Question Installation fails. No access to "/site/administrator.index.php

Trying to install Kunena V 4.x on Joomla! 3.5.1 Stable on 64bit Ubuntu, but get the following error

---

Forbidden

You don't have permission to access /dc3/administrator/index.php on this server.

---

I've installed other packages/extensions including CB without problems. In addition, I've (briefly) changed the permissions on the file to rw for everybody, but the result is the same.

Thanks

Hello,

Do-you using a software firewall on your site or from your hoster ?

You may contact first your webhosting provider first and ask them if they have any security rules that might be the cause of the blocking.

Yes, I'm running a firewall.

I briefly disable the firewall and can start the installation, but it doesn't finish.

Why would there be an issue with the firewall. Other packages can be installed without problems.

In addition, why would the installation not finish; is there a way to debug installs?

Thanks

Where the installation stops exactly ?

The installation stops after I click on the Upload & Install Button

To recap, the issues are

1. If I use the firewall, I get an error indicating that I don't have access to index.php when I click on the Upload & Install Button
2. If I disable the firewall, I don't get any messages when I click on the Upload & Install Button, but the installation never completes

My questions are:

1. Why is there an issue with the firewall, given that I can install other packages/additons andf I can get to the site
2. How can I determine why the installation doesn't complete

1°) The firewall blocks the access to the /site/administrator.inde​x.php page so the installation can't start
2°) You can look on the php logs to see if you have errors in the same time you have tried the install of Kunena without the firewall

It's not a firewall issue, as stopping the firewall and clearing all iptables still gives the error. Looked at the apache error log and found this.

---

[Thu Apr 28 12:06:29.577575 2016] [:error] [pid 14485] [client 60.225.3.224] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_UNMATCHED_BOUNDARY" required. [file "/etc/modsecurity/modsecurity.conf"] [line "81"] [id "200003"] [msg "Multipart parser detected a possible unmatched boundary."] [uri "/dc3/administrator/index.php"] [unique_id "VyFwE5ZrSWQAADiVOEAAAAAD"]

---

Hello,

So, did-you have tried to disable mod_security to see if it's works better ?

Yes, have disabled rule MULTIPART_UNMATCHED_BOUNDARY, and the installation works.

Trailing through the net, it seems to be related to lines starting with "--" for example

---

curl 'https://localhost/group/control_panel/manage?p_auth=MWq0gmZw&p_p_id=166&p_p_lifecycle=1&p_p_state=pop_up&p_p_mode=view&doAsGroupId=10328&refererPlid=10331&controlPanelCategory=current_site.content&_166_refererPortletName=15&_166_refererWebDAVToken=journal&_166_scopeTitle=Templates&_166_struts_action=%2Fdynamic_data_mapping%2Fedit_template' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' -H 'Accept-Encoding: gzip, deflate' -H 'Accept-Language: en-US,en;q=0.5' -H 'Connection: keep-alive' -H 'Cookie: JSESSIONID=E10AB37213FD6D61DE10A72AB8FF1A3A; LFR_SESSION_STATE_10345=1390888801890' -H 'DNT: 1' -H 'Host: localhost' -H 'Referer: https://localhost/group/control_panel/manage?p_p_id=166&p_p_lifecycle=0&p_p_state=pop_up&doAsGroupId=10328&refererPlid=10331&controlPanelCategory=current_site.content&_166_refererPortletName=15&_166_refererWebDAVToken=journal&_166_scopeTitle=Templates&_166_cmd=update&_166_struts_action=%2Fdynamic_data_mapping%2Fedit_template&_166_redirect=https%3A%2F%2Flocalhost%2Fgroup%2Fcontrol_panel%2Fmanage%3Fp_p_id%3D166%26p_p_lifecycle%3D0%26p_p_state%3Dpop_up%26p_p_mode%3Dview%26doAsGroupId%3D10328%26refererPlid%3D10331%26controlPanelCategory%3Dcurrent_site.content%26_166_refererPortletName%3D15%26_166_refererWebDAVToken%3Djournal%26_166_scopeTitle%3DTemplates%26_166_groupId%3D10328%26_166_showHeader%3D0%26_166_classNameId%3D10102%26_166_eventName%3DselectStructure%26_166_struts_action%3D%252Fdynamic_data_mapping%252Fview_template&_166_templateId=10850&_166_groupId=10328&_166_classNameId=10102&_166_classPK=0&_166_type=display&_166_structureAvailableFields=' -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:26.0) Gecko/20100101 Firefox/26.0' -H 'Content-Type: multipart/form-data; boundary=

---

1835282785777842564651277339' --data-binary $'Content-Type: multipart/form-data; boundary=

---

1835282785777842564651277339\r\nContent-Length: 3492\r\n\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_formDate"\r\n\r\n1390888796288\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_cmd"\r\n\r\nupdate\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_redirect"\r\n\r\nhttps://localhost/group/control_panel/manage?p_p_id=166&p_p_lifecycle=0&p_p_state=pop_up&p_p_mode=view&doAsGroupId=10328&refererPlid=10331&controlPanelCategory=current_site.content&_166_refererPortletName=15&_166_refererWebDAVToken=journal&_166_scopeTitle=Templates&_166_groupId=10328&_166_showHeader=0&_166_classNameId=10102&_166_eventName=selectStructure&_166_struts_action=%2Fdynamic_data_mapping%2Fview_template\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_closeRedirect"\r\n\r\n\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_portletResource"\r\n\r\n\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_templateId"\r\n\r\n10850\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_groupId"\r\n\r\n10328\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_classNameId"\r\n\r\n10102\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_classPK"\r\n\r\n0\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_type"\r\n\r\ndisplay\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_structureAvailableFields"\r\n\r\n\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_saveAndContinue"\r\n\r\n1\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_name"\r\n\r\nTest\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_name_en_AU"\r\n\r\nTest\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_language"\r\n\r\nftl\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_description"\r\n\r\n\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_description_en_AU"\r\n\r\n\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_smallImage"\r\n\r\nfalse\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_type"\r\n\r\nfalse\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_smallImageFile"; filename=""\r\nContent-Type: application/octet-stream\r\n\r\n\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_scriptContent"\r\n\r\n<#--\r\nDisplay templates are used to lay out the fields defined in a data\r\ndefinition.\r\n\r\nPlease use the left panel to quickly add commonly used variables.\r\nAutocomplete is also available and can be invoked by typing "${".\r\n-->\r\n

---

1835282785777842564651277339\r\nContent-Disposition: form-data; name="_166_script"; filename=""\r\nContent-Type: application/octet-stream\r\n\r\n\r\n

---

1835282785777842564651277339--\r\n'

---

We are having problem also? Ours was already installed and we did not even try to update but getting error and will not even allow to forum backen has attached pice error.

A few days before this happened i noticed something weird on the back end when we accesed forum it was showing a login module.

Can someone help us we do not know how to fix or do these things we are a small nonprofit with volunteers and we recently lost our admin/volunteer