By: Mateusz Bilski user 14 Apr 2015 at 4:04 a.m. CDT

4 Responses
Mateusz Bilski gravatar
Hello, I have deployed Gluu 2.0.0 on Ubuntu and updated the oxTrust to 2.1.0.FINAL; created an oauth client for scim and I'm using SCIM Client 2.1.0.FINAL to create/update/delete users. However, it looks like it is failing randomly (403 forbidden). Sometimes I got `<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>403 Forbidden</title> </head><body> <h1>Forbidden</h1> <p>You don't have permission to access /identity/seam/resource/restv1/Users/ on this server.</p> <hr> <address>Apache/2.4.7 (Ubuntu) Server at gluu.example.com Port 443</address> </body></html>` It occurs more often when I run acceptance tests. Sometimes 40-80% tests fails. What could be the reason for that?

By Mohib Zico staff 14 Apr 2015 at 8:13 a.m. CDT

Mohib Zico gravatar
Mateusz, When it fails... can you share any error logs from wrapper.log? It will be helpful for us to understand the reason. wrapper.log is inside /opt/tomcat/logs/

By Mateusz Bilski user 14 Apr 2015 at 9:13 a.m. CDT

Mateusz Bilski gravatar
Sure, client [http://pastebin.com/NgBQ2YZm](http://pastebin.com/NgBQ2YZm) gluu [http://pastebin.com/NvGCypCa](http://pastebin.com/NvGCypCa) It's an output of `tail -f /home/gluu-server/opt/apache-tomcat-7.0.55/logs/*` with DEBUG on. Thanks for looking into this.

By Yuriy Movchan staff 14 Apr 2015 at 2:37 p.m. CDT

Yuriy Movchan gravatar
Hi, I think Apache is trying to protect oxTrust from DOS attacks. You can disable evasive and related apache modules and restart it. Regards, Yura

By Mateusz Bilski user 15 Apr 2015 at 2:55 a.m. CDT

Mateusz Bilski gravatar
Thanks! It helped.