Ah, I see it now. I remember seeing it previously, but I thought it was turned off by default.<br><br>I wonder why it doesn't log any errors.<br><br>Thanks.<br><br><div class="gmail_quote">On Fri, May 11, 2012 at 2:10 PM, Nate Klingenstein <span dir="ltr"><<a href="mailto:ndk@internet2.edu" target="_blank">ndk@internet2.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">Bai,<div><br></div><div>The Status handler has an ACL associated with it. You need to make sure your IP address is included in that ACL.</div>
<div><br></div><div><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPHandler" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPHandler</a>#NativeSPHandler-StatusHandler</div>
<div><br></div><div>To see what IP address your requests are coming from, you can check ssl_access_log. Alternatively, from the web server's shell, try curl -k <a href="https://127.0.0.1/Shibboleth.sso/Status" target="_blank">https://127.0.0.1/Shibboleth.sso/Status</a> (127.0.0.1 is the default ACL, and this causes the request to originate from 127.0.0.1).</div>
<div><br></div><div>Take care,</div><div>Nate.</div><div><div class="h5"><div><br><div><div>On May 11, 2012, at 17:50 , Bai Shen wrote:</div><br><blockquote type="cite">I'm trying to set up an SP to test with<span> </span><a href="http://testshib.org" target="_blank">testshib.org</a><span> </span>but I'm having some trouble. Whenever I try and connect to Shibboleth.sso/Status I get a 403 error. I don't see anything in the Apache or Shibboleth logs.<br>
<br>Is there something else I should be looking at? This occurs wether I use the testshib xml file or the default shibboleth2 xml file. The only difference is that the default file gives me an error saying "no MetadataProvider available, configuration is probably unusable"<br>
<br>Thanks.</blockquote></div><br></div></div></div></div><br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br>