br class="">?For the Macports apache2 installation, I?m using a non-default <br class="">location for my web sites. The httpd.conf includes a <br class="">httpd-vhosts.conf file, and the latter includes entries such as:<br class=""><br class=""><VirtualHost *:80><br class=""> DocumentRoot "/Users/me/Sites/MyHomePage"<br class=""> ServerName MyHomePage.local<br class=""> ServerAlias <a href="http://www.MyHomePage.local" class="">www.MyHomePage.local</a> <<a href="http://www.myhomepage.local/" class="">http://www.myhomepage.local/</a> <<a href="http://www.myhomepage.local/" class="">http://www.myhomepage.local/</a>>><br class=""> ErrorLog "var/log/apache2/me-MyHomePageerror_log"<br class=""> CustomLog "var/log/apache2/me-MyHomePage-access_log" common<br class=""> <Directory /Users/me/Sites/MyHomePage><br class=""> Options Indexes FollowSymLinks<br class=""> Require all granted<br class=""> </Directory><br class=""></VirtualHost><br class=""><br class="">And in my /private/etc/hosts I include the lines:<br class=""><br class="">127.0.0.1<span class="Apple-tab-span" style="white-space:pre"> </span>localhost<br class="">255.255.255.255<span class="Apple-tab-span" style="white-space:pre"> </span>broadcasthost<br class="">::1 localhost<br class="">fe80::1%lo0<span class="Apple-tab-span" style="white-space:pre"> </span>localhost<br class="">127.0.0.1<span class="Apple-tab-span" style="white-space:pre"> </span>me-html.local<br class="">127.0.0.1<span class="Apple-tab-span" style="white-space:pre"> </span>MyHomePage.local<br class=""><br class="">When I start apache and try to open the site MyHomePage.local, i get <br class="">error:<br class=""><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>Forbidden You don't have permission to access this resource.<br class=""><br class="">The permissions on /Users/me/Sites/MyHomePage are:<br class=""><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x@ 92 me staff 2944 Apr 10 2015 MyHomePage<br class=""><br class="">and the permissions for /Users/me/Sites/MyHomePage/index.html are:<br class=""><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-rw-r--r--@ 1 me staff 8331 Apr 10 2015 index.html<br class=""><br class="">What?s wrong?<br class=""></blockquote></blockquote><br class=""><br class=""><br class="">On 2021-06-17 at 15:32:38 UTC-0400 (Thu, 17 Jun 2021 15:32:38 -0400)<br class="">Murray Eisenberg <<a href="mailto:murrayeisenberg@gmail.com" class="">murrayeisenberg@gmail.com</a>><br class="">is rumored to have said:<br class=""><br class=""><blockquote type="cite" class="">I?m at a loss what to do in response to the reply, below, from Bill <br class="">Cole….<br class=""><br class="">1. What should I do with respect to extended attributes? I get:<br class=""><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>[~] % ls -le Sites<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>total 32 [some results omitted from list]<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x@ 23 me staff 736 Jul 31 2020 Math421Blog<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x@ 92 me staff 2944 Apr 10 2015 MyHomePage<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x 32 me staff 1024 Jun 12 15:32 RapidWeaver<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x@ 20 me staff 640 Jun 17 10:23 html<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x 10 me staff 320 Aug 27 2017 newsite<br class=""><br class="">And:<br class=""><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>[~] % ls -le Sites/MyHomePage<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>total 541576 [I show only a couple of the files & folders]<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x@ 73 me staff 2336 Jan 31 2015 Math_127<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x@ 146 me staff 4672 Jan 31 2015 Math_131<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-rw-r--r--@ 1 me staff 8331 Apr 10 2015 index.html<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-rw-r--r--@ 1 me staff 39890 Jun 2 2010 me.jpg<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-rw-r--r--@ 1 me staff 695 Feb 24 2011 site.css<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-rw-r--r--@ 1 me staff 1385 Feb 24 2011 style.css<br class=""></blockquote><br class="">That's fine as is. If extended ACLs were your issue, the 'e' option to <br class="">ls would have displayed them.