Shibboleth.sso/Status 403 error

[Bai Shen]

Ah, I see it now.  I remember seeing it previously, but I thought it was
turned off by default.

I wonder why it doesn't log any errors.

Thanks.

On Fri, May 11, 2012 at 2:10 PM, Nate Klingenstein <ndk at internet2.edu>wrote:

> Bai,
>
> The Status handler has an ACL associated with it.  You need to make sure
> your IP address is included in that ACL.
>
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPHandler
> #NativeSPHandler-StatusHandler
>
> To see what IP address your requests are coming from, you can check
> ssl_access_log.  Alternatively, from the web server's shell, try curl -k
> https://127.0.0.1/Shibboleth.sso/Status (127.0.0.1 is the default ACL,
> and this causes the request to originate from 127.0.0.1).
>
> Take care,
> Nate.
>
> On May 11, 2012, at 17:50 , Bai Shen wrote:
>
> I'm trying to set up an SP to test with testshib.org but I'm having some
> trouble.  Whenever I try and connect to Shibboleth.sso/Status I get a 403
> error.  I don't see anything in the Apache or Shibboleth logs.
>
> Is there something else I should be looking at?  This occurs wether I use
> the testshib xml file or the default shibboleth2 xml file.  The only
> difference is that the default file gives me an error saying "no
> MetadataProvider available, configuration is probably unusable"
>
> Thanks.
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120511/20d63e3b/attachment.html