Access Denied error
I just finished launching a website for my company and am running into an Access Denied error when trying to perform site search.
The site is being Reverse Proxied into a different domain via Akamai. I have modified the site configuration to be the destination domain.
Origin: smallbusiness.pb.com/smb/
Destination: www.pb.com/smb/
Here's the error I'm getting:
@@@
Access Denied
You don't have permission to access "http://www.pb.com/smb/search/results/..." on this server.
Reference #18.dd36d83f.1356127906.23bdb116
@@@
What can be done about this? The site just went live and site search is currently failing.
Replies
iso100 21 Dec 2012 22:25
I already have the secure="no" parameter in place.
iso100 22 Dec 2012 02:57
It turns out this error is most likely not coming from EE but rather Akamai.
I know that means it's not your problem but I'm curious if you have any insight about what could cause this. Is there some kind of redirection going on?
Low 22 Dec 2012 10:01
Hi Ian,
It indeed does not look like an error coming from EE. I also can't get to the template debugging, which is a bit of a nuisance.
Low GoogleSearch doesn't redirect, but does request data from another source, either using file_get_contents() or cURL. It might be that, because you're using a reverse proxy, some other header needs to be sent along with it, but I'm not really sure.
Low 22 Dec 2012 10:05
Actually, scratch that. The results are being generated (as per your 2nd link), which is when the Google service is queried. The error appears when submitting the form. The form submits to the main index page, which redirects to the search results URL, with the encoded keywords in it.
So yes, there is redirection going on. After submitting the form, LGS redirects to the results.
iso100 28 Dec 2012 16:29
Do you know what kind of redirection it is?
Via a configuration setting in our environment (Focus Lab LLC Config setup) we're telling the site it's actually www.pb.com but I'm guessing something is messing with Akamai's rewrites.
I guess I'll need to somehow submit via wget so I can see every header that comes back.
Low 29 Dec 2012 10:22
I'm just using EE's native redirect method from the Functions class:
That will either use a header('Location: ...') statement or spit out a HTML page with a refresh tag in there, depending on your settings.