×
Kunena 5.1.18 Released (30 Jun 2020)

The Kunena team has announce the arrival of Kunena 5.1.18 [K 5.1.18] which is now available for download as a native Joomla extension for J! 3.9.x. This version addresses most of the issues that were discovered in K 5.1 and issues discovered during the development stages of K 5.1.

Question Installation fails. No access to "/site/administrator.index.php

More
4 years 2 months ago #1 by lister171254
Trying to install Kunena V 4.x on Joomla! 3.5.1 Stable on 64bit Ubuntu, but get the following error


Forbidden

You don't have permission to access /dc3/administrator/index.php on this server.

I've installed other packages/extensions including CB without problems. In addition, I've (briefly) changed the permissions on the file to rw for everybody, but the result is the same.

Thanks

Please Log in or Create an account to join the conversation.

More
4 years 2 months ago - 4 years 2 months ago #2 by xillibit
Hello,

Do-you using a software firewall on your site or from your hoster ?

You may contact first your webhosting provider first and ask them if they have any security rules that might be the cause of the blocking.

I don't provide support by PM, because this can be useful for someone else.
Last edit: 4 years 2 months ago by xillibit.

Please Log in or Create an account to join the conversation.

More
4 years 2 months ago #3 by lister171254
Yes, I'm running a firewall.

I briefly disable the firewall and can start the installation, but it doesn't finish.

Why would there be an issue with the firewall. Other packages can be installed without problems.

In addition, why would the installation not finish; is there a way to debug installs?

Thanks

Please Log in or Create an account to join the conversation.

More
4 years 2 months ago #4 by xillibit
Where the installation stops exactly ?

I don't provide support by PM, because this can be useful for someone else.

Please Log in or Create an account to join the conversation.

More
4 years 2 months ago #5 by lister171254
The installation stops after I click on the Upload & Install Button

To recap, the issues are
  1. If I use the firewall, I get an error indicating that I don't have access to index.php when I click on the Upload & Install Button
  2. If I disable the firewall, I don't get any messages when I click on the Upload & Install Button, but the installation never completes

My questions are:
  1. Why is there an issue with the firewall, given that I can install other packages/additons andf I can get to the site
  2. How can I determine why the installation doesn't complete

Please Log in or Create an account to join the conversation.

More
4 years 2 months ago #6 by xillibit
1°) The firewall blocks the access to the /site/administrator.inde​x.php page so the installation can't start
2°) You can look on the php logs to see if you have errors in the same time you have tried the install of Kunena without the firewall

I don't provide support by PM, because this can be useful for someone else.

Please Log in or Create an account to join the conversation.

More
4 years 2 months ago #7 by lister171254
It's not a firewall issue, as stopping the firewall and clearing all iptables still gives the error. Looked at the apache error log and found this.
[Thu Apr 28 12:06:29.577575 2016] [:error] [pid 14485] [client 60.225.3.224] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_UNMATCHED_BOUNDARY" required. [line "81"] [id "200003"] [msg "Multipart parser detected a possible unmatched boundary."] [uri "/dc3/administrator/index.php"] [unique_id "VyFwE5ZrSWQAADiVOEAAAAAD"] --------------------------------------------------------------[file "/etc/modsecurity/modsecurity.conf"] [line "81"] [id "200003"] [msg "Multipart parser detected a possible unmatched boundary."] [uri "/dc3/administrator/index.php"] [unique_id "VyFwE5ZrSWQAADiVOEAAAAAD"]

Please Log in or Create an account to join the conversation.

More
4 years 2 months ago #8 by xillibit
Hello,

So, did-you have tried to disable mod_security to see if it's works better ?

I don't provide support by PM, because this can be useful for someone else.

Please Log in or Create an account to join the conversation.

More
4 years 2 months ago #9 by lister171254
Yes, have disabled rule MULTIPART_UNMATCHED_BOUNDARY, and the installation works.

