Shibboleth.sso - Forbidden error

[Christopher Bongaarts]

On 3/5/2021 1:27 PM, Nickles, Brent wrote:
>
> I have a tomcat application with an apache web server frontend. We use 
> proxy_ajp_module in ssl.conf virtual host.
>
> When I use https://url/Shibboleth.sso/Status 
> <https://url/Shibboleth.sso/Status> or /Metadata, I get Forbidden (You 
> don’t have permission to access /Shibboleth.sso on this server).
>
> Shibboleth SP version is 3.2.0
>
> Shibboleth2.xml ACL’s seem to have the correct IP’s, and even running 
> curl from the server returns a forbidden error.
>
> This seems pretty straight forward how to address, but we are stuck!   
> I’d appreciate if you can share some insights on this issue.
>
Check the access controls in the Apache httpd configuration (httpd.conf, 
.htaccess).  Perhaps an overbroad <Location> directive...

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210305/59aff325/attachment.htm>