HTTP 403 From Wikipedia, the free encyclopedia HTTP Persistence Compression HTTPS Request methods OPTIONS GET HEAD POST PUT DELETE TRACE CONNECT PATCH Header fields Cookie ETag Location HTTP referer DNT X-Forwarded-For Status codes 301 Moved Permanently 302 Found 303 See Other 403 Forbidden 404 Not Found 451 Unavailable For Legal Reasons v t e A web server may or may not return a 403 Forbidden HTTP 403 in response to a request from a client for a web page or help indicate that the server can be reached and process the request, but refuses to take any further action. Status code 403 responses are the result of the web server being configured to deny access, for some reason, to the requested resource by the client. A typical request that may receive a 403 Forbidden response is a GET for a web page, performed by a web browser to retrieve the page for display to a user in a browser window. The web server may return a 403 Forbidden status for other types of requests as well. The Apache web server returns 403 Forbidden in response to requests for url paths that correspond to filesystem directories, when directory listings have been disabled in the server and there is no Directory Index directive to specify an existing file to be returned to the browser. Some administrators configure the Mod proxy extension to Apache to block such requests, and this will also return 403 Forbidden. Microsoft IIS responds in the same way when directory listings are denied in that server. In WebDAV, the 403 Forbidden response will be returned by the server if the client issued a PROPFIND request but did not also issue the required Depth header, or issued a Depth header of infinity.[1] Contents [hide] 1 Difference from status "401 Unauthorized" 2 403 substatus error codes for IIS 3 See also 4 References 5 External links Difference from status "401 Unauthorized"[edit] Status codes 401 (Unauthorized) and 403 (Forbidden) have distinct meanings. A 401 response indicates that access to the resource is restricted, and the request did not provide any HTTP authentication. It is possible that a new request for the same resource will succeed if authentication is provided. The response must include an HTTP WWW-Authenticate header to prompt the user-agent to provide credentials. If valid credentials are not provided via HTTP Authorization, then 401 should not be used.[2] A 403 response generally indicates one of two conditions: Authentication was provided, but the authenticated user is not permitted to perform the requested operation. The operation is forbidden to all users. For example, requests for a directory listing return code 403 when directory listing has been disabled. 403 substatus error codes for IIS[edit] en.Wikipedia error message The following nonstandard code are returned by Microsoft's Internet Information Services and are not officially recognized by IANA. 403.1 - Execute access forbidden.[3] 403.2 - Read access forbidden.[3] 403.3 - Write access forbidden.[3] 403.4 - SSL required.[3] 403.5 - SSL 128 required.[3] 403.6 - IP address rejected.[3] 403.7 - Client certificate required.[3] 403.8 - Site access denied.[3] 403.9 - Too many users.[3] 403.10 - Invalid configuration.[3] 403.11 - Password change. 403.12 - Mapper denied access. 403.13 - Client certificate revoked. 403.14 - Directory listing denied. 403.15 - Client Access Licenses exceeded. 403.16 - Client certificate is untrusted or invalid. 403.17 - Client certificate has expired or is not yet valid. 403.18 - Cannot execute request from that application pool. 403.19 - Cannot execute CGIs for the client in this application pool. 403.20 - Passport logon failed. 403.21 - Source access denied. 403.22 - Infinite depth is denied. 403.502 - Too many requests from the same client IP; Dynamic IP Restriction limit reached. See also[edit] Internet portal .htaccess List of HTTP status codes URL redirection References[edit] ^ "HTTP Extensions for Web Distributed Authoring jand Versioning (WebDAV)". IETF. June 2007. Retrieved January 11, 2016. ^ Fielding, R.; Reschke, J. (June 2014). "401 Unauthorized". Hypertext Transfer Protocol (HTTP/1.1): Authentication. IETF. p. 6. sec. 3.1. RFC 7235. Retrieved August 24, 2015. ^ a b c d e f g h i j http://kb.globalscape.com/KnowledgebaseArticle10141.aspx Apache Module mod_proxy - Forward and Reverse Proxies External links[edit] SELinux: chcon -R -t httpd_sys_content_t /web/ Hypertext Transfer Protocol (HTTP/1.1): Semantics and Content [hide] v t e Error messages System failure Bomb icon Fatal system error Guru Meditation Kernel panic Linux kernel oops Red Ring of Death Sad Mac Screen of death Blue Black Purple Yellow Light of Death Application failure ABEND Fatal exception error Segmentation fault Device and data errors Can't extend HTTP 404 lp0 on fire Not a typewriter PC LOAD LETTER Other Abort, Retry, Fail? Bad command or file name Halt and Catch Fire HTTP 418 Out of memory Lists List of HTTP status codes List of FTP server return codes Related Kill screen Spinning pinwheel Windows wait cursor Categories: Computer errorsHypertext Transfer Protocol status codes Not logged in Talk Contributions Create account Log in Article Talk Read Edit View history Search Main page Contents Featured content Current events Random article Donate to Wikipedia Wikipedia store Interaction Help About Wikipedia Community portal Recent changes Contact page Tools What links here Related changes Upload file Special pages Permanent link Page information Wikidata item Cite this page Print/export Create a book Download as PDF Printable version Languages العربية Ελληνικά Español فارسی 한국어 עברית Magyar 日本語 Português Shqip Српски / srpski Українська 中文 Edit links This page was last modified on 13 December 2016, at 03:16. Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy. Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc., a non-profit organization. Privacy policy About Wikipedia Disclaimers Contact Wikipedia Developers Cookie statement Mobile view