• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue roundcube: FORBIDDEN you dont have permission to acess /roundcube/skins/larry/watermark.html

tkalfaoglu

Silver Pleskian
Customer complains that while in webmail, they are getting a FORBIDDEN error.

FORBIDDEN you dont have permission to acess /roundcube/skins/larry/watermark.html

is what is displayed on the right frame..

I checked the file, it appears to be owned by root:root and has -rw-r--r-- ..
it resides in /usr/share/psa-roundcube/skins/larry and not in /roundcube of course..

=t
 
I just found this in the logs.. I don't know if they are related.

[Thu Nov 21 13:25:03.945967 2019] [fcgid:warn] [pid 22150:tid 140685453739776] [client 78.186.110.247:37998] mod_fcgid: stderr: PHP Warning: file_put_contents(/var/log/plesk-roundcube/sendmail): failed to open stream: Permission denied in /usr/share/psa-roundcube/program/lib/Roundcube/rcube.php on line 1259, referer: http://webmail.xxxxxx.com.xx/?_task=mail&_action=compose&_id=15795343945dd665dda57f9
 
Many thanks.. I went into Apache settings, and I see suexec checked. It gave an error when I tried to save it without doing anything, saying PHP5 was used by domains hence it cannot be disabled.
 
Interesting that I also get
TESTING 1..2..3.. page
in:
http://webmail.xxxxxx.xxx.xx/?_task=mail&_mbox=INBOX

refreshing the page does not help.. something is very strange..
I also see lots of these in the error logs:
there is no .htaccess file. the files are all chmod 755 -- I just did that..


[Thu Nov 21 14:51:26.433693 2019] [:error] [pid 425:tid 140067968296704] [client 78.186.110.247:3964] client denied by server configuration: /var/www/vhosts/xxxx/httpdocs/css/index.css, referer: http://xxxx
[Thu Nov 21 14:51:26.435982 2019] [:error] [pid 425:tid 140068127758080] [client 78.186.110.247:3966] client denied by server configuration: /var/www/vhosts/xxxx/httpdocs/css/menu.css, referer: http://xxxx
[Thu Nov 21 14:51:26.534606 2019] [:error] [pid 425:tid 140067951511296] [client 78.186.110.247:3968] client denied by server configuration: /var/www/vhosts/xxxx/httpdocs/images/flag-transparent.png, referer: http://xxxx
 
As strange as it seems, the error stopped happening after a reboot.
If I keep clicking the mail headers in roundcube I occasionally get a

Unable to connect
Firefox can’t establish a connection to the server at webmail.xxxxx.

error however.. I checked both mod_evasive (not triggered), and mod_security (not loaded)..
 
Back
Top