403 when trying to access /mod_cluster-manager?

[sdnakhla]

I'm running CentOS 7 with Apache 2.4.6. I'm trying to create a Wildfly/JBoss cluster using mod_cluster 1.2.6. I've successfully accomplished this on Mac OSX, and am just trying to get it up and running in our server environment.

My cluster and virtual host config looks like this:

LoadModule slotmem_module modules/mod_slotmem.so
LoadModule proxy_cluster_module modules/mod_proxy_cluster.so
LoadModule advertise_module modules/mod_advertise.so
LoadModule manager_module modules/mod_manager.so

MemManagerFile /var/cache/httpd

<VirtualHost *:80>

  <Directory />
   Order deny,allow
   Allow from all
  </Directory>

  KeepAliveTimeout 60
  MaxKeepAliveRequests 0
  ManagerBalancerName myBalancer
  ServerAdvertise On
  AdvertiseFrequency 3
  EnableMCPMReceive

  <Location /mod_cluster-manager>
   SetHandler mod_cluster-manager
   Order deny,allow
   Allow from all
  </Location>
</VirtualHost>

The server starts fine, however when I try to access http://localhost/mod_cluster-manager I get a 403 saying permission denied. Here is the exact message in my error_log file:

[Wed Jul 30 11:53:21.547109 2014] [authz_core:error] [pid 6012] [client 127.0.0.1:36425] AH01630: client denied by server configuration: /mod_cluster-manager

I did not encounter any such issues in getting this to work on OSX, so I'm not entirely sure what the problem is or why I'm getting a 403. As I understand it, the Allow from all directive should be enough to grant me access when connecting via localhost. Has anyone else run into anything similar? Am I missing something?

[rhusar]

The server starts fine, however when I try to access http://localhost/mod_cluster-manager I get a 403 saying permission denied. Here is the exact message in my error_log file:

[Wed Jul 30 11:53:21.547109 2014] [authz_core:error] [pid 6012] [client 127.0.0.1:36425] AH01630: client denied by server configuration: /mod_cluster-manager

You are missing Require directive:

    <Location />   
      Order deny,allow
      Deny from all
      Allow from all
      Require all granted
    </Location>

I did not encounter any such issues in getting this to work on OSX, so I'm not entirely sure what the problem is or why I'm getting a 403.

I am guessing that you have an older version of httpd or different configuration than you have on CentOS which strives to be secure by default.

As I understand it, the Allow from all directive should be enough to grant me access when connecting via localhost.

Unless you use the authz module :-)