Trailing through the net, it seems to be related to lines starting with "--" for example
curl 'https://localhost/group/control_panel/manage?p_auth=MWq0gmZw&p_p_id=166&p_p_lifecycle=1&p_p_state=pop_up&p_p_mode=view&doAsGroupId=10328&refererPlid=10331&controlPanelCategory=current_site.content&_166_refererPortletName=15&_166_refererWebDAVToken=journal&_166_scopeTitle=Templates&_166_struts_action=%2Fdynamic_data_mapping%2Fedit_template' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' -H 'Accept-Encoding: gzip, deflate' -H 'Accept-Language: en-US,en;q=0.5' -H 'Connection: keep-alive' -H 'Cookie: JSESSIONID=E10AB37213FD6D61DE10A72AB8FF1A3A; LFR_SESSION_STATE_10345=1390888801890' -H 'DNT: 1' -H 'Host: localhost' -H 'Referer: https://localhost/group/control_panel/manage?p_p_id=166&p_p_lifecycle=0&p_p_state=pop_up&doAsGroupId=10328&refererPlid=10331&controlPanelCategory=current_site.content&_166_refererPortletName=15&_166_refererWebDAVToken=journal&_166_scopeTitle=Templates&_166_cmd=update&_166_struts_action=%2Fdynamic_data_mapping%2Fedit_template&_166_redirect=https%3A%2F%2Flocalhost%2Fgroup%2Fcontrol_panel%2Fmanage%3Fp_p_id%3D166%26p_p_lifecycle%3D0%26p_p_state%3Dpop_up%26p_p_mode%3Dview%26doAsGroupId%3D10328%26refererPlid%3D10331%26controlPanelCategory%3Dcurrent_site.content%26_166_refererPortletName%3D15%26_166_refererWebDAVToken%3Djournal%26_166_scopeTitle%3DTemplates%26_166_groupId%3D10328%26_166_showHeader%3D0%26_166_classNameId%3D10102%26_166_eventName%3DselectStructure%26_166_struts_action%3D%252Fdynamic_data_mapping%252Fview_template&_166_templateId=10850&_166_groupId=10328&_166_classNameId=10102&_166_classPK=0&_166_type=display&_166_structureAvailableFields=' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:26.0) Gecko/20100101 Firefox/26.0' -H 'Content-Type: multipart/form-data; boundary=
1835282785777842564651277339' --data-binary $'Content-Type: multipart/form-data; boundary=
1835282785777842564651277339\r\nContent-Length: 3492\r\n\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_formDate"\r\n\r\n1390888796288\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_cmd"\r\n\r\nupdate\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_redirect"\r\n\r\nhttps://localhost/group/control_panel/manage?p_p_id=166&p_p_lifecycle=0&p_p_state=pop_up&p_p_mode=view&doAsGroupId=10328&refererPlid=10331&controlPanelCategory=current_site.content&_166_refererPortletName=15&_166_refererWebDAVToken=journal&_166_scopeTitle=Templates&_166_groupId=10328&_166_showHeader=0&_166_classNameId=10102&_166_eventName=selectStructure&_166_struts_action=%2Fdynamic_data_mapping%2Fview_template\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_closeRedirect"\r\n\r\n\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_portletResource"\r\n\r\n\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_templateId"\r\n\r\n10850\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_groupId"\r\n\r\n10328\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_classNameId"\r\n\r\n10102\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_classPK"\r\n\r\n0\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_type"\r\n\r\ndisplay\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_structureAvailableFields"\r\n\r\n\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_saveAndContinue"\r\n\r\n1\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_name"\r\n\r\nTest\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_name_en_AU"\r\n\r\nTest\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_language"\r\n\r\nftl\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_description"\r\n\r\n\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_description_en_AU"\r\n\r\n\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_smallImage"\r\n\r\nfalse\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_type"\r\n\r\nfalse\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_smallImageFile"; filename=""\r\nContent-Type: application/octet-stream\r\n\r\n\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_scriptContent"\r\n\r\n<#--\r\nDisplay templates are used to lay out the fields defined in a data\r\ndefinition.\r\n\r\nPlease use the left panel to quickly add commonly used variables.\r\nAutocomplete is also available and can be invoked by typing "${".\r\n-->\r\n
1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_script"; filename=""\r\nContent-Type: application/octet-stream\r\n\r\n\r\n
1835282785777842564651277339--\r\n'

Please Log in or Create an account to join the conversation.

More
4 years 1 month ago #10 by NAIDW
We are having problem also? Ours was already installed and we did not even try to update but getting error and will not even allow to forum backen has attached pice error.

A few days before this happened i noticed something weird on the back end when we accesed forum it was showing a login module.

Can someone help us we do not know how to fix or do these things we are a small nonprofit with volunteers and we recently lost our admin/volunteer
Attachments:

Please Log in or Create an account to join the conversation.

  • Not Allowed: to create new topic.
  • Not Allowed: to reply.
  • Not Allowed: to edit your message.
Time to create page: 0.133 seconds