[solved] [ACL] Access to context [/] is denied! after upgrade

[katana123]

Hello,

After the upgrade 4.1.13 > 4.2.2.
Some of our domains page become blank or default server page.

When we check the error_log, it show up:
[ACL] Access to context [/] is denied!

Everything is back to normal after we switch back to 4.1.13.

Any solution for this?

[NiteWave]

can you post the problem domain's virtual host setting (in httpd.conf)
and .htaccess under document root?

[katana123]

Hello,

The domain name below does not have .htaccess file on the httpdocs directory.


# cat httpd.include
<IfModule mod_ssl.c>

<VirtualHost 127.1.2.3:443>
ServerName my.domain.name:443
ServerAlias www.my.domain.name
UseCanonicalName Off
SuexecUserGroup username psacln
ServerAdmin email@address.name
DocumentRoot /var/www/vhosts/my.domain.name/httpsdocs
ErrorLog /var/www/vhosts/my.domain.name/statistics/logs/error_log
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* - [F]
</IfModule>
<IfModule mod_userdir.c>
UserDir /var/www/vhosts/my.domain.name/web_users
</IfModule>
ScriptAlias /cgi-bin/ /var/www/vhosts/my.domain.name/cgi-bin/
Alias /plesk-stat /var/www/vhosts/my.domain.name/statistics/
<Location /plesk-stat/>
Options +Indexes
</Location>
<Location /plesk-stat/logs/>
Require valid-user
</Location>
Alias /webstat /var/www/vhosts/my.domain.name/statistics/webstat
Alias /webstat-ssl /var/www/vhosts/my.domain.name/statistics/webstat-ssl
Alias /ftpstat /var/www/vhosts/my.domain.name/statistics/ftpstat
Alias /anon_ftpstat /var/www/vhosts/my.domain.name/statistics/anon_ftpstat
Alias /awstats-icon /var/www/html/awstats/icon
SSLEngine on
SSLVerifyClient none
SSLCertificateFile /usr/local/psa/var/certificates/certXAT9262
<Directory /var/www/vhosts/my.domain.name/httpsdocs>
<IfModule sapi_apache2.c>
php_admin_flag engine on
php_admin_flag safe_mode off
php_admin_value open_basedir "/var/www/vhosts/my.domain.name/httpsdocs:/tmp"
</IfModule>
<IfModule mod_php5.c>
php_admin_flag engine on
php_admin_flag safe_mode off
php_admin_value open_basedir "/var/www/vhosts/my.domain.name/httpsdocs:/tmp"
</IfModule>
SSLRequireSSL
Options +Includes +ExecCGI
</Directory>
<Directory /var/www/vhosts/my.domain.name/web_users>
<IfModule sapi_apache2.c>
php_admin_flag engine off
</IfModule>
<IfModule mod_php5.c>
php_admin_flag engine off
</IfModule>
</Directory>
Alias "/error_docs" "/var/www/vhosts/my.domain.name/error_docs"
ErrorDocument 400 /error_docs/bad_request.html
ErrorDocument 401 /error_docs/unauthorized.html
ErrorDocument 403 /error_docs/forbidden.html
ErrorDocument 404 /error_docs/not_found.html
ErrorDocument 500 /error_docs/internal_server_error.html
ErrorDocument 405 /error_docs/method_not_allowed.html
ErrorDocument 406 /error_docs/not_acceptable.html
ErrorDocument 407 /error_docs/proxy_authentication_required.html
ErrorDocument 412 /error_docs/precondition_failed.html
ErrorDocument 415 /error_docs/unsupported_media_type.html
ErrorDocument 501 /error_docs/not_implemented.html
ErrorDocument 502 /error_docs/bad_gateway.html
</VirtualHost>

</IfModule>

<VirtualHost 127.1.2.3:80>
ServerName my.domain.name:80
ServerAlias www.my.domain.name
UseCanonicalName Off
SuexecUserGroup username psacln
ServerAdmin "email@address.name"
DocumentRoot /var/www/vhosts/my.domain.name/httpdocs
ErrorLog /var/www/vhosts/my.domain.name/statistics/logs/error_log
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_METHOD} ^TRACE
RewriteRule .* - [F]
</IfModule>
<IfModule mod_userdir.c>
UserDir /var/www/vhosts/my.domain.name/web_users
</IfModule>
ScriptAlias /cgi-bin/ /var/www/vhosts/my.domain.name/cgi-bin/
Redirect permanent /plesk-stat https://my.domain.name/plesk-stat
Redirect permanent /webstat https://my.domain.name/webstat
Redirect permanent /webstat-ssl https://my.domain.name/webstat-ssl
Redirect permanent /ftpstat https://my.domain.name/ftpstat
Redirect permanent /anon_ftpstat https://my.domain.name/anon_ftpstat
Redirect permanent /awstats-icon https://my.domain.name/awstats-icon
<IfModule mod_ssl.c>
SSLEngine off
</IfModule>
<Directory /var/www/vhosts/my.domain.name/httpdocs>
<IfModule sapi_apache2.c>
php_admin_flag engine on
php_admin_flag safe_mode off
php_admin_value open_basedir "/var/www/vhosts/my.domain.name/httpdocs:/tmp"
</IfModule>
<IfModule mod_php5.c>
php_admin_flag engine on
php_admin_flag safe_mode off
php_admin_value open_basedir "/var/www/vhosts/my.domain.name/httpdocs:/tmp"
</IfModule>
Options +Includes +ExecCGI
</Directory>
<Directory /var/www/vhosts/my.domain.name/web_users>
<IfModule sapi_apache2.c>
php_admin_flag engine off
</IfModule>
<IfModule mod_php5.c>
php_admin_flag engine off
</IfModule>
</Directory>
Alias "/error_docs" "/var/www/vhosts/my.domain.name/error_docs"
ErrorDocument 400 /error_docs/bad_request.html
ErrorDocument 401 /error_docs/unauthorized.html
ErrorDocument 403 /error_docs/forbidden.html
ErrorDocument 404 /error_docs/not_found.html
ErrorDocument 500 /error_docs/internal_server_error.html
ErrorDocument 405 /error_docs/method_not_allowed.html
ErrorDocument 406 /error_docs/not_acceptable.html
ErrorDocument 407 /error_docs/proxy_authentication_required.html
ErrorDocument 412 /error_docs/precondition_failed.html
ErrorDocument 415 /error_docs/unsupported_media_type.html
ErrorDocument 501 /error_docs/not_implemented.html
ErrorDocument 502 /error_docs/bad_gateway.html
</VirtualHost>

[katana123]

Hello NiteWave,

Any update about this issue?

[NiteWave]

I may have to ssh to your server to get the answer or clue.
please PM the root access if ok with you.

[katana123]

I tried to reply on your PM but there are something wrong with your forum system.
I could not see my reply on the inbox and sent item.

Did you get my message?

[NiteWave]

yes, received 3 messages.
to try 4.2.1, just change the download link of 4.2.2, change 4.2.2 to 4.2.1 will do.

[Tony]

We're seeing something similar and what is really strange is upon restarting litespeed the first request to the virtual host will work.

[katana123]

@NiteWave:
I installed the version 4.2.1 and so far I do not see any problem.
Do you know why the 4.2.2 has the [ACL] Access to context [/] is denied! problem?

@Tony:
I tried restarting the 4.2.2 many times but I didn't help.

[NiteWave]

it may relate to <Files, <FilesMatch directives in the configuration file.
but look at the content you/ve posted, these directives are not in it. so no idea at present.

it's good to know it should be a difference between 4.2.1 and 4.2.2