AH01630: client denied by server configuration Nginx / Apache Origin: Edge & web server OSI layer 7 · Application Last updated 5 Nov 2026

Apache: [authz_core:error] AH01630: client denied by server configuration: /var/www/html/

Apache 2.4 authorisation denied access to the directory (403) because no Require all granted applies.

Exact message you may see AH01630: client denied by server configuration: /var/www/html/[authz_core:error] AH01630: client denied by server configurationclient denied by server configuration Apache 2.4You don't have permission to access this resource. Apache 403AH01797: client denied by server configuration
Explore the map of this error Full error map →
Seen on: Apache Linux

Meaning

Apache 2.4 replaced Order/Allow/Deny with Require. Add <Directory /var/www/html> Require all granted </Directory> in the vhost (and AllowOverride All if using .htaccess). Check parent <Directory /> defaults, Require ip rules and .htaccess leftovers using 2.2 syntax.

Common causes

  • Missing Require all granted
  • Config migrated from Apache 2.2 (Order/Allow)
  • DocumentRoot outside the allowed <Directory>
  • Require ip excluding your IP
  • Alias target not authorised

⚡ Quick fix

  1. <Directory /var/www/html> Require all granted </Directory>
  2. Replace Order allow,deny / Allow from all with Require all granted
  3. Reload: sudo apachectl configtest && sudo systemctl reload apache2

Detailed fix by platform

Linux

  1. sudo apachectl -S && grep -rn "Require\|Order" /etc/apache2/sites-enabled/

How to diagnose

  1. Directive — Require used?
  2. Version — 2.4 syntax?
  3. Path — Directory block covers it?

🔧 Still not fixed?

Many errors look alike. If the steps above didn’t solve it, one of these is probably what you’re facing:

Where this error sits

Origin: Edge & web server. Errors that are often confused with or caused by this one (click to open):

.htaccess: Invalid command (500 Internal Server Error) — Apache: [core:alert] /var/www/html/.htaccess: Invalid command 'php_value', perhaps misspelled or defined by a module not included in the server configuration (Nginx / Apache).htaccess: Invalid co…403 — HTTP 403 Forbidden (HTTP)403AH00015: Unable to open logs — Apache: AH00091: apache2: could not open error log file /var/log/apache2/error.log. AH00015: Unable to open logs (Permission denied) (Nginx / Apache)AH00015: Unable to op…AH00037: Symbolic link not allowed or link target not accessible — Apache: [core:error] AH00037: Symbolic link not allowed or link target not accessible: /var/www/html/current (Nginx / Apache)AH00037: Symbolic lin…AH00112: DocumentRoot does not exist — Apache: AH00112: Warning: DocumentRoot [/var/www/example.com/public_html] does not exist (Nginx / Apache)AH00112: DocumentRoot…AH00128: File does not exist — Apache: [core:info] AH00128: File does not exist: /var/www/html/favicon.ico (404) (Nginx / Apache)AH00128: File does no…AH00526: Syntax error on line of apache config — Apache: AH00526: Syntax error on line 12 of /etc/apache2/sites-enabled/site.conf: Invalid command 'Foo', perhaps misspelled or defined by a module not included in the server configuration (Nginx / Apache)AH00526: Syntax error…AH00548: NameVirtualHost has no effect — Apache: [core:warn] AH00548: NameVirtualHost has no effect and will be removed in the next release /etc/apache2/ports.conf:5 (Nginx / Apache)AH00548: NameVirtualH…AH01630: …

Explore the map of this error Full error map →

🧠 Still stuck? Analyze your error

Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.

💬 What worked for others

No tips yet — did something else fix this for you?

Share what worked for you

Tips are checked by an editor before they appear. Links are removed.