Thanks all. OpenAM comes with a policy agent that is for Tomcat. The one I was having problems with was for Apache httpd 2.2 and rather than spending time trying to fix that "canned" agent I'll try the Tomcat one to see if it has the same issue or not. This isn't for a production environment, I am just trying to understand the HA (high availability) modes of OpenAM.
James ----- Original Message ----- From: Lukas Tribus Sent: 09/13/13 01:41 PM To: HAProxy Subject: RE: Receiving 403 errors with no attempt to communicate with the actual server Hi! > Wouldn't the extra '\r' be swallowed as part of the 'text/xml' value of > the Accept: header? Yes, but \r is not allowed as character in header values either. The question was rather, can we make haproxy ignore this with option accept-invalid-http-request Looks like we cannot. > Whatever the way your turning this, the server doesn't respect rfc, > that's all. > Fix the broken server Fix the application, as simple as that, yes. Regards, Lukas