<br class=""><br class=""><br class=""><blockquote type="cite" class="">2. In the vhost-specific error log <br class="">/opt/local/var/log/apache2/me-MyHomePageerror_log I?m finding <br class="">entries like this:<br class="">[Thu Jun 17 15:17:10.509589 2021] [core:error] [pid 13543] <br class="">(13)Permission denied: [client 127.0.0.1:53851] AH00035: access to / <br class="">denied (filesystem path '/Users/me/Sites') because search permissions <br class="">are missing on a component of the path<br class="">[Thu Jun 17 15:17:10.551868 2021] [core:error] [pid 13543] <br class="">(13)Permission denied: [client 127.0.0.1:53851] AH00035: access to <br class="">/favicon.ico denied (filesystem path '/Users/me/Sites') because search <br class="">permissions are missing on a component of the path, referer: <br class=""><a href="http://myhomepage.local/" class="">http://myhomepage.local/</a><br class="">[Thu Jun 17 15:19:00.531386 2021] [core:error] [pid 13498] <br class="">(13)Permission denied: [client 127.0.0.1:53909] AH00035: access to / <br class="">denied (filesystem path '/Users/me/Sites') because search permissions <br class="">are missing on a component of the path<br class=""></blockquote><br class="">There's the critical clue!<br class=""><br class="">Your home directory is probably not world-searchable. To eliminate the <br class="">reported error definitively:<br class=""><br class="">sudo chmod a+x /Users /Users/me /Users/me/Sites<br class=""><br class="">...<br class=""><br class=""><blockquote type="cite" class="">On June 13 at 16:21 UTC 2021, Bill Cole <<a href="mailto:billcole@apache.org" class="">billcole@apache.org</a>> wrote:<br class=""><br class="">On 2021-06-13 at 11:47:53 UTC-0400 (Sun, 13 Jun 2021 11:47:53 -0400)<br class="">Murray Eisenberg <murrayeisenberg at <a href="http://gmail.com" class="">gmail.com</a> <br class=""><<a href="https://lists.macports.org/mailman/listinfo/macports-users" class="">https://lists.macports.org/mailman/listinfo/macports-users</a>>><br class="">is rumored to have said:<br class=""><br class=""><blockquote type="cite" class="">ls -ld Sites<br class="">drwxr-xr-x@ 18 me staff 576 Feb 27 10:37 Sites<br class=""></blockquote><br class="">4 thoughts:<br class=""><br class="">1. The '@' indicating the existence of extended attributes could be<br class="">overriding the '+' that is shown on files with extended ACLs, so any<br class="">level in the directory tree COULD have an ACL blocking the webserver<br class="">from reading the files or scanning the directories. Check with 'ls <br class="">-le'<br class="">to be sure. This would be a simple but unlikely cause of the problem.<br class=""><br class="">2. Check the error logs for details of the failure. There is a<br class="">vhost-specific error log defined, but there should also be a <br class="">server-wide<br class="">error log which may contain illuminating entries.<br class=""><br class="">3. Check the main httpd.conf for Directory or Location directives that<br class="">may be interfering with the Directory directives in the VirtualHost<br class="">definition.<br class=""><br class="">4. Make sure you don't have anything automatically 'upgrading' you to<br class="">HTTPS. This can be in the server config or in a browser setting.<br class=""><br class=""><blockquote type="cite" class=""><blockquote type="cite" class="">On 12 Jun2021, at 8:37 PM, Jeff Greenberg<br class=""><listmail.ayendesigns at <a href="http://gmail.com" class="">gmail.com</a> <br class=""><<a href="https://lists.macports.org/mailman/listinfo/macports-users" class="">https://lists.macports.org/mailman/listinfo/macports-users</a>>> wrote:<br class=""><br class="">How about the permissions on the Sites folder?