Hi,
I just solved the problem.
1. The first Authorization problem was indeed in Apache. So, you have to define 
the domain name. If there is a problem
  
   <Location "/display_application">
     Satisfy Any
     Order deny,allow
     Deny from all
     Allow from your_ip
   </Location>

2. The second “403 forbidden” problem is actually allowing display_servers 
part. So, my UCSC mirror was in a remote machine. Even I define this IP in  
universe_wsgi.ini => display_servers = remoteIP. The remote machine IP could 
not be resolved in the remote user script.

./lib/galaxy/web/framework/middleware/remoteuser.py

In the lines below;

 if self.display_servers and environ.has_key( 'REMOTE_ADDR' ):
            try:
                host = socket.gethostbyaddr( environ[ 'REMOTE_ADDR' ] )[0]
            except( socket.error, socket.herror, socket.gaierror, 
socket.timeout ):
                # in the event of a lookup failure, deny access
                host = None


The host could not be resolved and matched the IP I gave in universe_wsgi.ini 
=> display_servers = remoteIP and got an error and access denied. 
I just tweak here to replace my IP as host
        host=myIP (since I have only one machine in my case)

So, this is the point you want to check and correct. 

Let me know, if you have a better solution.
Best,

Alper Kucukural, PhD
Bioinformatics Core,
University of Massachusetts Medical School
368 Plantation St.Room AS4.2067
Worcester, MA 01605-2324
Phone: 774-312-4493
E-mail: al...@kucukural.com



On Feb 26, 2014, at 5:32 PM, Alper Kucukural <al...@kucukural.com> wrote:

> Hi,
> I have changed the allowed domain names to their IPs and the error changed 
> from Authorization failed to forbidden.  
> 
> Connecting to galaxy.umassmed.edu|205.172.168.17|:80... connected.
> HTTP request sent, awaiting response... 403 Forbidden
> 2014-02-26 16:58:19 ERROR 403: Forbidden.
> 
> I added this ip to universe_wsgi.ini too.
> 
> display_servers = 203.171.168.44
> 
> I think other people also had the similar problem below but they haven’t 
> solved it yet too. 
> 
> https://opensource.ncsa.illinois.edu/jira/browse/BI-73
> 
> Does anybody have an idea, what is wrong?
> 
> Thanks,
> 
> Alper Kucukural, PhD
> Bioinformatics Core,
> University of Massachusetts Medical School
> 368 Plantation St.Room AS4.2067
> Worcester, MA 01605-2324
> Phone: 774-312-4493
> E-mail: al...@kucukural.com
> 
> 
> 
> On Feb 26, 2014, at 1:50 PM, Kucukural, Alper <alper.kucuku...@umassmed.edu> 
> wrote:
> 
>> 
>> Hi,
>> I need to solve a problem in Apache and could not find a solution. 
>> So, we are using remote authentication for galaxy.myserver.edu. It is like a 
>> basic authentication in apache. 
>> 
>> AuthType Basic
>> 
>> So I want to allow machine1 to access 
>> galaxy.myserver.edu/display_application without password.
>> 
>> On machine1 we have ucsc genome browser mirror and it needs to access to 
>> these files like below;
>> When I try with wget on machine1
>> 
>> wget 
>> http://galaxy.myserver.edu/display_application/38ac7832780d5a98/ucsc_bam/main/9ac9b1352a49848d/data/galaxy_38ac7832780d5a98.bam
>> 
>> But it is not working, I always get this error
>> 
>> Resolving galaxy.myserver.edu... 
>> Connecting to galaxy.myserver.edu ||:80... connected.
>> HTTP request sent, awaiting response... 401 Authorization Required
>> Authorization failed.
>> 
>> I allow those sites like below in httpd.conf but it is not working.
>> 
>>    <Location "/display_application">
>>      Satisfy Any
>>      Order deny,allow
>>      Deny from all
>>      Allow from machine1.myserver.edu
>>      Allow from machine2.myserver.edu
>>    </Location>
>> 
>> Another thing; galaxy is working with proxy, since it is installed port 
>> 8080. I directed galaxy.myserver.edu to here. I defined it like below; 
>> 
>>  <Proxy http://localhost:8080>
>>      Order deny,allow
>>      Allow from all
>>    </Proxy>
>> 
>> So, everything is working good but ucsc mirror need to access these files 
>> served by galaxy without password. 
>> 
>> http://galaxy.meyserver.edu/display_application/38ac7832780d5a98/ucsc_bam/main/9ac9b1352a49848d/data/galaxy_38ac7832780d5a98.bam
>> 
>> when I write like below;  
>> 
>> wget 
>> http://myuser:myp...@galaxy.myserver.edu/display_application/38ac7832780d5a98/ucsc_bam/main/9ac9b1352a49848d/data/galaxy_38ac7832780d5a98.bam
>> 
>> It is working. 
>> Thanks,
>> 
>> Alper Kucukural, PhD
>> Bioinformatics Core,
>> University of Massachusetts Medical School
>> 368 Plantation St.Room AS4.2067
>> Worcester, MA 01605-2324
>> Phone: 774-312-4493
>> E-mail: alper.kucuku...@umassmed.edu
>> 
>> 
>> 
>> ___________________________________________________________
>> Please keep all replies on the list by using "reply all"
>> in your mail client.  To manage your subscriptions to this
>> and other Galaxy lists, please use the interface at:
>> http://lists.bx.psu.edu/
>> 
>> To search Galaxy mailing lists use the unified search at:
>> http://galaxyproject.org/search/mailinglists/
> 
> 
> ___________________________________________________________
> Please keep all replies on the list by using "reply all"
> in your mail client.  To manage your subscriptions to this
> and other Galaxy lists, please use the interface at:
>  http://lists.bx.psu.edu/
> 
> To search Galaxy mailing lists use the unified search at:
>  http://galaxyproject.org/search/mailinglists/


___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/

Reply via email to