Sorry - no, the quotes were not there except for a 5 minute test of a hopeless theory that they might be needed. Right now there is no secret at all in the workers.properties, and in the ajp connector, i have secretRequired ="false". Workers.properties: worker.worker1.type=ajp13 worker.worker1.host=127.0.0.1 worker.worker1.port=8009
Server.xml: <Connector protocol="AJP/1.3" address="127.0.0.1" port="8009" secretRequired="false" redirectPort="8443" /> On Tue, Feb 25, 2020 at 12:35 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Ellen, > > On 2/25/20 12:06, Ellen Meiselman wrote: > > Yes, everything is on the same server. > > > > workers.properties: # Set properties for worker1 (ajp13) > > worker.worker1.type=ajp13 worker.worker1.host=127.0.0.1 > > worker.worker1.port=8009 worker.worker1.secret="mySecret". > > Just so there is no confusion: your "mySecret" should have neither > quotes nor the trailing period. > > Are those literally in your ISS config file? > > - -chris > > > On Tue, Feb 25, 2020 at 11:27 AM > > <jonmcalexan...@wellsfargo.com.invalid> wrote: > > > >> -----Original Message----- From: Ellen Meiselman > >> <elle...@gmail.com> Sent: Tuesday, February 25, 2020 10:01 AM To: > >> Tomcat Users List <users@tomcat.apache.org> Subject: Re: At wits > >> end: Difficulties with IIS ISAPI connector and Tomcat > >> > >>> Hi, > >> > >>> I've been testing, and so far, there is no change in the > >>> behavior. I am > >> still getting the same tomcat->based 403 error. > >> > >>> Based on what you said above... > >>> > >>> secretRequired="true" (which is the default, so it can be > >>> removed) secret="xxxxxxx" > >> > >> > >>> ...I removed secretRequired="true" and left secret. So the > >>> connector > >> definition now looks like this: > >>> <Connector protocol="AJP/1.3" address="127.0.0.1" port="8009" > >>> secret="mySecret" redirectPort="8443" /> > >> > >> <SNIP> > >> > >> I'm assuming that your web-front-end is on the same server as > >> your Tomcat instance, based on you having the address set to > >> 127.0.0.1, correct? What do you have in your workers.properties > >> file? > >> > > > -----BEGIN PGP SIGNATURE----- > Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ > > iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAl5VWtkACgkQHPApP6U8 > pFjIXA//caIbYn+Z9lDBNzpD6RDhEuSPw0Aq3pxGgSlI4sHFsIvA4PzJG1aAFYb0 > TzN2gms6GmTgeGDeIXgNub+ae7Pgers7ZVsJ9HDKTlT9uYEEShI5g7xfOzXTwc3z > iKh9PlNXmjonmKL+MLlt+pUL42s0Du43skIH0JLpP2UiDgC3WHs9hk3KHy8OfTpj > pfxDpMip2eMxsEjrXy0K1vJ012X1o4UDkb1GwUHoRAbEwqVpTfTYyHzAJqwpXAIr > Ab9z1LDFP0w7NwaPzmcCJK5qbgC3Ry85Y07BwcaClVOKszckqexR55bEKtJchRFe > MI/bbr0eDzndxZKpzmaJnrqyu5xZpH895Ww7/lwsO8hmBaH7rEd9LvCVZFbyIGvP > 4ww2Sv3FuJcSLBG+MnoXzH5I01G1GzH6MYCH0OW0+bkQEMMPDe3InQiavqoqCM08 > U8CM0TBRYkT0H5dCaplGWTyjmbhEU5c1SPLiwdj4eEEFhUGv+EsZHXToczLGim7y > wrV97sKF92UWkYDe6lkp4Va9kQ0kIiJr+VO3BLVKV9ZWxYWzgdQirIiJjIic/HjV > obDWW6c9w5EvYOaCqMWliV9g063TOvZYNQm8cm+oORCdR9NYLJgG1g0OxGWDQUGm > YhwIVngqP2m8mlg3jE1Z4y3vgM8cdh2vXzOZnb0WTsyjl9KrPYw= > =lPDH > -----END PGP SIGNATURE----- > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > >