<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 3/5/2021 1:27 PM, Nickles, Brent
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:MN2PR12MB3182E5D5651ED8F13DE5316589969@MN2PR12MB3182.namprd12.prod.outlook.com">
<p class="MsoNormal">I have a tomcat application with an apache
web server frontend. We use proxy_ajp_module in ssl.conf virtual
host.<o:p></o:p></p>
<p class="MsoNormal">When I use <a
href="https://url/Shibboleth.sso/Status"
moz-do-not-send="true"><span style="color:windowtext">https://url/Shibboleth.sso/Status</span></a>
or /Metadata, I get Forbidden (You don’t have permission to
access /Shibboleth.sso on this server).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Shibboleth SP version is 3.2.0<o:p></o:p></p>
<p class="MsoNormal">Shibboleth2.xml ACL’s seem to have the
correct IP’s, and even running curl from the server returns a
forbidden error. <o:p></o:p></p>
<p class="MsoNormal">This seems pretty straight forward how to
address, but we are stuck! I’d appreciate if you can share
some insights on this issue.</p>
</blockquote>
<p>Check the access controls in the Apache httpd configuration
(httpd.conf, .htaccess). Perhaps an overbroad <Location>
directive...<br>
</p>
<pre class="moz-signature" cols="72">--
%% Christopher A. Bongaarts %% <a class="moz-txt-link-abbreviated" href="mailto:cab@umn.edu">cab@umn.edu</a> %%
%% OIT - Identity Management %% <a class="moz-txt-link-freetext" href="http://umn.edu/~cab">http://umn.edu/~cab</a> %%
%% University of Minnesota %% +1 (612) 625-1809 %%
</pre>
</body>
</html>