mod_cern_meta/3366: I am getting this - (11)Resource temporarily unavailable: couldn't spawn child process - on very busy servers

1998-11-09 Thread Kevin Goddard

Number: 3366
Category:   mod_cern_meta
Synopsis:   I am getting this - (11)Resource temporarily unavailable: 
couldn't spawn child process - on very busy servers
Confidential:   no
Severity:   critical
Priority:   medium
Responsible:apache
State:  open
Class:  sw-bug
Submitter-Id:   apache
Arrival-Date:   Sun Nov  8 16:10:00 PST 1998
Last-Modified:
Originator: [EMAIL PROTECTED]
Organization:
apache
Release:1.3.3
Environment:
Here is the output from a Uname -a:
Linux server.domain.com 2.0.34 #9 Wed Nov 4 15:46:51 EST 1998 i686 unknown
The server is a Dell Poweredge 2300 with 256 MB of RAM and a Pentium II 400 
processor.  I am having the exact same problem on three identical machines.  
All running the same version of Linux with identical Hard ware configuration
Description:
Okay I have seen this problem listed before, and I have applied every single 
fix listed.  The server is not listening to any port but 80.  Here is a list of 
a ulimit -a:
core file size (blocks)  100
data seg size (kbytes)   unlimited
file size (blocks)   unlimited
max memory size (kbytes) unlimited
stack size (kbytes)  8192
cpu time (seconds)   unlimited
max user processes   unlimited
pipe size (512 bytes)8
open files   1024
virtual memory (kbytes)  2105343

As you can see, but the user processes and the open files is very high.  I am 
currently getting this error message on one machine which has 227 httpd 
processes running and 600 tcp connections to it.  I have the HARD_SERVER_LIMIT 
set to 1000.  The following info is in my config:
MaxClients 400
StartServers 100
MinSpareServers 50
MaxSpareServers 100
MaxRequestsPerChild 10
The server works fine after restarting it for a certain lenght of time (less 
then 30 minutes) and then proceeds to generate (11)Resource temporarily 
unavailable: couldn't spawn child process for any CGi's that run on it.  Though 
we can restart the server every 15 or so minutes, I believe that Apache should 
run a bit better.  I have the same version running on 3 other machines that are 
a different hardware configuration (they have Pentium II 300's) that are 
running fine.  They all run anywhere between 200 to 1000 tcp connections at one 
time.
How-To-Repeat:
You can go to http://www.draddog.com/sanctum/calcrank.html and enter 100 for 
both boxes and hit submit.  It may or may not error out.
Fix:

Audit-Trail:
Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include [EMAIL PROTECTED] in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.  ]
[Reply only with text; DO NOT SEND ATTACHMENTS! ]





Re: mod_cern_meta/3366: I am getting this - (11)Resource temporarily unavailable: couldn't spawn child process - on very busy servers

1998-11-09 Thread Marc Slemko
The following reply was made to PR mod_cern_meta/3366; it has been noted by 
GNATS.

From: Marc Slemko [EMAIL PROTECTED]
To: Kevin Goddard [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: mod_cern_meta/3366: I am getting this - (11)Resource temporarily
 unavailable: couldn't spawn child process - on very busy servers
Date: Sun, 8 Nov 1998 16:16:13 -0800 (PST)

 On 9 Nov 1998, Kevin Goddard wrote:
 
  Here is the output from a Uname -a:
  Linux server.domain.com 2.0.34 #9 Wed Nov 4 15:46:51 EST 1998 i686 unknown
  The server is a Dell Poweredge 2300 with 256 MB of RAM and a Pentium II 400 
  processor.  I am having the exact same problem on three identical machines.  
  All running the same version of Linux with identical Hard ware configuration
  Description:
  Okay I have seen this problem listed before, and I have applied every single 
  fix listed.  The server is not listening to any port but 80.  Here is a list 
  of a ulimit -a:
  core file size (blocks)  100
  data seg size (kbytes)   unlimited
  file size (blocks)   unlimited
  max memory size (kbytes) unlimited
  stack size (kbytes)  8192
  cpu time (seconds)   unlimited
  max user processes   unlimited
  pipe size (512 bytes)8
  open files   1024
  virtual memory (kbytes)  2105343
  
  As you can see, but the user processes and the open files is very high.  I 
  am currently getting this error message on one machine which has 227 httpd 
  processes running and 600 tcp connections to it.  I have the 
  HARD_SERVER_LIMIT set to 1000.  The follo wing info is in my config:
 
 How many processes are running at the time, both total and for the user
 Apache runs as?
 
 What does cat /proc/sys/kernel/file-max show?
 
 Do you have any reason to think this is anything other than Linux simply
 running into file or process number restrictions?  Linux has some very
 annoying such restrictions that can be a pain to remove.
 
