Hi, I just solved the problem. 1. The first Authorization problem was indeed in Apache. So, you have to define the domain name. If there is a problem

<Location "/display_application"> Satisfy Any Order deny,allow Deny from all Allow from your_ip </Location>

2. The second “403 forbidden” problem is actually allowing display_servers part. So, my UCSC mirror was in a remote machine. Even I define this IP in universe_wsgi.ini => display_servers = remoteIP. The remote machine IP could not be resolved in the remote user script.

./lib/galaxy/web/framework/middleware/remoteuser.py

In the lines below;

if self.display_servers and environ.has_key( 'REMOTE_ADDR' ): try: host = socket.gethostbyaddr( environ[ 'REMOTE_ADDR' ] )[0] except( socket.error, socket.herror, socket.gaierror, socket.timeout ): # in the event of a lookup failure, deny access host = None

The host could not be resolved and matched the IP I gave in universe_wsgi.ini => display_servers = remoteIP and got an error and access denied. I just tweak here to replace my IP as host host=myIP (since I have only one machine in my case)

So, this is the point you want to check and correct.

Let me know, if you have a better solution. Best,

Alper Kucukural, PhD Bioinformatics Core, University of Massachusetts Medical School 368 Plantation St.Room AS4.2067 Worcester, MA 01605-2324 Phone: 774-312-4493 E-mail: alper@kucukural.com

On Feb 26, 2014, at 5:32 PM, Alper Kucukural alper@kucukural.com wrote:

Hi, I have changed the allowed domain names to their IPs and the error changed from Authorization failed to forbidden.

Connecting to galaxy.umassmed.edu|205.172.168.17|:80... connected. HTTP request sent, awaiting response... 403 Forbidden 2014-02-26 16:58:19 ERROR 403: Forbidden.

I added this ip to universe_wsgi.ini too.

display_servers = 203.171.168.44

I think other people also had the similar problem below but they haven’t solved it yet too.

https://opensource.ncsa.illinois.edu/jira/browse/BI-73

Does anybody have an idea, what is wrong?

Thanks,

Alper Kucukural, PhD Bioinformatics Core, University of Massachusetts Medical School 368 Plantation St.Room AS4.2067 Worcester, MA 01605-2324 Phone: 774-312-4493 E-mail: alper@kucukural.com

On Feb 26, 2014, at 1:50 PM, Kucukural, Alper Alper.Kucukural@umassmed.edu wrote:

...

Hi, I need to solve a problem in Apache and could not find a solution. So, we are using remote authentication for galaxy.myserver.edu. It is like a basic authentication in apache.

AuthType Basic

So I want to allow machine1 to access galaxy.myserver.edu/display_application without password.

On machine1 we have ucsc genome browser mirror and it needs to access to these files like below; When I try with wget on machine1

wget http://galaxy.myserver.edu/display_application/38ac7832780d5a98/ucsc_bam/mai...

But it is not working, I always get this error

Resolving galaxy.myserver.edu... Connecting to galaxy.myserver.edu ||:80... connected. HTTP request sent, awaiting response... 401 Authorization Required Authorization failed.

I allow those sites like below in httpd.conf but it is not working.

<Location "/display_application"> Satisfy Any Order deny,allow Deny from all Allow from machine1.myserver.edu Allow from machine2.myserver.edu

</Location>

Another thing; galaxy is working with proxy, since it is installed port 8080. I directed galaxy.myserver.edu to here. I defined it like below;

<Proxy http://localhost:8080%3E Order deny,allow Allow from all

</Proxy>

So, everything is working good but ucsc mirror need to access these files served by galaxy without password.

http://galaxy.meyserver.edu/display_application/38ac7832780d5a98/ucsc_bam/ma...

when I write like below;

wget http://myuser:mypass@galaxy.myserver.edu/display_application/38ac7832780d5a9...

It is working. Thanks,

Alper Kucukural, PhD Bioinformatics Core, University of Massachusetts Medical School 368 Plantation St.Room AS4.2067 Worcester, MA 01605-2324 Phone: 774-312-4493 E-mail: Alper.Kucukural@umassmed.edu

---

Please keep all replies on the list by using "reply all" in your mail client. To manage your subscriptions to this and other Galaxy lists, please use the interface at: http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at: http://galaxyproject.org/search/mailinglists/

---

Please keep all replies on the list by using "reply all" in your mail client. To manage your subscriptions to this and other Galaxy lists, please use the interface at: http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at: http://galaxyproject.org/search/mailinglists/