Forbidden (403)

C:\WINDOWS\system32>curl -v -u user:pass https://host/rest/api/2/issue/SECRET * Hostname was NOT found in DNS cache * Trying 42.42.42.42... * Connected to host (42.42.42.42) port 443 (#0) * successfully set certificate verify locations: * CAfile: C:\Program Files\cURL\bin\curl-ca-bundle.crt CApath: none * SSLv3, TLS handshake, Client hello (1): * SSLv3, TLS handshake, Server hello (2): * SSLv3, TLS handshake, CERT (11): * SSLv3, TLS handshake, Server key exchange (12): * SSLv3, TLS handshake, Server finished (14): * SSLv3, TLS handshake, Client key exchange (16): * SSLv3, TLS change cipher, Client hello (1): * SSLv3, TLS handshake, Finished (20): * SSLv3, TLS change cipher, Client hello (1): * SSLv3, TLS handshake, Finished (20): * SSL connection using TLSv1.2 / ECDHE-RSA-DES-CBC3-SHA * Server certificate: * subject: C=US; ST=CA; CN=host * start date: -08-07 00:00:00 GMT * expire date: -08-12 12:00:00 GMT * subjectAltName: host matched * issuer: C=US; O=DigiCert * SSL certificate verify ok. * Server auth using Basic with user 'userFoo' > GET /rest/api/2/issue/SECRET HTTP/1.1 > Authorization: Basic ...== > User-Agent: curl/7.37.0 > Host: host > Accept: */* > < HTTP/1.1 403 Forbidden * Server Apache-Coyote/1.1 is not blacklisted < Server: Apache-Coyote/1.1 < X-AREQUESTID: 322x3087x1 < Set-Cookie: JSESSIONID=...; Path=/; Secure; HttpOnly < X-Seraph-LoginReason: AUTHENTICATION_DENIED < WWW-Authenticate: OAuth realm="https%3A%2F%2Fhost" < X-ASESSIONID: pr... < X-Content-Type-Options: nosniff < X-Authentication-Denied-Reason: CAPTCHA_CHALLENGE; login-url=https://host/login.jsp < Content-Type: text/html;charset=UTF-8 < Content-Length: 3631 < Date: Fri, 29 Aug 2014 12:22:18 GMT < Forbidden (403)

Encountered a "403 - Forbidden" error while loading this page.

Go to JIRA home

* Connection #0 to host host left intact