FastCGI Error Access to the script denied

Question

I have a Debian Squeeze server running nginx + php-fpm + fastcgi. I have a typo3 installation on this server which runs well.

No I installed OTRS and I get an error that I do not understand:

2012/06/25 15:35:38 [error] 16510#0: *34 FastCGI sent in stderr: "Access to the script '/opt/otrs/bin/fcgi-bin/index.pl' has been denied (see security.limit_extensions)" while reading response header from upstream, client: ..., server: support.....com, request: "GET /otrs/index.pl HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "support.....com", referrer: "http://support.....com/"

Why do I get this error? The otrs directory is writable for the webserver, so this is not the problem. Any ideas?

PJ Brunet · Accepted Answer · 2016-11-23T08:07:39.097

I had a similar problem with index.html files which is how I got here from Google. Among other problems, switching from spawn to php-fpm gave most of my domains "Access denied" errors. I got the same "see security.limit_extensions" in my error.log. The affected index.html files didn't have any PHP code either, but I assume NginX still tried to execute them through php-fpm, thus throwing the errors. I'm using CentOS:

Edit /etc/php-fpm.d/www.conf
Uncomment this line, by default .htm and .html are blocked:

security.limit_extensions = .php .php3 .php4 .php5 .html .htm

service php-fpm restart

score 1 · Answer 2 · answered Jun 25 '12 at 13:51

1

OTRS is written in Perl, so you cannot run it through PHP-FPM. That's why you get this error. I suggest reading this article for more information about running OTRS with nginx.

answered Jun 25 '12 at 13:51

Vladimir Blaskov

6,183
1
27
22

no, fastcgi is actually running on port 9000 I forgot to mention that. But thanks for the article I go throug it – DarkLeafyGreen Jun 25 '12 at 14:21
Would you please provide server configuration for your OTRS virtual host. – Vladimir Blaskov Jun 25 '12 at 17:20
the vhost config is quite the same as in your linked article – DarkLeafyGreen Jun 26 '12 at 06:18
That's not possible - the article uses UNIX socket for communication, while you're obviously using TCP on port 9000. Look, the problem is that a PHP FastCGI manager is listening on port 9000 instead of Perl FastCGI manager. – Vladimir Blaskov Jun 26 '12 at 06:25
Yes your, right. I will check this. – DarkLeafyGreen Jun 26 '12 at 06:47

score -1 · Answer 3 · answered Dec 15 '13 at 13:30

-1

You may try to add to you site's nginx conf file the following sentence in location /: index index.php index.html;

answered Dec 15 '13 at 13:30

Alberto S.

101
2

I don't think setting an index will fix this problem – Drew Khoury Dec 15 '13 at 20:48

FastCGI Error Access to the script denied

3 Answers3