I just solved the problem.
1. The first Authorization problem was indeed in Apache. So, you have to define
the domain name. If there is a problem
Deny from all
Allow from your_ip
2. The second “403 forbidden” problem is actually allowing display_servers
part. So, my UCSC mirror was in a remote machine. Even I define this IP in
universe_wsgi.ini => display_servers = remoteIP. The remote machine IP could
not be resolved in the remote user script.
In the lines below;
if self.display_servers and environ.has_key( 'REMOTE_ADDR' ):
host = socket.gethostbyaddr( environ[ 'REMOTE_ADDR' ] )
except( socket.error, socket.herror, socket.gaierror,
# in the event of a lookup failure, deny access
host = None
The host could not be resolved and matched the IP I gave in universe_wsgi.ini
=> display_servers = remoteIP and got an error and access denied.
I just tweak here to replace my IP as host
host=myIP (since I have only one machine in my case)
So, this is the point you want to check and correct.
Let me know, if you have a better solution.
Alper Kucukural, PhD
University of Massachusetts Medical School
368 Plantation St.Room AS4.2067
Worcester, MA 01605-2324
On Feb 26, 2014, at 5:32 PM, Alper Kucukural <al...@kucukural.com> wrote:
> I have changed the allowed domain names to their IPs and the error changed
> from Authorization failed to forbidden.
> Connecting to galaxy.umassmed.edu|22.214.171.124|:80... connected.
> HTTP request sent, awaiting response... 403 Forbidden
> 2014-02-26 16:58:19 ERROR 403: Forbidden.
> I added this ip to universe_wsgi.ini too.
> display_servers = 126.96.36.199
> I think other people also had the similar problem below but they haven’t
> solved it yet too.
> Does anybody have an idea, what is wrong?
> Alper Kucukural, PhD
> Bioinformatics Core,
> University of Massachusetts Medical School
> 368 Plantation St.Room AS4.2067
> Worcester, MA 01605-2324
> Phone: 774-312-4493
> E-mail: al...@kucukural.com
> On Feb 26, 2014, at 1:50 PM, Kucukural, Alper <alper.kucuku...@umassmed.edu>
>> I need to solve a problem in Apache and could not find a solution.
>> So, we are using remote authentication for galaxy.myserver.edu. It is like a
>> basic authentication in apache.
>> AuthType Basic
>> So I want to allow machine1 to access
>> galaxy.myserver.edu/display_application without password.
>> On machine1 we have ucsc genome browser mirror and it needs to access to
>> these files like below;
>> When I try with wget on machine1
>> But it is not working, I always get this error
>> Resolving galaxy.myserver.edu...
>> Connecting to galaxy.myserver.edu ||:80... connected.
>> HTTP request sent, awaiting response... 401 Authorization Required
>> Authorization failed.
>> I allow those sites like below in httpd.conf but it is not working.
>> <Location "/display_application">
>> Satisfy Any
>> Order deny,allow
>> Deny from all
>> Allow from machine1.myserver.edu
>> Allow from machine2.myserver.edu
>> Another thing; galaxy is working with proxy, since it is installed port
>> 8080. I directed galaxy.myserver.edu to here. I defined it like below;
>> <Proxy http://localhost:8080>
>> Order deny,allow
>> Allow from all
>> So, everything is working good but ucsc mirror need to access these files
>> served by galaxy without password.
>> when I write like below;
>> It is working.
>> Alper Kucukural, PhD
>> Bioinformatics Core,
>> University of Massachusetts Medical School
>> 368 Plantation St.Room AS4.2067
>> Worcester, MA 01605-2324
>> Phone: 774-312-4493
>> E-mail: alper.kucuku...@umassmed.edu
>> Please keep all replies on the list by using "reply all"
>> in your mail client. To manage your subscriptions to this
>> and other Galaxy lists, please use the interface at:
>> To search Galaxy mailing lists use the unified search at:
> Please keep all replies on the list by using "reply all"
> in your mail client. To manage your subscriptions to this
> and other Galaxy lists, please use the interface at:
> To search Galaxy mailing lists use the unified search at:
Please keep all replies on the list by using "reply all"
in your mail client. To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
To search Galaxy mailing lists use the unified search at: