virtuoso-opensource icon indicating copy to clipboard operation
virtuoso-opensource copied to clipboard

HTTP 403 error with the faceted browser

Open pierrelarmande opened this issue 4 years ago • 3 comments

Dear all,

we are facing some 403 issues using the faceted browser.

As you can see in the following example http://agrold.southgreen.fr/fct/facet.vsp?cmd=set_view&sid=821&type=properties&limit=20&offset=0 by clicking on a property (is_orthologous_to or any others) we get a 403 error. Currently it happens in our 2 virtuoso instances:

http://agrold.southgreen.fr/fct/facet.vsp http://agrold.southgreen.fr/fct/facet.vsp

It may come from the configuration of our faceted browser that we didn't do, if you can give us some pointers to configure it correctly or if you have any idea of this errors may come.

Many thanks PIerre Larmande

pierrelarmande avatar Jul 01 '21 09:07 pierrelarmande

It looks like your webmaster has made some changes to your firewall, etc., that do not allow your Virtuoso HTTP server to fetch data directly from outside sources. It is possible that you have to configure your Virtuoso HTTP server to use a proxy like squid, but your webmaster should be able to give you the required information.

When i click on the is_orthologous_to link, the FCT code calls the following url:

http://agrold.southgreen.fr/fct/facet.vsp?cmd=open_property&iri=http%3A%2F%2Fsemanticscience.org%2Fresource%2FSIO_000558&lang=&datatype=uri&sid=821

As you can see, there is an iri keyword which points to http://semanticscience.org/resource/SIO_000558, and Virtuoso will do an HTTP GET command to retrieve more information from this link.

This request appears to be intercepted higher up in your network, which then returns the 403 error page you see.

I tested with an IRI within your own network, and that works, but of course gives no data.

openlink avatar Jul 01 '21 10:07 openlink

Thanks for your answer. Indeed i suspected something which involved the firewall rules .. i forwarded to the admin sys and the IT security team , hopping they will find a solution,

Thanks Pierre

pierrelarmande avatar Jul 01 '21 11:07 pierrelarmande

Virtuoso has options to use a reverse proxy such as Squid or Socks 4/5 by adding one of the following setting to virtuoso.ini in the [HTTPServer] section:

[HTTPServer]
....
....
HTTPProxyServer       = http://user:password@host:port     # for SQUID

HTTPProxyServer     = socks4://user:password@host:port   # for Socks4

HTTPProxyServer     = socks5://user:password@host:port   # for Socks5

If you want to continue this discussion privately in case of sharing possibly sensitive network information, please contact me via [email protected].

openlink avatar Jul 01 '21 12:07 openlink