Shibboleth.sso/Status 403 error

[Nate Klingenstein]

Bai,

The Status handler has an ACL associated with it.  You need to make  
sure your IP address is included in that ACL.

https://wiki.shibboleth.net/confluence/display/SHIB2/ 
NativeSPHandler#NativeSPHandler-StatusHandler

To see what IP address your requests are coming from, you can check  
ssl_access_log.  Alternatively, from the web server's shell, try curl - 
k https://127.0.0.1/Shibboleth.sso/Status (127.0.0.1 is the default  
ACL, and this causes the request to originate from 127.0.0.1).

Take care,
Nate.

On May 11, 2012, at 17:50 , Bai Shen wrote:

> I'm trying to set up an SP to test with testshib.org but I'm having  
> some trouble.  Whenever I try and connect to Shibboleth.sso/Status I  
> get a 403 error.  I don't see anything in the Apache or Shibboleth  
> logs.
>
> Is there something else I should be looking at?  This occurs wether  
> I use the testshib xml file or the default shibboleth2 xml file.   
> The only difference is that the default file gives me an error  
> saying "no MetadataProvider available, configuration is probably  
> unusable"
>
> Thanks.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120511/043a1a79/attachment.html