Re: 403 Forbidden errors

11.8.2011 1:48, IS Projects wrote:

> I keep getting “403 Forbidden” when I try to validate:
> https://share.sfsu.edu/pmo/default.aspx
> https://share.sfsu.edu/pmo/Portfolios/default.aspx
> https://share.sfsu.edu/pmo/Projects/default.aspx
> https://share.sfsu.edu/pmo/Templates/default.aspx and
> https://share.sfsu.edu/pmo/Requests/default.aspx .

For the first URL, I get alternatingly
403 Forbidden
500 SSL read timeout
when using the validator. Accessing it on a browser shows the page after 
considerable delay. This seems to be a server issue: the server is slow, 
or it has been configured to disallow requests from (some) robots, or both.

This may be related to the chain of redirections (temporary redirection, 
302 Found) performed...
https://share.sfsu.edu/pmo/default.aspx
=>
https://share.sfsu.edu/pmo/_layouts/Authenticate.aspx?Source=%2Fpmo%2Fdefault%2Easpx
=>
/_forms/shibboleth.aspx?ReturnUrl=%2fpmo%2f_layouts%2fAuthenticate.aspx%3fSource%3d%252Fpmo%252Fdefault%252Easpx&Source=%2Fpmo%2Fdefault%2Easpx 

=>
https://share.sfsu.edu:8443/Authenticate.aspx?ReturnUrl=%2fpmo%2f_layouts%2fAuthenticate.aspx%3fSource%3d%252Fpmo%252Fdefault%252Easpx&Source=%2fpmo%2fdefault.aspx&&Site=share.sfsu.edu
=>
https://idp.sfsu.edu/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZLNbsIwEIRfJfKdOA5QgkWQKByKREtE0h56qZxkaSwZO%2FU6%2FXn7JoRSuHCyLM%2FO7HzyDMVB1XzRuErv4KMBdN73QWnkx4eYNFZzI1Ai1%2BIAyF3B08Xjhod%2BwGtrnCmMIt4CEayTRi%2BNxuYANgX7KQt43m1iUjlXI6cUK2HBxz02PpQNj0ajIU0rmedGgat8REM765Am2zQj3qrdRWrRuf57yLI%2BO3QX2u6wlwpOkzsopYXC0TTdEm%2B9ismbYHcAEyEgKlk%2BnEaCsSjcj5gQYtKe01aG2MBaoxPaxSQMGBsE0YCFWTDmQcjH7JV4yanqvdSl1O%2B3ueS9CPlDliWDvs0LWDw2aQVkPuvo8mOwveB921b8QSbzK6S1kdphjX4hVFvCwREOnsnO6EVaH13zp9Z%2BvUqMksWPt1DKfC0ttLMxYYTO%2B5HrfzH%2FBQ%3D%3D&RelayState=ss%3Amem%3Ab30ba62edb123c15877e0c393e0f9900
=>
https://idp.sfsu.edu:443/idp/Authn/UserPassword

Asking the validator to check the ultimate address works fine (an error 
message about missing </a> is given), except that the validator's report 
shows the Address of the checked page as
https://www.sfsu.edu/login.htm

I feel dizzy... I guess the validator, when requesting for 
https://idp.sfsu.edu:443/idp/Authn/UserPassword
gets a redirection (but browsers don't - this probably depends on 
request headers).

-- 
Yucca, http://www.cs.tut.fi/~jkorpela/

Received on Friday, 12 August 2011 05:18:32 UTC