Previously working aliases on NSS volume now have access forbidden error 403
ipp imanager the apache manual etc are all working -

the Apache2 error_log reports Permission denied for the alias

the alias has both www and wwwrun read and filescan rights for the nss directory

I suspect that a universal password policy applied to the container may have affected the wwwrun account - does it have a password?

Any help please