glpi-project / glpi

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
https://glpi-project.org
GNU General Public License v3.0
4.3k stars 1.29k forks source link

Other error on public directory #14798

Closed SilvaFernando closed 1 year ago

SilvaFernando commented 1 year ago

Code of Conduct

Is there an existing issue for this?

Version

10.0.7

Bug description

I've tried applying a public Vhost on GLPI 10.0.7 with two GLPI directories glpi and glpi_homolog and I have this problem: image

My Vhost:

Alias /glpi_homolog /usr/share/glpi_homolog/public

Redirect configuration for multi-glpi install_oriation

You can set this value in each vhost configuration

SetEnv GLPI_CONFIG_DIR /etc/glpi

<Directory /usr/share/glpi_homolog> Options None AllowOverride Limit Options FileInfo

<IfModule mod_authz_core.c>
    Require all granted
</IfModule>
<IfModule !mod_authz_core.c>
    Order deny,allow
    Allow from all
</IfModule>

Options FollowSymLinks Options SymLinksIfOwnerMatch <Directory /usr/share/glpi_homolog/install_ori>

# Install is only allowed via local access (from the GLPI server).
# Add your IP address if you need it for remote install_oriation,
# but remember to remove it after install_oriation for security.

<IfModule mod_authz_core.c>
    # Apache 2.4
    Require local
    # Require ip ##.##.##.##
</IfModule>
<IfModule !mod_authz_core.c>
    # Apache 2.2
    Order Deny,Allow
    Deny from All
    Allow from 127.0.0.1
    Allow from ::1

ErrorDocument 403 "<p><b>Restricted area.</b><br />Only local access allowed.<br />Check your configuration or contact your administrator.</p>"

<IfModule mod_php5.c>
    # migration could be very long
    php_value max_execution_time 0
    php_value memory_limit -1
</IfModule>
<IfModule mod_php7.c>
    # migration could be very long
    php_value max_execution_time 0
    php_value memory_limit -1
</IfModule>

<Directory /usr/share/glpi_homolog/config> Order Allow,Deny Deny from all

<Directory /usr/share/glpi_homolog/locales> Order Allow,Deny Deny from all

<Directory /usr/share/glpi_homolog/install_ori/mysql> Order Allow,Deny Deny from all <Directory /usr/share/glpi_homolog/scripts> Order Allow,Deny Deny from all

some people prefer a simple URL like http://glpi.example.com

<VirtualHost *:80>

DocumentRoot /usr/share/glpi_homolog

ServerName glpi.example.com/glpi_homolog

<Directory /usr/share/glpi_homolog/public> Require all granted

    RewriteEngine On
    # Redirect all requests to GLPI router, unless file exists.
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteRule ^(.*)$ index.php [QSA,L]
</Directory>

Relevant log output

No response

Page URL

/index.php

Steps To reproduce

Update your GLPI 10.0.7 and adjusted Vhost

Your GLPI setup information

Instruções de instalação e configuração
GLPI 10.0.7 ( => /usr/share/glpi_homolog_homolog)
Installation mode: TARBALL
Current language:pt_BR

Server
 
Operating system: Linux ee206732b171 4.18.0-348.20.1.el8_5.x86_64 #1 SMP Thu Mar 10 20:59:28 UTC 2022 x86_64
PHP 8.0.28 fpm-fcgi (Core, PDO, Phar, Reflection, SPL, SimpleXML, Zend OPcache, apcu, bz2, calendar, cgi-fcgi, ctype, curl,
    date, dom, exif, fileinfo, filter, ftp, gd, gettext, hash, iconv, imap, intl, json, ldap, libxml, mbstring, mysqli, mysqlnd,
    openssl, pcre, pdo_mysql, pdo_sqlite, selinux, session, snmp, soap, sockets, sodium, sqlite3, standard, tokenizer, xml,
    xmlreader, xmlrpc, xmlwriter, xsl, zip, zlib)
Setup: max_execution_time="30" memory_limit="128M" post_max_size="20M" safe_mode="" session.save_handler="files"
    upload_max_filesize="20M" 
Software: Apache/2.4.37 (AlmaLinux) ()
    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36 Edg/113.0.1774.35
Server Software: Percona Server (GPL), Release 44, Revision 27f408641db
    Server Version: 5.7.41-44
    Server SQL Mode: STRICT_TRANS_TABLES,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
    Parameters: glpi@db-glpi-10.0.7-Fernando/glpi
    Host info: db-glpi-10.0.7-Fernando via TCP/IP

