Client denied by server configuration

Nextcloud version: v18.0.3
Operating system and version: Debian 10
Apache or nginx version: 2.4
PHP version: 7.4

The issue you are facing:

I see that error in Apache error log in each turn on of my PC with Nextcloud for Windows

[Wed Apr 01 11:43:17.490349 2020] [access_compat:error] [pid 7616] [client xx.xx.xx.xx:62736] AH01797: client denied by server configuration: /var/www/nextcloud/config

[Wed Apr 01 12:20:12.702649 2020] [access_compat:error] [pid 9641] [client xx.xx.xx.xx:63026] AH01797: client denied by server configuration: /var/www/nextcloud/config

Is this the first time you’ve seen this error?: Yes

Steps to replicate it:

  1. Turn on computer
  2. Wait for starting up and loading Nextcloud Desktop client (for Windows)
  3. See Error.log of Apache
  4. Unban from Fail2Ban (because this behavior fire a ban with my config)

The output of your Nextcloud log in Admin > Logging:

No entries logged at the moment of error 

The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):

<?php
$CONFIG = array (
  'passwordsalt' => 'xxxx',
  'secret' => 'xxxx',
  'trusted_domains' => 
  array (
    0 => 'localhost',
    1 => '192.168.1.*',
    2 => '192.168.0.*',
    3 => 'cloud.my_server.com',
  ),
  'datadirectory' => '/mnt/HDD1/NC_data',
  'dbtype' => 'mysql',
  'version' => '18.0.3.0',
  'overwrite.cli.url' => 'https://cloud.myserver.com/',
  'htaccess.RewriteBase' => '/',
  'dbname' => 'xxxx',
  'dbhost' => 'localhost',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'mysql.utf8mb4' => true,
  'dbuser' => 'xxxx',
  'dbpassword' => 'xxxx',
  'installed' => true,
  'memcache.local' => '\\OC\\Memcache\\Redis',
  'redis' => 
  array (
    'host' => '/var/run/redis/redis-server.sock',
    'port' => 0,
    'timeout' => 0.0,
  ),
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'blacklisted_files' => 
  array (
    0 => '.htaccess',
    1 => 'Thumbs.db',
    2 => 'thumbs.db',
  ),
  'loglevel' => 2,
  'log_rotate_size' => 3145728,
  'mail_smtpmode' => 'smtp',
  'mail_smtpauthtype' => 'LOGIN',
  'mail_smtpsecure' => 'ssl',
  'mail_from_address' => 'xxxx',
  'mail_domain' => 'gmail.com',
  'mail_smtpauth' => 1,
  'mail_smtphost' => 'smtp.gmail.com',
  'mail_smtpport' => '465',
  'mail_smtpname' => 'xxxx',
  'mail_smtppassword' => 'xxxx',
  'preview_max_x' => 150,
  'preview_max_y' => 150,
  'preview_max_filesize_image' => 1,
  'instanceid' => 'xxxx',
  'app_install_overwrite' => 
  array (
    0 => 'sharerenamer',
  ),
  'maintenance' => false,
);

The output of your Apache Access:

I have marked the exact moment when the error occurred

   WAN_IP    - MY_USER [01/Apr/2020:11:43:16 +0200] "GET /status.php HTTP/1.1" 200 5398 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:11:43:17 +0200] "PROPFIND /remote.php/webdav/ HTTP/1.1" 207 1172 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
-> WAN_IP    - MY_USER [01/Apr/2020:11:43:17 +0200] "GET /ocs/v1.php/config?format=json HTTP/1.1" 200 4734 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:11:43:17 +0200] "GET /ocs/v1.php/cloud/capabilities?format=json HTTP/1.1" 200 3492 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:11:43:17 +0200] "GET /ocs/v1.php/cloud/user?format=json HTTP/1.1" 200 1368 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:11:43:17 +0200] "GET /remote.php/dav/avatars/MY_USER/128.png HTTP/1.1" 200 2647 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:11:43:17 +0200] "GET /ocs/v2.php/apps/notifications/api/v2/notifications?format=json HTTP/1.1" 200 925 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:11:43:17 +0200] "GET /ocs/v2.php/cloud/activity?start=0&count=100&format=json HTTP/1.1" 200 22867 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"

