Skip to main content
A
adobe_mayur
Participating Frequently
November 9, 2023
Question

403 - Forbidden: Access is denied.

  • November 9, 2023
  • 1 reply
  • 844 views
I am getting a "403 - Forbidden: Access is denied." error.
 
We have multiple websites are setup on 2 IIS servers.
The 2 IIS servers have same apps on both servers.
The IIS servers are behind VIP.

 

I am getting the above error on only one of the site on only 2nd IIS server.

Also, the error is only for accessing .cfm page and hot htm pages at same location
 
If I turn off the 2nd IIS server and have only 1st IIS server behing the VIP. Then everything works.
 

for e.g.

we have

VIP 1 - Site 1 - port 81

VIP 2 - Site 2 - port 82

VIP 3 - Site 3 - port 83

https://vip1/webapps/Test.cfm - works

https://vip1/webapps/Test.htm - works

https://vip2/webapps/Test.cfm - does not work

https://vip2/webapps/Test.htm - works

https://vip3/webapps/Test.cfm - works

https://vip3/webapps/Test.htm - works

 

Ruling out Netscalar issues,

1. other sites on 2nd iis server works

2. on the problem site, htm pages works

3. the VIP settings look identical

Is that correct, or we need to look at something specific on netscalar

 

Is there any setting on the CF admin server wea are missing. Or is there a way to compare CF admin setting for the problem site, across 1st IIS server and 2nd IIS sever, that would show us the difference and highlight the issue

    This topic has been closed for replies.

    1 reply

    Charlie Arehart
    Charlie Arehart
    Community Expert
    November 9, 2023

    On the server not working, in iis for the site not working, is there a jakarta virtual directory, like in all the working sites? If not, if all the working sites' Jakarta virtual directories point to the same folder (which should be one within the cf config/wsconfig folder), add that virtual directory to the site, and try again. No need of any restart of iis or the site or of cf.

     

    If that's not it, there are more thinga to consider, but let's start with this simple one. 

     

    (This problem can happen when one configures the cf web server connector for "all sites" - - but it can only add the jakarta virtual directory to those there at that time m if you add a new site after that, YOU have to add that virtual directory. It's not a cf bug, just a reality due to how both iis and tomcat work.) 

    /Charlie (troubleshooter, carehart. org)
    A
    adobe_mayurAuthor
    Participating Frequently
    November 9, 2023

    All working site essentially point to the same folder d:/iserver/domain

    All working sites have the jakarta virtual directory configured.. Its in config\wsconfig\3 (each site has its own)

    Charlie Arehart
    Charlie Arehart
    Community Expert
    November 10, 2023

    I am sorry I am not understanding the comment..
    What info about the failing site can I provide.


    I had said, "On the server not working, in iis for the site not working, is there a jakarta virtual directory, like in all the working sites?"

     

    Then I offered subsequent info based on your yes or no. 

    /Charlie (troubleshooter, carehart. org)
    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices