see https://jenkins.knut.univention.de:8181/job/UCS-4.4/job/UCS-4.4-4/job/Update%20Tests/test_system=owncloud-appliance/, i can manually reproduce this, apache error logs says [Thu Jun 04 03:50:28.000512 2020] [core:notice] [pid 17426] AH00094: Command line: '/usr/sbin/apache2' [Thu Jun 04 03:55:10.630026 2020] [authz_core:error] [pid 14230] [client 10.207.130.93:43640] AH01630: client denied by server configuration: /usr/lib/python2.7/dist-packages/univention/system_activation/wsgi.py, referer: http://aplwmaster.www.local/univention/system-activation/ [Thu Jun 04 04:03:36.987097 2020] [authz_core:error] [pid 14230] [client 10.205.2.25:43732] AH01630: client denied by server configuration: /usr/lib/python2.7/dist-packages/univention/system_activation/wsgi.py, referer: http://10.207.130.93/univention/system-activation/ [Thu Jun 04 04:06:19.667508 2020] [authz_core:error] [pid 14213] [client 10.205.2.25:43842] AH01630: client denied by server configuration: /usr/lib/python2.7/dist-packages/univention/system_activation/wsgi.py, referer: http://10.207.130.93/univention/system-activation/ [Thu Jun 04 04:06:36.589711 2020] [authz_core:error] [pid 14233] [client 10.205.2.25:43850] AH01630: client denied by server configuration: /usr/lib/python2.7/dist-packages/univention/system_activation/wsgi.py, referer: http://10.207.130.93/univention/system-activation/ [Thu Jun 04 04:10:47.139397 2020] [authz_core:error] [pid 17720] [client 10.205.2.25:43964] AH01630: client denied by server configuration: /usr/lib/python2.7/dist-packages/univention/system_activation/wsgi.py, referer: http://10.207.130.93/univention/system-activation/
Regression from bug 51373
What is the problem? Is there a `apache2 reload` missing? Or does the file needs +x permissions?
(In reply to Florian Best from comment #2) > What is the problem? The problem is: ;-) Thu Jun 04 04:10:47.139397 2020] [authz_core:error] [pid 17720] [client 10.205.2.25:43964] AH01630: client denied by server configuration: /usr/lib/python2.7/dist-packages/univention/system_activation/wsgi.py, referer: http://10.207.130.93/univention/system-activation/ >Is there a `apache2 reload` missing? Or does the file > needs +x permissions? no, changed permissions and restarted apache, did nothing to improve the situation
More debug level context: [Thu Jun 04 05:28:03.437697 2020] [authz_core:debug] [pid 19958] mod_authz_core.c(809): [client 10.205.2.7:45498] AH01626: authorization result of Require all denied: denied [Thu Jun 04 05:28:03.437712 2020] [authz_core:debug] [pid 19958] mod_authz_core.c(809): [client 10.205.2.7:45498] AH01626: authorization result of <RequireAny>: denied [Thu Jun 04 05:28:03.437719 2020] [authz_core:error] [pid 19958] [client 10.205.2.7:45498] AH01630: client denied by server configuration: /usr/lib/python2.7/dist-packages/univention/system_activation/wsgi.py [Thu Jun 04 05:28:03.437726 2020] [core:trace3] [pid 19958] request.c(119): [client 10.205.2.7:45498] auth phase 'check access' gave status 403: /license
/etc/apache2/apache2.conf allowed access for /usr/share. For /usr/lib was nothing defined. <Directory /usr/share> AllowOverride None Require all granted </Directory> Fixed in by allowing /usr/lib/python2.7/dist-packages/univention/system_activation/: univention-system-activation (4.0.0-13) 8f3046285996 | Bug #51420: fix apache permissions Package: univention-system-activation Version: 4.0.0-13A~4.4.0.202006041146
OK - univention-system-activation OK - yaml
<http://errata.software-univention.de/ucs/4.4/620.html>