<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Bai,<div><br></div><div>The Status handler has an ACL associated with it. You need to make sure your IP address is included in that ACL.</div><div><br></div><div><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPHandler">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPHandler</a>#NativeSPHandler-StatusHandler</div><div><br></div><div>To see what IP address your requests are coming from, you can check ssl_access_log. Alternatively, from the web server's shell, try curl -k <a href="https://127.0.0.1/Shibboleth.sso/Status">https://127.0.0.1/Shibboleth.sso/Status</a> (127.0.0.1 is the default ACL, and this causes the request to originate from 127.0.0.1).</div><div><br></div><div>Take care,</div><div>Nate.</div><div><br><div><div>On May 11, 2012, at 17:50 , Bai Shen wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">I'm trying to set up an SP to test with<span class="Apple-converted-space"> </span><a href="http://testshib.org">testshib.org</a><span class="Apple-converted-space"> </span>but I'm having some trouble. Whenever I try and connect to Shibboleth.sso/Status I get a 403 error. I don't see anything in the Apache or Shibboleth logs.<br><br>Is there something else I should be looking at? This occurs wether I use the testshib xml file or the default shibboleth2 xml file. The only difference is that the default file gives me an error saying "no MetadataProvider available, configuration is probably unusable"<br><br>Thanks.</blockquote></div><br></div></body></html>