RE: [cobalt-security] raq4 Forbidden?

[Graeme Fowler <graeme.fowler@xxxxxxxxxxxxxx>]

Stan Scalsky wrote:
> Just brought up a new RaQ4, applied all the necessary patches 
> to bring it up to date with no problems. The system allowed
> me to create a new site but then going into site manage gives
> me a "Forbidden - You do not have permission to access the
> requested file on this server". 

The most frequent sight of this error is when you have input the IP address
from the front panel, then gone to http://ip.add.re.ss/admin/ _without_
doing the normal Cobalt setup page first.

The reason you get 'forbidden' is that you have not yet authenticated as
user admin, so the scripts barf with a 401 error.

The fix: login to a shell, become root, and familiarise yourself with
Cobalt's meta-verify script. You need to fix all invalid sites and users,
then all valid sites and users. *Then* go to the default setup page at
http://ip.add.re.ss and fill in the relevant bits, then apply the changes.
Bingo - fixed.

Of course, you could be in an entirely different situation here, so YMMV :)

Graeme
-- 
Graeme Fowler
System Administrator
Host Europe Group PLC