<br class=""><br class="">On Jun 12, 2021, at 20:24, Murray Eisenberg<br class=""><murrayeisenberg at <a href="http://gmail.com" class="">gmail.com</a> <br class=""><<a href="https://lists.macports.org/mailman/listinfo/macports-users" class="">https://lists.macports.org/mailman/listinfo/macports-users</a>>> wrote:<br class=""><br class="">?For the Macports apache2 installation, I?m using a non-default<br class="">location for my web sites. The httpd.conf includes a<br class="">httpd-vhosts.conf file, and the latter includes entries such as:<br class=""><br class=""><VirtualHost *:80><br class=""> DocumentRoot "/Users/me/Sites/MyHomePage"<br class=""> ServerName MyHomePage.local<br class=""> ServerAlias <a href="http://www.MyHomePage.local" class="">www.MyHomePage.local</a> <<a href="http://www.myhomepage.local/" class="">http://www.myhomepage.local/</a> <br class=""><<a href="http://www.myhomepage.local/" class="">http://www.myhomepage.local/</a>>><br class=""> ErrorLog "var/log/apache2/me-MyHomePageerror_log"<br class=""> CustomLog "var/log/apache2/me-MyHomePage-access_log" common<br class=""> <Directory /Users/me/Sites/MyHomePage><br class=""> Options Indexes FollowSymLinks<br class=""> Require all granted<br class=""> </Directory><br class=""></VirtualHost><br class=""><br class="">And in my /private/etc/hosts I include the lines:<br class=""><br class="">127.0.0.1<span class="Apple-tab-span" style="white-space:pre"> </span>localhost<br class="">255.255.255.255<span class="Apple-tab-span" style="white-space:pre"> </span>broadcasthost<br class="">::1 localhost<br class="">fe80::1%lo0<span class="Apple-tab-span" style="white-space:pre"> </span>localhost<br class="">127.0.0.1<span class="Apple-tab-span" style="white-space:pre"> </span>me-html.local<br class="">127.0.0.1<span class="Apple-tab-span" style="white-space:pre"> </span>MyHomePage.local<br class=""><br class="">When I start apache and try to open the site MyHomePage.local, i get<br class="">error:<br class=""><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>Forbidden You don't have permission to access this resource.<br class=""><br class="">The permissions on /Users/me/Sites/MyHomePage are:<br class=""><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>drwxr-xr-x@ 92 me staff 2944 Apr 10 2015 MyHomePage<br class=""><br class="">and the permissions for /Users/me/Sites/MyHomePage/index.html are:<br class=""><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>-rw-r--r--@ 1 me staff 8331 Apr 10 2015 index.html<br class=""><br class="">What?s wrong?<br class=""></blockquote></blockquote></blockquote></div></div></blockquote></div><div class=""><br class=""></div>Indeed, <div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>sudo chmod a+x /Users /Users/me /Users/me/Sites</div><div class=""><br class=""></div><div class="">fixed the permissions access problem.</div><div class=""><br class=""></div><div class="">Is there some alternative way to fix this — by changing the owner of just /Users/me/Sites and its tree of descendents and/or by changing settings in the entries of </div><div class=""> /opt/local/etc/apache2/extra/httpd-vhosts.conf ?</div><div class=""><br class=""></div><div class="">And if there is no such alternative, then why would permissions on /Users, /Users/me, and /Users/me/Sites have changed away from a+x, seemingly without my own intervention, during some macOS upgrade?</div><div class=""><br class=""><div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">---<br class="">Murray Eisenberg<span class="Apple-tab-span" style="white-space: pre;"> </span><a href="mailto:murrayeisenberg@gmail.com" class="">murrayeisenberg@gmail.com</a><br class="">503 King Farm Blvd #101<span class="Apple-tab-span" style="white-space: pre;"> </span><br class="">Rockville, MD 20850-6667<span class="Apple-tab-span" style="white-space: pre;"> </span>Mobile (413)-427-5334<br class=""><br class=""></div>
</div>
<br class=""></div></body></html>