Apache 2.4.53 取得 AH00027:未完成身份驗證,但未經 /CN=XXXX 驗證,不允許請求。未配置身份驗證?

Apache 2.4.53 取得 AH00027:未完成身份驗證,但未經 /CN=XXXX 驗證,不允許請求。未配置身份驗證?

我們有一個 Apache 2.4.53,當他們嘗試存取它時,我們看到一個 500 錯誤,並在 error_log 檔案中看到以下內容:

[Thu Jan 25 23:56:22.600893 2024] [core:error] [pid 24313:tid 140492557752064] [client 172.31.xx.yy:39564] AH00027: No authentication done but request not allowed without authentication for /CN=XXXX.... Authentication not configured?

ssl.conf 設定了 VirtualHost:

<VirtualHost *:7513>
  SSLEngine on
  SSLCompression off
  SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
  SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-GCM-SHA256:AES256+EDH:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4:!NULL:!3DES
  SSLHonorCipherOrder on
.
.
  SSLVerifyClient require
  SSLVerifyDepth  10
  SSLOptions +ExportCertData +StdEnvVars +LegacyDNStringFormat
  DocumentRoot "/apps/aaa/bbb"
  ServerName sim.foo.com
  ServerAlias sim.foo.com
  ScriptAlias /rest/users "/apps/aaa/bbb/test7.pl"
  <Directory "/apps/aaa/bbb">
    Allow from all
  </Directory>

  <Location /rest>
    AuthType None
    Require all granted
  </Location>
</VirtualHost>

我不明白為什麼我們會收到此錯誤,因為 和 <Location /rest> 似乎應該允許訪問,但我對這個特定係統也不太熟悉,所以我希望有人能夠指出我可能出了什麼問題以及如何解決問題?

謝謝,吉姆

EDIT1:新增 apachectl -S 和 apachectl -t 輸出:

[root@simfed01 conf]# /apps/products/apache/2.4.53/bin/apachectl -S
VirtualHost configuration:
ServerRoot: "/apps/products/apache/2.4.53"
Main DocumentRoot: "/apps/products/apache/2.4.53/htdocs"
Main ErrorLog: "/apps/products/apache/2.4.53/logs/error_log"
Mutex ssl-cache: using_defaults
Mutex default: dir="/apps/products/apache/2.4.53/logs/"     mechanism=default
Mutex rewrite-map: using_defaults
Mutex ssl-stapling-refresh: using_defaults
Mutex ssl-stapling: using_defaults
PidFile: "/apps/products/apache/2.4.53/logs/httpd.pid"
Define: DUMP_VHOSTS
Define: DUMP_RUN_CFG
User: name="orcladmin" id=2008
Group: name="orcladmin" id=4503

[root@simfed01 conf]# /apps/products/apache/2.4.53/bin/apachectl -t
Syntax OK

相關內容