Overview
This article provides instructions to resolve the AH01630: client denied by server configuration error that occurs after enabling the Messenger v3 service. When this issue is present, Apache serves its default welcome page instead of routing traffic to the application interface.
Symptoms
Attempting to access the Messenger v3 service displays the default Apache landing page. Reviewing the Apache error logs reveals an authorization denial entry similar to the following:
[Thu Aug 24 04:31:24.428103 2023] [authz_core:error] [pid 91755:tid 139645249562368] [client 192.168.1.133:60254] AH01630: client denied by server configuration: /home/csf/public_html/
Resolution Steps
To restore access, update the Apache directory permissions by modifying the .htaccess file located at /home/csf/public_html/.htaccess.
- Navigate to the /home/csf/public_html/ directory via SSH or your preferred file management tool.
- Open the .htaccess file in a text editor.
- Add the directive Require all granted to the very beginning of the file.
- Verify that the configuration matches the following structure:
Require all granted
DirectoryIndex index.php index.cgi index.html index.htm
#Options +FollowSymLinks +ExecCGI
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ /index.php [L,QSA]
- Save the file and refresh the Messenger v3 service in your web browser to confirm proper functionality.
CloudLinux Configuration
If your server environment utilizes CloudLinux, CageFS may restrict filesystem access for the csf user. Execute the following command via SSH to disable CageFS for this account:
cagefsctl --disable csf
Troubleshooting & Common Issues
- Persistent Access Denied Errors: If the AH01630 error remains after updating .htaccess, restart or reload Apache to ensure configuration changes are applied.
- File Permission Restrictions: Verify that the web server user (e.g., apache or www-data) has read and execute permissions on the /home/csf/public_html/ directory and its contents.
- Security Module Interference: Check for conflicting rules in ModSecurity, custom firewall configurations, or third-party security plugins that may be blocking requests to the service endpoint.