[solved] [ACL] Access to context [/] is denied! after upgrade
 

Hello,

After the upgrade 4.1.13 > 4.2.2.
Some of our domains page become blank or default server page.

When we check the error_log, it show up:
[ACL] Access to context [/] is denied!

Everything is back to normal after we switch back to 4.1.13.

Any solution for this?

can you post the problem domain's virtual host setting (in httpd.conf)
and .htaccess under document root?

Hello,

The domain name below does not have .htaccess file on the httpdocs directory.


# cat httpd.include
<IfModule mod_ssl.c>

<VirtualHost 127.1.2.3:443>
ServerName my.domain.name:443
ServerAlias www.my.domain.name
UseCanonicalName Off
SuexecUserGroup username psacln
ServerAdmin email@address.name
DocumentRoot /var/www/vhosts/my.domain.name/httpsdocs
ErrorLog /var/www/vhosts/my.domain.name/statistics/logs/error_log
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* - [F]
</IfModule>
<IfModule mod_userdir.c>
UserDir /var/www/vhosts/my.domain.name/web_users
</IfModule>
ScriptAlias /cgi-bin/ /var/www/vhosts/my.domain.name/cgi-bin/
Alias /plesk-stat /var/www/vhosts/my.domain.name/statistics/
<Location /plesk-stat/>
Options +Indexes
</Location>
<Location /plesk-stat/logs/>
Require valid-user
</Location>
Alias /webstat /var/www/vhosts/my.domain.name/statistics/webstat
Alias /webstat-ssl /var/www/vhosts/my.domain.name/statistics/webstat-ssl
Alias /ftpstat /var/www/vhosts/my.domain.name/statistics/ftpstat
Alias /anon_ftpstat /var/www/vhosts/my.domain.name/statistics/anon_ftpstat
Alias /awstats-icon /var/www/html/awstats/icon
SSLEngine on
SSLVerifyClient none
SSLCertificateFile /usr/local/psa/var/certificates/certXAT9262
<Directory /var/www/vhosts/my.domain.name/httpsdocs>
<IfModule sapi_apache2.c>
php_admin_flag engine on
php_admin_flag safe_mode off
php_admin_value open_basedir "/var/www/vhosts/my.domain.name/httpsdocs:/tmp"
</IfModule>
<IfModule mod_php5.c>
php_admin_flag engine on
php_admin_flag safe_mode off
php_admin_value open_basedir "/var/www/vhosts/my.domain.name/httpsdocs:/tmp"
</IfModule>
SSLRequireSSL
Options +Includes +ExecCGI
</Directory>
<Directory /var/www/vhosts/my.domain.name/web_users>
<IfModule sapi_apache2.c>
php_admin_flag engine off
</IfModule>
<IfModule mod_php5.c>
php_admin_flag engine off
</IfModule>
</Directory>
Alias "/error_docs" "/var/www/vhosts/my.domain.name/error_docs"
ErrorDocument 400 /error_docs/bad_request.html
ErrorDocument 401 /error_docs/unauthorized.html
ErrorDocument 403 /error_docs/forbidden.html
ErrorDocument 404 /error_docs/not_found.html
ErrorDocument 500 /error_docs/internal_server_error.html
ErrorDocument 405 /error_docs/method_not_allowed.html
ErrorDocument 406 /error_docs/not_acceptable.html
ErrorDocument 407 /error_docs/proxy_authentication_required.html
ErrorDocument 412 /error_docs/precondition_failed.html
ErrorDocument 415 /error_docs/unsupported_media_type.html
ErrorDocument 501 /error_docs/not_implemented.html
ErrorDocument 502 /error_docs/bad_gateway.html
</VirtualHost>

</IfModule>

<VirtualHost 127.1.2.3:80>
ServerName my.domain.name:80
ServerAlias www.my.domain.name
UseCanonicalName Off
SuexecUserGroup username psacln
ServerAdmin "email@address.name"
DocumentRoot /var/www/vhosts/my.domain.name/httpdocs
ErrorLog /var/www/vhosts/my.domain.name/statistics/logs/error_log
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* - [F]
</IfModule>
<IfModule mod_userdir.c>
UserDir /var/www/vhosts/my.domain.name/web_users
</IfModule>
ScriptAlias /cgi-bin/ /var/www/vhosts/my.domain.name/cgi-bin/
Redirect permanent /plesk-stat https://my.domain.name/plesk-stat
Redirect permanent /webstat https://my.domain.name/webstat
Redirect permanent /webstat-ssl https://my.domain.name/webstat-ssl
Redirect permanent /ftpstat https://my.domain.name/ftpstat
Redirect permanent /anon_ftpstat https://my.domain.name/anon_ftpstat
Redirect permanent /awstats-icon https://my.domain.name/awstats-icon
<IfModule mod_ssl.c>
SSLEngine off
</IfModule>
<Directory /var/www/vhosts/my.domain.name/httpdocs>
<IfModule sapi_apache2.c>
php_admin_flag engine on
php_admin_flag safe_mode off
php_admin_value open_basedir "/var/www/vhosts/my.domain.name/httpdocs:/tmp"
</IfModule>
<IfModule mod_php5.c>
php_admin_flag engine on
php_admin_flag safe_mode off
php_admin_value open_basedir "/var/www/vhosts/my.domain.name/httpdocs:/tmp"
</IfModule>
Options +Includes +ExecCGI
</Directory>
<Directory /var/www/vhosts/my.domain.name/web_users>
<IfModule sapi_apache2.c>
php_admin_flag engine off
</IfModule>
<IfModule mod_php5.c>
php_admin_flag engine off
</IfModule>
</Directory>
Alias "/error_docs" "/var/www/vhosts/my.domain.name/error_docs"
ErrorDocument 400 /error_docs/bad_request.html
ErrorDocument 401 /error_docs/unauthorized.html
ErrorDocument 403 /error_docs/forbidden.html
ErrorDocument 404 /error_docs/not_found.html
ErrorDocument 500 /error_docs/internal_server_error.html
ErrorDocument 405 /error_docs/method_not_allowed.html
ErrorDocument 406 /error_docs/not_acceptable.html
ErrorDocument 407 /error_docs/proxy_authentication_required.html
ErrorDocument 412 /error_docs/precondition_failed.html
ErrorDocument 415 /error_docs/unsupported_media_type.html
ErrorDocument 501 /error_docs/not_implemented.html
ErrorDocument 502 /error_docs/bad_gateway.html
</VirtualHost>

Hello NiteWave,

Any update about this issue?

I may have to ssh to your server to get the answer or clue.
please PM the root access if ok with you.

I tried to reply on your PM but there are something wrong with your forum system.
I could not see my reply on the inbox and sent item.

Did you get my message?

yes, received 3 messages.
to try 4.2.1, just change the download link of 4.2.2, change 4.2.2 to 4.2.1 will do.

We're seeing something similar and what is really strange is upon restarting litespeed the first request to the virtual host will work.

@NiteWave:
I installed the version 4.2.1 and so far I do not see any problem.
Do you know why the 4.2.2 has the [ACL] Access to context [/] is denied! problem?

@Tony:
I tried restarting the 4.2.2 many times but I didn't help.

it may relate to <Files, <FilesMatch directives in the configuration file.
but look at the content you/ve posted, these directives are not in it. so no idea at present.

it's good to know it should be a difference between 4.2.1 and 4.2.2