Home › Forums › FABRIC General Questions and Discussion › 403 : Forbidden Access to JupyterHub
Tagged: Access to JupyterHub
- This topic has 12 replies, 4 voices, and was last updated 9 months, 4 weeks ago by Khawar Shehzad.
-
AuthorPosts
-
January 26, 2024 at 3:28 pm #6433
Hello,
My JupyterHub has been running just perfect until now when I try to open it, I get the error
403 : Forbidden Access not allowed
I undertook steps to clear the browsing history, cleared the cache and cookies in all by bowsers, but the problem still persisted. I even tried logging in from other computers including those of colleagues who are able to successfully open JupyterHub, but I still get the same error. This makes me think that there is an access problem associated with my account instead. Can someone help me please. I can be available for online appointments to help me get this fixed. Thanks.
Polycarp Nalela
January 28, 2024 at 6:26 pm #6439Hello Polycarp,
Could you please check on the portal if you are a member of a project? This error typically occurs if you are not a member of a project.
Thanks,
Komal
January 28, 2024 at 6:40 pm #6440Yes, I am a member of a project (GAF), and it is reflected in my portal
January 28, 2024 at 6:58 pm #6442Are you trying to login to JH using the email address: polycarpnalela@mail.missouri.edu
Which Identity provider are you using when you login via CILogon?
Also, could you please share the snapshot of what you see on the following link after logging on to Portal?
Please also share the cookie contents as well.
https://portal.fabric-testbed.net/check-cookie
Also, try opening JH on an incognito browser window and see if that helps.
Thanks,
Komal
- This reply was modified 10 months, 4 weeks ago by Komal Thareja.
January 28, 2024 at 7:07 pm #6444Yes, I am using the email polycarpnalela@mail.missouri.edu and CILogon of “University of Missouri System”. The Cookie content is below:
{
“cookie_attributes”: {
“email”: “polycarpnalela@missouri.edu”,
“family_name”: “Nalela”,
“given_name”: “Polycarp”,
“name”: “Nalela, Polycarp (MU-Student)”,
“sub”: “http://cilogon.org/serverE/users/63714”
},
“cookie_name”: “fabric-service”,
“fabric_attributes”: {
“affiliation”: [
“University of Missouri System”
],
“roles”: [
“68926660-da26-475d-9c40-50ebf0a5a812-pm”,
“fabric-active-users”,
“Jupyterhub”
],
“sub”: [
“http://cilogon.org/serverE/users/63714”
],
“uuid”: “dccbf283-c2c6-41f5-bbff-5fe381f04e14”
}
}Here too attached is the screenshot of the error message.
January 28, 2024 at 7:26 pm #6446I suspect that multiple email aliases were configured recently for your account. JHUB queries user roles based on your email. In this case, your email address is being passed as
polycarpnalela@missouri.edu
to JHUB.LDAP has your information stored with polycarpnalela@mail.missouri.edu and hence LDAP query returns no information for your account resulting in access denied as indicated in the error below.
Is it possible for you to change your email configuration to allow polycarpnalela@mail.missouri.edu as the primary email address?
[W 2024-01-29 00:02:22.712 JupyterHub fabricauthenticator:37] FABRIC user polycarpnalela@missouri.edu is not in CO:COU:Jupyterhub:members:active
Thanks,
Komal
- This reply was modified 10 months, 4 weeks ago by Komal Thareja.
January 28, 2024 at 7:38 pm #6448I will be happy to do that. Under what settings in my account do I change my email configuration to allow polycarpnalela@mail.missouri.edu as the primary email address?
January 29, 2024 at 8:27 am #6456Good morning Polycarp,
This something you would have to look at your account settings. I won’t be able to help much there. In the meanwhile, could you please try accessing JHUB again?
Thanks,
Komal
January 29, 2024 at 11:42 am #6461There is now a small progress when logging into JHUB, but I can’t go beyond what you see on the screenshot attached here. When I click on “Start”, the notebook does not open but rather am taken back to the “Sign in with CILogon” page.
January 29, 2024 at 4:34 pm #6470@Polycarp – Komal has made some updates to Jupyterhub that should allow you to launch properly
Couple of things to note
- In a previous screenshot your user email in the navbar appeared as an array of emails, this was due to multiple emails being associated to your account, which is fine, but was confusing JHub – that should now be a single email
- JHub uses the email as a unique identifier to create a storage allocation, with that email potentially being different from before its possible that your storage will be empty – this means that we’d need to copy your data from the prior storage allocation to the new one since they’ll be differently named due to the email change
Let us know how it goes
February 26, 2024 at 1:06 pm #6611Hi,
I’m facing the same issue as the author i.e., 403 Forbidden Access.
I went through the conversation and noticed in my cookies the email address is different from my actual email.
Please see the cookie content below{
“cookie_attributes”: {
“email”: “khawar.shehzad@missouri.edu”,
“family_name”: “Shehzad”,
“given_name”: “Khawar”,
“name”: “Shehzad, Khawar (MU-Student)”,
“sub”: “http://cilogon.org/serverE/users/59894”
},
“cookie_name”: “fabric-service”,
“fabric_attributes”: {
“affiliation”: [
“University of Missouri System”
],
“roles”: [
“68926660-da26-475d-9c40-50ebf0a5a812-pm”,
“fabric-active-users”,
“Jupyterhub”
],
“sub”: [
“http://cilogon.org/serverE/users/59894”
],
“uuid”: “e8fa845a-3fde-44bd-a1e7-e6ae040fd39e”
}
}My correct login email should be “khawar.shehzad@mail.missouri.edu”
Can you please fix the issue for me as well?
Thanks,
KhawarFebruary 27, 2024 at 9:12 am #6612@Khawar – Could you please try accessing JH again and let me know how it goes?
Thanks,
Komal
February 27, 2024 at 12:07 pm #6615@komal
It worked. Thanks! -
AuthorPosts
- You must be logged in to reply to this topic.