WebSphere Application Server & Liberty

 View Only

 After applying FP21, IHS v9.0.5 failed to start due to "AH10504: ap_filepath_merge: UNC path xxxx not allowed by UNCList"

Jump to  Best Answer
Yoshiki Yamada's profile image
Yoshiki Yamada posted Thu December 12, 2024 05:51 AM

When we tried to start IHS, we got the error message below.

C:\IBM\HTTPServer\bin>apache.exe
[Mon Nov 04 00:34:19.491646 2024] [core:error] [pid 1533:tid 913] (13)Permission denied: AH10504: ap_filepath_merge: UNC path //abc.com/Doclinks not allowed by UNCList


Actually I'm using UNC path for a DocumentRoot. Why this issue suddenly started to happen?

Yoshiki Yamada's profile image
Yoshiki Yamada  Best Answer

This is due to the change introduced by the following APAR.

PH61893, PH62263: IBM HTTP Server is vulnerable to multiple vulnerabilities due to the included Apache HTTP Server
https://www.ibm.com/support/pages/node/7159808
```
Behavior Changes on Windows:
    Use of network shares (such as //servername) requires the IP or hostname to be specified with the UNCList directive. The directive should appear before the directives (such as Alias or DocumentRoot or <Directory>) that reference the //servername remote path.
```
You need to add "UNCList abc.com" just before the DocumentRoot.