PHP version (8.0.28) is supported.
Sessions configuration is OK.
Allocated memory is sufficient.
mysqli extension is installed.
Following extensions are installed: dom, fileinfo, json, simplexml.
curl extension is installed.
gd extension is installed.
intl extension is installed.
libxml extension is installed.
zlib extension is installed.
The constant SODIUM_CRYPTO_AEAD_XCHACHA20POLY1305_IETF_NPUBBYTES is present.
Database engine version (5.7.41) is supported.
No files from previous GLPI version detected.
The log file has been created successfully.
Write access to /var/lib/glpi_homolog/files/_cache has been validated.
The directory could not be created in /etc/glpi.
Write access to /var/lib/glpi_homolog/files/_cron has been validated.
Write access to /var/lib/glpi_homolog/files/data-documents has been validated.
Write access to /var/lib/glpi_homolog/files/_dumps has been validated.
Write access to /var/lib/glpi_homolog/files/_graphs has been validated.
Write access to /var/lib/glpi_homolog/files/_lock has been validated.
Write access to /var/lib/glpi_homolog/files/_pictures has been validated.
Write access to /var/lib/glpi_homolog/files/_plugins has been validated.
Write access to /var/lib/glpi_homolog/files/_rss has been validated.
Write access to /var/lib/glpi_homolog/files/_sessions has been validated.
Write access to /var/lib/glpi_homolog/files/_tmp has been validated.
Write access to /var/lib/glpi_homolog/files/_uploads has been validated.
For security reasons, SELinux mode should be Enforcing.

Web server root directory configuration seems safe.
Sessions configuration is secured.
OS and PHP are relying on 64 bits integers.
exif extension is installed.
ldap extension is installed.
openssl extension is installed.
Following extensions are installed: bz2, Phar, zip.
Zend OPcache extension is installed.
Following extensions are installed: ctype, iconv, mbstring, sodium.
Write access to /usr/share/glpi_homolog/marketplace has been validated.
Access to timezone database (mysql) is not allowed.

