403 forbidden on ..shibboleth-ds/index.html

[Keith Hazelton]

Yum install on CentOS 7 per vanilla shib wiki instructions.  

Scott had it nailed: It was an issue with Apache 2.4 requiring different directives to allow access from outside the normal /var/www/html.  Instead of the Allow from all in the ../conf.d/shibboleth-ds.conf:

<IfModule mod_alias.c>
  <Location /shibboleth-ds>
    Allow from all

Apache 2.4 needs 

...
Require all granted

That one change, and EDS is working as expected.   Thanks, Peter, Scott.     —k
-- 
email & jabber: keith.hazelton at wisc.edu
calendar: http://go.wisc.edu/i6zxx0








On 2015-09-14, 10:05 , "users on behalf of Peter Schober" <users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at> wrote:

>* Keith Hazelton <keith.hazelton at wisc.edu> [2015-09-14 17:01]:
>> I’m doing initial configuration of the embedded discovery service on
>> an Shib SP 2.5.5.  When I go to /secure, I get back a 403 forbidden:
>> You don't have permission to access /shibboleth-ds/index.html on
>> this server. I’m using the config setup right from the wiki pages.
>> Is this a permission error somehow?  With a fixed IdP,  /secure
>> works as expected.
>
>[Not] Being able to access the EDS' /shibboleth-ds/index.html has
>nothing to do with the rest of the SP's workings, so yes, permissions
>of some kind.
>Is that from an RPM install (yum or manual) or from
>shibboleth.net/downloads/ or from SVN...
>-peter
>-- 
>To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net