-> WAN_IP    - MY_USER [01/Apr/2020:12:20:12 +0200] "GET /status.php HTTP/1.1" 200 4874 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:20:12 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 1293 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:20:12 +0200] "GET /ocs/v1.php/config?format=json HTTP/1.1" 200 4734 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:20:12 +0200] "GET /ocs/v1.php/cloud/capabilities?format=json HTTP/1.1" 200 3492 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:20:12 +0200] "GET /ocs/v1.php/cloud/user?format=json HTTP/1.1" 200 1368 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:20:12 +0200] "GET /remote.php/dav/avatars/MY_USER/128.png HTTP/1.1" 200 2647 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:20:12 +0200] "GET /ocs/v2.php/apps/notifications/api/v2/notifications?format=json HTTP/1.1" 304 251 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:20:13 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 12378 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:20:37 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:20:46 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:21:09 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:21:16 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:21:41 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:21:46 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:22:13 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:22:16 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 1194 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:22:45 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:22:46 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 1194 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:23:16 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:23:16 +0200] "GET /ocs/v2.php/apps/notifications/api/v2/notifications?format=json HTTP/1.1" 304 3973 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:23:17 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 1214 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:23:46 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:23:49 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 1214 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:24:16 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:24:21 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 1214 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:24:46 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:24:53 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:25:16 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:25:25 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:25:46 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:25:57 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:26:16 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:26:29 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:26:46 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:27:01 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:27:16 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:27:33 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:27:46 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:28:05 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:28:16 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:28:16 +0200] "GET /ocs/v2.php/apps/notifications/api/v2/notifications?format=json HTTP/1.1" 304 3973 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:28:37 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:28:46 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:29:09 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:29:16 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:29:41 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:29:46 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4916 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:30:13 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:30:16 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 1194 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:30:45 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 4936 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"
   WAN_IP    - MY_USER [01/Apr/2020:12:30:46 +0200] "PROPFIND /remote.php/dav/files/MY_USER/ HTTP/1.1" 207 1194 "-" "Mozilla/5.0 (Windows) mirall/2.6.4stable-Win64 (build 20200303) (Nextcloud)"

.

.

.

Attempts of fix the problem:

Adding Satisfy Any in the vHost inside <Directory>
But it did not work because the error came back at the second chance (log at 12:20:12)

Read

1 Like

https://github.com/nextcloud/server/issues/15688 is the related report at GitHub.

1 Like

Thanks you very much, but if you had read the last lines of my report, I tried to fix it with the information of that exact thread and did not work, for that I opened this post.

Thanks you! I wrote in that report yesterday, I do not know how to fix this problem, because I would not like to blind fail2ban with an…

[Definition]
#
ignoreregex = /usr/share/nextcloud/config$ 

Because this not fix the problem

Same issue here. Access log says:
nextcloud-ssl-access.log:31.17.248.148 - nextcloud [18/May/2020:19:37:38 +0200] "GET /ocs/v1.php/config?format=json HTTP/1.1" 200 1195 "-" "Mozilla/5.0 (Linux) mirall/2.6.4git (Nextcloud)"
Could this be related to .htaccess?

# Section for Apache 2.4 to 2.6
<IfModule mod_authz_core.c>
  Require all denied
</IfModule>
<IfModule mod_access_compat.c>
  Order Allow,Deny
  Deny from all
  Satisfy All
</IfModule>

# Section for Apache 2.2
<IfModule !mod_authz_core.c>
  <IfModule !mod_access_compat.c>
    <IfModule mod_authz_host.c>
      Order Allow,Deny
      Deny from all
    </IfModule>
    Satisfy All
  </IfModule>
</IfModule>

# Section for Apache 2.2 to 2.6
<IfModule mod_autoindex.c>
  IndexIgnore *
</IfModule>