GLPI constants
 
GLPI_ROOT: "/usr/share/glpi_homolog"
GLPI_CONFIG_DIR: "/etc/glpi"
GLPI_MARKETPLACE_ALLOW_OVERRIDE: false
GLPI_VAR_DIR: "/var/lib/glpi/files"
GLPI_DOC_DIR: "/var/lib/glpi/files/data-documents"
GLPI_CRON_DIR: "/var/lib/glpi/files/_cron"
GLPI_DUMP_DIR: "/var/lib/glpi/files/_dumps"
GLPI_GRAPH_DIR: "/var/lib/glpi/files/_graphs"
GLPI_LOCK_DIR: "/var/lib/glpi/files/_lock"
GLPI_PICTURE_DIR: "/var/lib/glpi/files/_pictures"
GLPI_PLUGIN_DOC_DIR: "/var/lib/glpi/files/_plugins"
GLPI_RSS_DIR: "/var/lib/glpi/files/_rss"
GLPI_SESSION_DIR: "/var/lib/glpi/files/_sessions"
GLPI_TMP_DIR: "/var/lib/glpi/files/_tmp"
GLPI_UPLOAD_DIR: "/var/lib/glpi/files/_uploads"
GLPI_CACHE_DIR: "/var/lib/glpi/files/_cache"
GLPI_LOG_DIR: "/var/log/glpi"
GLPI_SYSTEM_CRON: true
GLPI_MARKETPLACE_DIR: "/usr/share/glpi_homolog/marketplace"
GLPI_USE_CSRF_CHECK: "1"
GLPI_CSRF_EXPIRES: "7200"
GLPI_CSRF_MAX_TOKENS: "100"
GLPI_USE_IDOR_CHECK: "1"
GLPI_IDOR_EXPIRES: "7200"
GLPI_ALLOW_IFRAME_IN_RICH_TEXT: false
GLPI_SERVERSIDE_URL_ALLOWLIST: ["/^(https?|feed):\\/\\/[^@:]+(\\/.*)?$/"]
GLPI_TELEMETRY_URI: "https://telemetry.glpi-project.org"
GLPI_INSTALL_MODE: "TARBALL"
GLPI_NETWORK_MAIL: "glpi@teclib.com"
GLPI_NETWORK_SERVICES: "https://services.glpi-network.com"
GLPI_MARKETPLACE_MANUAL_DOWNLOADS: true
GLPI_USER_AGENT_EXTRA_COMMENTS: ""
GLPI_DISABLE_ONLY_FULL_GROUP_BY_SQL_MODE: "1"
GLPI_AJAX_DASHBOARD: "1"
GLPI_CALDAV_IMPORT_STATE: 0
GLPI_DEMO_MODE: "0"
GLPI_CENTRAL_WARNINGS: "1"
GLPI_LOCAL_I18N_DIR: "/var/lib/glpi/files/_locales"
GLPI_INVENTORY_DIR: "/var/lib/glpi/files/_inventories"
GLPI_NETWORK_REGISTRATION_API_URL: "https://services.glpi-network.com/api/registration/"
GLPI_MARKETPLACE_PLUGINS_API_URI: "https://services.glpi-network.com/api/glpi-plugins/"
GLPI_I18N_DIR: "/usr/share/glpi_homolog/locales"
GLPI_VERSION: "10.0.7"
GLPI_SCHEMA_VERSION: "10.0.7"
GLPI_MARKETPLACE_PRERELEASES: false
GLPI_MIN_PHP: "7.4.0"
GLPI_MAX_PHP: "8.3.0"
GLPI_YEAR: "2023"

