Hi, I just solved the problem. 1. The first Authorization problem was indeed in Apache. So, you have to define the domain name. If there is a problem <Location "/display_application"> Satisfy Any Order deny,allow Deny from all Allow from your_ip </Location> 2. The second “403 forbidden” problem is actually allowing display_servers part. So, my UCSC mirror was in a remote machine. Even I define this IP in universe_wsgi.ini => display_servers = remoteIP. The remote machine IP could not be resolved in the remote user script. ./lib/galaxy/web/framework/middleware/remoteuser.py In the lines below; if self.display_servers and environ.has_key( 'REMOTE_ADDR' ): try: host = socket.gethostbyaddr( environ[ 'REMOTE_ADDR' ] )[0] except( socket.error, socket.herror, socket.gaierror, socket.timeout ): # in the event of a lookup failure, deny access host = None The host could not be resolved and matched the IP I gave in universe_wsgi.ini => display_servers = remoteIP and got an error and access denied. I just tweak here to replace my IP as host host=myIP (since I have only one machine in my case) So, this is the point you want to check and correct. Let me know, if you have a better solution. Best, Alper Kucukural, PhD Bioinformatics Core, University of Massachusetts Medical School 368 Plantation St.Room AS4.2067 Worcester, MA 01605-2324 Phone: 774-312-4493 E-mail: alper@kucukural.com On Feb 26, 2014, at 5:32 PM, Alper Kucukural <alper@kucukural.com> wrote:

Hi, I have changed the allowed domain names to their IPs and the error changed from Authorization failed to forbidden.

Connecting to galaxy.umassmed.edu|205.172.168.17|:80... connected. HTTP request sent, awaiting response... 403 Forbidden 2014-02-26 16:58:19 ERROR 403: Forbidden.

I added this ip to universe_wsgi.ini too.

display_servers = 203.171.168.44

I think other people also had the similar problem below but they haven’t solved it yet too.

https://opensource.ncsa.illinois.edu/jira/browse/BI-73

Does anybody have an idea, what is wrong?

Thanks,

Alper Kucukural, PhD Bioinformatics Core, University of Massachusetts Medical School 368 Plantation St.Room AS4.2067 Worcester, MA 01605-2324 Phone: 774-312-4493 E-mail: alper@kucukural.com

On Feb 26, 2014, at 1:50 PM, Kucukural, Alper <Alper.Kucukural@umassmed.edu> wrote:

...

Hi, I need to solve a problem in Apache and could not find a solution. So, we are using remote authentication for galaxy.myserver.edu. It is like a basic authentication in apache.

AuthType Basic

So I want to allow machine1 to access galaxy.myserver.edu/display_application without password.

On machine1 we have ucsc genome browser mirror and it needs to access to these files like below; When I try with wget on machine1

wget http://galaxy.myserver.edu/display_application/38ac7832780d5a98/ucsc_bam/mai...

But it is not working, I always get this error

Resolving galaxy.myserver.edu... Connecting to galaxy.myserver.edu ||:80... connected. HTTP request sent, awaiting response... 401 Authorization Required Authorization failed.

I allow those sites like below in httpd.conf but it is not working.

<Location "/display_application"> Satisfy Any Order deny,allow Deny from all Allow from machine1.myserver.edu Allow from machine2.myserver.edu </Location>

Another thing; galaxy is working with proxy, since it is installed port 8080. I directed galaxy.myserver.edu to here. I defined it like below;

<Proxy http://localhost:8080> Order deny,allow Allow from all </Proxy>

So, everything is working good but ucsc mirror need to access these files served by galaxy without password.

http://galaxy.meyserver.edu/display_application/38ac7832780d5a98/ucsc_bam/ma...

when I write like below;

wget http://myuser:mypass@galaxy.myserver.edu/display_application/38ac7832780d5a9...

It is working. Thanks,

Alper Kucukural, PhD Bioinformatics Core, University of Massachusetts Medical School 368 Plantation St.Room AS4.2067 Worcester, MA 01605-2324 Phone: 774-312-4493 E-mail: Alper.Kucukural@umassmed.edu

___________________________________________________________ Please keep all replies on the list by using "reply all" in your mail client. To manage your subscriptions to this and other Galaxy lists, please use the interface at: http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at: http://galaxyproject.org/search/mailinglists/

___________________________________________________________ Please keep all replies on the list by using "reply all" in your mail client. To manage your subscriptions to this and other Galaxy lists, please use the interface at: http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at: http://galaxyproject.org/search/mailinglists/