Skip to Content.
Sympa Menu

en - Re: [en@sympa] Web access forbidden

Subject: The mailing list for listmasters using Sympa

List archive

Chronological Thread  
  • From: Stephen Jarjoura <address@concealed>
  • To: "Christian H. Kuhn" <address@concealed>
  • Cc: address@concealed
  • Subject: Re: [en@sympa] Web access forbidden
  • Date: Wed, 10 Sep 2025 10:09:01 -0400

You don't need to put FCGI options in a separate file (FCGI_OPTS); I inlined them in `wwsympa.service`

(your paths are different than mine)

[Unit]
Description=WWSympa - Web interface for Sympa mailing list manager
After=syslog.target sympa.service

[Service]
Type=forking
PIDFile=/var/sympa/var/run/sympa/wwsympa.pid
ExecStart=/usr/local/bin/spawn-fcgi -F $FCGI_CHILDREN \
    -P /var/sympa/var/run/sympa/wwsympa.pid \
    -s /var/sympa/var/run/sympa/wwsympa.socket \
    -u $FCGI_USER -g $FCGI_GROUP $FCGI_OPTS -- \
    /var/sympa/lib/sympa/cgi/wwsympa.fcgi
Environment="FCGI_CHILDREN=5"
Environment="FCGI_USER=sympa"
Environment="FCGI_GROUP=sympa"
Environment="FCGI_OPTS=-M 0600 -U apache"
Restart=on-failure

[Install]
WantedBy=multi-user.target




-- 
Stephen A. Jarjoura
Collaborative Services


On Wed, Sep 10, 2025 at 9:33 AM "Christian H. Kuhn" <address@concealed> wrote:
Hi Stephen,

thx for your answer.

I forgot to include some informaton.

root@bywater ~ # lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 25.04
Release:        25.04
Codename:       plucky
root@bywater ~ # sympa --version
Sympa 6.2.76
root@bywater ~ # apache2ctl -v
Server version: Apache/2.4.63 (Ubuntu)
Server built:   2025-07-14T15:12:31
root@bywater ~ # postconf mail_version
mail_version = 3.9.1
root@bywater ~ # ll /run/sympa/
total 20
drwxr-xr-x  2 sympa    sympa     160 Sep 10 15:06 ./
drwxr-xr-x 45 root     root     1360 Sep 10 06:33 ../
-rw-r--r--  1 sympa    sympa       8 Sep  9 22:29 archived.pid
-rw-r--r--  1 sympa    sympa       8 Sep  9 22:29 bounced.pid
-rw-r--r--  1 sympa    sympa       8 Sep  9 22:29 bulk.pid
-rw-r--r--  1 sympa    sympa       8 Sep  9 22:29 sympa_msg.pid
-rw-r--r--  1 sympa    sympa       8 Sep  9 22:29 task_manager.pid
srw-rw----  1 www-data www-data    0 Sep  9 22:11 wwsympa.socket=

Testing location is https://sglasker.de/sympa

Am 10.09.2025 um 01:35 schrieb Stephen Jarjoura (via en Mailing List):
> Your path is different, but here's the FCGI stanza in my Apache config file. [...]
>
>      <Location /sympa>
>          SetHandler "proxy:unix:/var/sympa/var/run/sympa/wwsympa.socket|
> fcgi://localhost"
>          Require all granted
>      </Location>

Same here. I just copied from doc and replaced Variables:

<Location /sympa>
     SetHandler "proxy:unix:/run/sympa/wwsympa.socket|fcgi://localhost"
     # Don't forget to edit lines below!
     # Require local
     Require all granted
</Location>

# Lines below are needed for 6.2.28 or later.
<Location "/static-sympa/css">
     Require all granted
</Location>
Alias /static-sympa/css /var/lib/sympa/css

# Lines below are needed for 6.2.28 or later.
<Location "/static-sympa/pictures">
     Require all granted
</Location>
Alias /static-sympa/pictures /var/lib/sympa/pictures

<Location /static-sympa>
     Require all granted
</Location>
Alias /static-sympa /usr/share/sympa/static_content

<Location /sympasoap>
     SetHandler "proxy:unix:/run/sympa/sympasoap.socket|fcgi://localhost"
     # Don't forget to edit lines below!
     # Require local
     Require all granted
</Location>

> I would also check your selinux settings; we're running with it
> disabled, but I've seen the security context cause errors like that.
I don’t do SELinux.

BTW: I can’t write FCGI_OPTS anywhere. In wwsympa.service, the log
comlains about undefined option. /etc/sysconfig/dir not exists.

And now, after changing the order of ServerAliases, i even get a 404 :-(

80.187.86.76 - - [10/Sep/2025:15:19:27 +0200] "POST
/sympa?_=9a59d083-34bf-4166-b312-e0573ff93fbe HTTP/1.1" 404 590
"https://www.sglasker.de/sympa" "Mozilla/5.0 (Windows NT 10.0; Win64;
x64; rv:142.0) Gecko/20100101 Firefox/142.0"


log_level 3
log_facility = syslog = LOCAL2 with respective conf of rsyslog.

sympa logs mail events, but not web events.

The solution will be sth very simple, but atm the bug (that one that
sits in front of the pc) feels a bit stupid and tired. Any further help?

TIA
QNo






Archive powered by MHonArc 2.6.19+.

Top of Page