Libraries
 
htmlawed/htmlawed version 1.2.9 in (/usr/share/glpi_homolog/vendor/htmlawed/htmlawed)
phpmailer/phpmailer version 6.8.0 in (/usr/share/glpi_homolog/vendor/phpmailer/phpmailer/src)
simplepie/simplepie version 1.5.8 in (/usr/share/glpi_homolog/vendor/simplepie/simplepie/library)
tecnickcom/tcpdf version 6.6.2 in (/usr/share/glpi_homolog/vendor/tecnickcom/tcpdf)
michelf/php-markdown in (/usr/share/glpi_homolog/vendor/michelf/php-markdown/Michelf)
true/punycode in (/usr/share/glpi_homolog/vendor/true/punycode/src)
iamcal/lib_autolink in (/usr/share/glpi_homolog/vendor/iamcal/lib_autolink)
sabre/dav in (/usr/share/glpi_homolog/vendor/sabre/dav/lib/DAV)
sabre/http in (/usr/share/glpi_homolog/vendor/sabre/http/lib)
sabre/uri in (/usr/share/glpi_homolog/vendor/sabre/uri/lib)
sabre/vobject in (/usr/share/glpi_homolog/vendor/sabre/vobject/lib)
laminas/laminas-i18n in (/usr/share/glpi_homolog/vendor/laminas/laminas-i18n/src)
laminas/laminas-servicemanager in (/usr/share/glpi_homolog/vendor/laminas/laminas-servicemanager/src)
monolog/monolog in (/usr/share/glpi_homolog/vendor/monolog/monolog/src/Monolog)
sebastian/diff in (/usr/share/glpi_homolog/vendor/sebastian/diff/src)
donatj/phpuseragentparser in (/usr/share/glpi_homolog/vendor/donatj/phpuseragentparser/src/UserAgent)
elvanto/litemoji in (/usr/share/glpi_homolog/vendor/elvanto/litemoji/src)
symfony/console in (/usr/share/glpi_homolog/vendor/symfony/console)
scssphp/scssphp in (/usr/share/glpi_homolog/vendor/scssphp/scssphp/src)
laminas/laminas-mail in (/usr/share/glpi_homolog/vendor/laminas/laminas-mail/src/Protocol)
laminas/laminas-mime in (/usr/share/glpi_homolog/vendor/laminas/laminas-mime/src)
rlanvin/php-rrule in (/usr/share/glpi_homolog/vendor/rlanvin/php-rrule/src)
blueimp/jquery-file-upload in (/usr/share/glpi_homolog/vendor/blueimp/jquery-file-upload/server/php)
ramsey/uuid in (/usr/share/glpi_homolog/vendor/ramsey/uuid/src)
psr/log in (/usr/share/glpi_homolog/vendor/psr/log/Psr/Log)
psr/simple-cache in (/usr/share/glpi_homolog/vendor/psr/simple-cache/src)
psr/cache in (/usr/share/glpi_homolog/vendor/psr/cache/src)
league/csv in (/usr/share/glpi_homolog/vendor/league/csv/src)
mexitek/phpcolors in (/usr/share/glpi_homolog/vendor/mexitek/phpcolors/src/Mexitek/PHPColors)
guzzlehttp/guzzle in (/usr/share/glpi_homolog/vendor/guzzlehttp/guzzle/src)
guzzlehttp/psr7 in (/usr/share/glpi_homolog/vendor/guzzlehttp/psr7/src)
glpi-project/inventory_format in (/usr/share/glpi_homolog/vendor/glpi-project/inventory_format/lib/php)
wapmorgan/unified-archive in (/usr/share/glpi_homolog/vendor/wapmorgan/unified-archive/src)
paragonie/sodium_compat in (/usr/share/glpi_homolog/vendor/paragonie/sodium_compat/src)
symfony/cache in (/usr/share/glpi_homolog/vendor/symfony/cache)
html2text/html2text in (/usr/share/glpi_homolog/vendor/html2text/html2text/src)
symfony/css-selector in (/usr/share/glpi_homolog/vendor/symfony/css-selector)
symfony/dom-crawler in (/usr/share/glpi_homolog/vendor/symfony/dom-crawler)
twig/twig in (/usr/share/glpi_homolog/vendor/twig/twig/src)
twig/string-extra in (/usr/share/glpi_homolog/vendor/twig/string-extra)
symfony/polyfill-ctype not found
symfony/polyfill-iconv not found
symfony/polyfill-mbstring not found
symfony/polyfill-php80 not found
symfony/polyfill-php81 in (/usr/share/glpi_homolog/vendor/symfony/polyfill-php81)
symfony/polyfill-php82 in (/usr/share/glpi_homolog/vendor/symfony/polyfill-php82)
league/oauth2-client in (/usr/share/glpi_homolog/vendor/league/oauth2-client/src/Provider)
league/oauth2-google in (/usr/share/glpi_homolog/vendor/league/oauth2-google/src/Provider)
thenetworg/oauth2-azure in (/usr/share/glpi_homolog/vendor/thenetworg/oauth2-azure/src/Provider)
phpCas version 1.6.1 in (/usr/share/pear)

SQL replicas
 
Not active

Notifications
 
Way of sending emails: PHP

Plugins list
 
    escalade             Name: Escalonamento                  Version: 2.8.2      State: Installed / not activated               
        Install Method: Manual
    formcreator          Name: Form Creator                   Version: 2.13.5     State: Enabled                                 
        Install Method: Manual

Anything else?

No response

github-actions[bot] commented 1 year ago

This issue has been closed as we only track bugs here.

You can get community support on forums or you can consider taking a subscription to get professional support. You can also contact GLPI editor team directly.