Forbidden error message in a working roundcube install on Centos 7

[wp.rauchholz]

I installed roundcube and mostly it works fine.

But from time to tie it happens that when I hit a button - being logged in - I get a the following message:
Forbidden
You don't have permission to access /roundcubemail/ on this server.

When I refresh the page I can continue normal.
I checked in /var/log/httpd/error_log. There is no entry


Any ideas what could go wrong?

[wp.rauchholz]

Trying to debug, getting a bit further
I don't have a roundcubemail.conf file in my /etc/httpd/conf.d directory. Is this a problem?

On the othe hand, I get these errors in the /var/log/httpd/ssl_error.log
[Mon Jan 23 22:53:37.333778 2017] [:error] [pid 13053] [client 10.5.2.76:52701] client denied by server configuration: /var/www/html/roundcubemail/, referer: https://www.wo-lar.com/roundcubemail/?_task=mail&_caps=pdf%3D1%2Cflash%3D1%2Ctif%3D0&_uid=72&_mbox=INBOX&_action=show

[Mon Jan 23 23:21:06.823300 2017] [:error] [pid 13807] [client 10.5.2.76:57263] client denied by server configuration: /var/www/html/roundcubemail/, referer: https://www.wo-lar.com/roundcubemail/?_task=mail&_caps=pdf%3D1%2Cflash%3D1%2Ctif%3D0&_uid=72&_mbox=INBOX&_action=show
[Mon Jan 23 23:21:06.967877 2017] [:error] [pid 13807] [client 10.5.2.76:57263] client denied by server configuration: /var/www/html/roundcubemail/skins/larry/images/messages.png, referer: https://www.wo-lar.com/roundcubemail/skins/larry/styles.min.css?s=1480262870
[Mon Jan 23 23:21:07.048673 2017] [:error] [pid 13807] [client 10.5.2.76:57263] client denied by server configuration: /var/www/html/roundcubemail/, referer: https://www.wo-lar.com/roundcubemail/?_task=mail&_caps=pdf%3D1%2Cflash%3D1%2Ctif%3D0&_uid=65&_mbox=INBOX&_action=show
[Mon Jan 23 23:21:07.201918 2017] [:error] [pid 13807] [client 10.5.2.76:57263] client denied by server configuration: /var/www/html/favicon.ico
[Mon Jan 23 23:21:07.204102 2017] [:error] [pid 13807] [client 10.5.2.76:57263] client denied by server configuration: /var/www/html/favicon.ico

/var/www/html/roundcubemail is owned by apache:apache
chmod is set to 755

Any ideas what is wrong here?


.

[wp.rauchholz]

Making some progress. SOme ssl errors were caused by error in CN (common name) of openssl.
but I still get htese messages....

[Tue Jan 24 08:12:01.651181 2017] [:error] [pid 17126] [client 10.5.2.76:57609] client denied by server configuration: /var/www/html/roundcubemail/, referer: https://www.wo-lar.com/roundcubemail/?_task=mail&_refresh=1&_uid=5&_mbox=Root
[Tue Jan 24 08:12:01.672394 2017] [:error] [pid 17126] [client 10.5.2.76:57609] client denied by server configuration: /var/www/html/roundcubemail/, referer: https://www.wo-lar.com/roundcubemail/?_task=mail&_mbox=Root
[Tue Jan 24 08:12:01.688289 2017] [:error] [pid 17126] [client 10.5.2.76:57609] client denied by server configuration: /var/www/html/roundcubemail/skins/larry/watermark.html, referer: https://www.wo-lar.com/roundcubemail/?_task=mail&_mbox=Root
[Tue Jan 24 08:12:01.702751 2017] [:error] [pid 17126] [client 10.5.2.76:57609] client denied by server configuration: /var/www/html/roundcubemail/plugins/jqueryui/themes/larry/images/ui-dialog-close.png, referer: https://www.wo-lar.com/roundcubemail/plugins/jqueryui/themes/larry/jquery-ui-1.10.4.custom.css?s=1480262870
[Tue Jan 24 08:12:01.729218 2017] [:error] [pid 17126] [client 10.5.2.76:57609] client denied by server configuration: /var/www/html/roundcubemail/, referer: https://www.wo-lar.com/roundcubemail/?_task=mail&_mbox=Root

Again, all files have apache:apache owners and chmod is set yp -R 755

[SKaero]

Have you checked if SELinux is blocking the connection? Its a common problem with CentOS.

[wp.rauchholz]

Hi SKaero, thanks for answering.
SELINUX is disabled on my server. It should not.

Is the fact there there is no seperate roundcube.conf file for apache a problem?

I also set in defaults.inc.php
$config['force_https'] = true;
$config['use_https'] = true;

No change.

[SKaero]

You don't need to have a special .conf file for Roundcube in some cases you may have one but you don't have to have one. You probably need to set a directory directive for the Roundcube directoy http://httpd.apache.org/docs/2.4/upgrading.html#run-time