[Mailman-Users] archives not migrated properly

[Mark Sapiro]

On 11/20/2014 11:38 PM, David Benfell wrote:
> 
> I migrated from Linux to FreeBSD a few months ago and I'm just now
> (yes, shame on me) noticing that my archives are broken. I've tried a
> few things to fix this but I'm still getting 403 Forbidden.
> 
> First, here is the current Apache (2.4) configuration:
> 
...
>         # CGI Directory
>         ScriptAlias /mailman/ /usr/local/mailman/cgi-bin/
>         <Directory "/usr/local/mailman/cgi-bin">
>                 AllowOverride All
>                 Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
>                 Require all granted
>         </Directory>
>         Alias /pipermail/ /usr/local/mailman/archives/public/
>         <Directory "/usr/local/mailman/archives/public/">
>                 AllowOverride All
>                 Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
>                 Require all granted
>         </Directory>


I think the issue is +SymLinksIfOwnerMatch above. This should be just
+FollowSymLinks since the owners don't match.

...
> home# ls -al /usr/local/mailman/archives/public/                                                                                                        
> total 16
> drwxrwsr-x  2 root  mailman  512 Nov 20 23:36 .
> drwxrwsr-x  4 root  mailman  512 Aug 17 18:41 ..
> lrwxr-xr-x  1 root  mailman   18 Nov 20 22:56 mailman ->
> ../private/mailman
> lrwxr-xr-x  1 root  mailman   29 Nov 20 22:56 philosophical-cafe ->
> ../private/philosophical-cafe
> lrwxr-xr-x  1 root  mailman   19 Nov 20 22:56 thoughts ->
> ../private/thoughts
> 
> And correspondingly,
> 
> home# ls -al /usr/local/mailman/archives/private/
> total 72
> drwxrws--x   9 root     mailman   512 Nov 20 22:55 .
> drwxrwsr-x   4 root     mailman   512 Aug 17 18:41 ..
> drwxrwsr-x  12 mailman  mailman  1024 Nov  3 03:27 benfell-committee
> drwxrwsr-x   2 mailman  mailman   512 Apr 25  2014
> benfell-committee.mbox
> drwxrwsr-x   2 mailman  mailman   512 Apr 11  2014 mailman
> drwxrwsr-x  12 mailman  mailman  1024 Nov  2 03:27 philosophicalcafe
> drwxrwsr-x   2 mailman  mailman   512 Apr 12  2014
> philosophicalcafe.mbox
> drwxrwsr-x  12 mailman  mailman  1024 Nov  2 03:27 thoughts
> drwxrwsr-x   2 mailman  mailman   512 Apr 24  2014 thoughts.mbox
> 
> The 403 Forbidden comes when I try to access any archive page via a
> browser.


If my analysis is correct, you should be able to access the private
benfell-committee archives OK, and actually be able to access any list's
archives via <https://mail.parts-unknown.org/mailman/private/LISTNAME/>

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://mail.python.org/pipermail/mailman-users/attachments/20141121/3ebb8446/attachment.sig>