Shibboleth.sso/Status 403 error

[Cantor, Scott]

On 5/14/12 11:24 AM, "Bai Shen" <baishen.lists at gmail.com> wrote:
>
>I know how to set permissions.  I'm just not sure what they should be set
>to.  All of my log files are owned by root:root.  These were automaticlly
>created when I started the shibd and httpd services.

The log directory is owned by root, the module runs as non-root, ergo, you
get no log file.

I finally have a workaround for that, but in the meantime, that's the
situation, as it has been for years and is documented in the wiki.

>However, I don't have a native.log file.  According to
>https://helpdesk.wisc.edu/ams/page.php?id=20454
><https://helpdesk.wisc.edu/ams/page.php?id=20454> I should create a
>native.log file and set it's ownership to apache:apache.

That doesn't fix anything when the directory itself is owned and locked by
root. My advice is to ignore the issue unless you need the file.

>As for the ACL, it's not letting me connect even though I've set it to my
>ip range of
>192.168.1.0/24 <http://192.168.1.0/24>.

There is no support for ranges until 2.5, which is clearly stated in the
documentation.

-- Scott