-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Ellen,

On 2/25/20 12:55, Ellen Meiselman wrote:
> Sorry - no, the quotes were not there except for a 5 minute test of
> a hopeless theory that they might be needed. Right now there is no
> secret at all in the workers.properties, and
in the
> ajp connector, i have secretRequired ="false". Workers.properties:
> worker.worker1.type=ajp13 worker.worker1.host=127.0.0.1
> worker.worker1.port=8009
>
> Server.xml: <Connector protocol="AJP/1.3" address="127.0.0.1"
> port="8009" secretRequired="false" redirectPort="8443" />

Hmm. I think we've all been operating under the assumption that the
"secret" (by whatever name) was the source of the problem. It appears
that was incorrect.

Have a look at Jon's question about file permissions.

Was this a configuration that had been working until recently, or is
this a new configuration that you haven't (yet) been able to get working
?

Any reason not to use HTTP(S) for your protocol instead of AJP?

- -chris

> On Tue, Feb 25, 2020 at 12:35 PM Christopher Schultz <
> ch...@christopherschultz.net> wrote:
>
> Ellen,
>
> On 2/25/20 12:06, Ellen Meiselman wrote:
>>>> Yes, everything is on the same server.
>>>>
>>>> workers.properties: # Set properties for worker1 (ajp13)
>>>> worker.worker1.type=ajp13 worker.worker1.host=127.0.0.1
>>>> worker.worker1.port=8009 worker.worker1.secret="mySecret".
>
> Just so there is no confusion: your "mySecret" should have neither
> quotes nor the trailing period.
>
> Are those literally in your ISS config file?
>
> -chris
>
>>>> On Tue, Feb 25, 2020 at 11:27 AM
>>>> <jonmcalexan...@wellsfargo.com.invalid> wrote:
>>>>
>>>>> -----Original Message----- From: Ellen Meiselman
>>>>> <elle...@gmail.com> Sent: Tuesday, February 25, 2020 10:01
>>>>> AM To: Tomcat Users List <users@tomcat.apache.org> Subject:
>>>>> Re: At wits end: Difficulties with IIS ISAPI connector and
>>>>> Tomcat
>>>>>
>>>>>> Hi,
>>>>>
>>>>>> I've been testing, and so far, there is no change in the
>>>>>> behavior. I am
>>>>> still getting the same tomcat->based 403 error.
>>>>>
>>>>>> Based on what you said above...
>>>>>>
>>>>>> secretRequired="true" (which is the default, so it can
>>>>>> be removed) secret="xxxxxxx"
>>>>>
>>>>>
>>>>>> ...I removed secretRequired="true" and left secret. So
>>>>>> the connector
>>>>> definition now looks like this:
>>>>>> <Connector protocol="AJP/1.3" address="127.0.0.1"
>>>>>> port="8009" secret="mySecret" redirectPort="8443" />
>>>>>
>>>>> <SNIP>
>>>>>
>>>>> I'm assuming that your web-front-end is on the same server
>>>>> as your Tomcat instance, based on you having the address
>>>>> set to 127.0.0.1, correct? What do you have in your
>>>>> workers.properties file?
>>>>>
>>>>
>>
>> ---------------------------------------------------------------------
>>
>>
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
>> For additional commands, e-mail: users-h...@tomcat.apache.org
>>
>>
>
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=qIFw
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to