Shibboleth.sso - Forbidden error

[Nickles, Brent]

Hi,

I have a tomcat application with an apache web server frontend. We use proxy_ajp_module in ssl.conf virtual host.
When I use https://url/Shibboleth.sso/Status or /Metadata, I get Forbidden (You don't have permission to access /Shibboleth.sso on this server).

Shibboleth SP version is 3.2.0
Shibboleth2.xml ACL's seem to have the correct IP's, and even running curl from the server returns a forbidden error.
This seems pretty straight forward how to address, but we are stuck!   I'd appreciate if you can share some insights on this issue.
Thank you.

-Brent


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210305/32abafb3/attachment.htm>