 What ulimit returns means nothing if the kernel limits are lower.
 


Re: mod_cern_meta/3366: I am getting this - (11)Resource temporarily unavailable: couldn't spawn child process - on very busy servers

1998-11-09 Thread Marc Slemko
The following reply was made to PR mod_cern_meta/3366; it has been noted by 
GNATS.

From: Marc Slemko [EMAIL PROTECTED]
To: Kevin Goddard [EMAIL PROTECTED]
Cc: Apache bugs database [EMAIL PROTECTED]
Subject: Re: mod_cern_meta/3366: I am getting this - (11)Resource temporarily
 unavailable: couldn't spawn child process - on very busy servers
Date: Sun, 8 Nov 1998 17:02:02 -0800 (PST)

 On Sun, 8 Nov 1998, Kevin Goddard wrote:
 
  How many processes are running at the time, both total and for the user
  Apache runs as?
  
  323 for all of the users
  293 for nobody (the user Apache runs as)
 
 And this is when the problem is happening?
 
 So ps ax | wc will show those numbers?
 
 Are you sure that the ulimits you show are the ones set when Apache is
 started?
 
  What does cat /proc/sys/kernel/file-max show?
  1024
  
  Do you have any reason to think this is anything other than Linux simply
  running into file or process number restrictions?  Linux has some very
  annoying such restrictions that can be a pain to remove.
  Yeah I have removed as many file limits as I could find.  Unfortunatly the 3 
  other machines are running the exact same config without the problem popping 
  up.  
  Either it is a hard ware problem with the PII 400's or it is something I 
  cannot figure.
 
 This is most likely a Linux problem.
 
 The other servers may well have slightly different traffic distribution,
 different numbers of CGIs, etc.
 


Re: os-windows/2555: ISAPI: DLLs used by an ISA are not found in the ISA's directory

1998-11-09 Thread kparz
[In order for any reply to be added to the PR database, ]
[you need to include [EMAIL PROTECTED] in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.  ]
[Reply only with text; DO NOT SEND ATTACHMENTS! ]


Synopsis: ISAPI: DLLs used by an ISA are not found in the ISA's directory

State-Changed-From-To: open-feedback
State-Changed-By: [EMAIL PROTECTED]
State-Changed-When: Mon Nov  9 05:25:19 PST 1998
State-Changed-Why:
The entire os_canonical_filename processing has been 
rewritten.  Could you give it a try again with the
latest CVS or the next release, and report back?
Thanks!



Re: os-windows/2915: Files directive does not work in httpd.conf

1998-11-09 Thread kparz
[In order for any reply to be added to the PR database, ]
[you need to include [EMAIL PROTECTED] in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.  ]
[Reply only with text; DO NOT SEND ATTACHMENTS! ]


Synopsis: Files directive does not work in httpd.conf

State-Changed-From-To: open-closed
State-Changed-By: [EMAIL PROTECTED]
State-Changed-When: Mon Nov  9 05:32:08 PST 1998
State-Changed-Why:
The Files directive was definitely having some problems
because of some problems with the processing in 
os_canonical_filename.  os_canonical_filename has been
rewritten to solve some of this problems, and the
Files directive should be fixed now.  The fix
is in CVS and should be reflected in the next release.

Thanks for using Apache.



Re: os-windows/3064: UNC names, ALIAS directive, SSI does not work

1998-11-09 Thread kparz
[In order for any reply to be added to the PR database, ]
[you need to include [EMAIL PROTECTED] in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.  ]
[Reply only with text; DO NOT SEND ATTACHMENTS! ]


Synopsis: UNC names, ALIAS directive, SSI does not work

State-Changed-From-To: open-feedback
State-Changed-By: [EMAIL PROTECTED]
State-Changed-When: Mon Nov  9 05:44:21 PST 1998
State-Changed-Why:
There were problems in the routine os_canonical_filename
which did not handle UNC names correctly.  This routine
has been rewritten, and should handle UNCs better now.
Please try again using the latest CVS or
the next release and report back.

Thanks for using Apache!



Re: os-windows/3232: spurious access denied for URL with drive letter

1998-11-09 Thread kparz
[In order for any reply to be added to the PR database, ]
[you need to include [EMAIL PROTECTED] in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.  ]
[Reply only with text; DO NOT SEND ATTACHMENTS! ]


Synopsis: spurious access denied for URL with drive letter

State-Changed-From-To: open-feedback
State-Changed-By: [EMAIL PROTECTED]
State-Changed-When: Mon Nov  9 05:47:57 PST 1998
State-Changed-Why:
There was a problem in sub_canonical_filename in which
the terminating null on the filename wasn't always correctly
placed.  The os_canonical_filename processing has changed.
Please try again with the latest CVS or the next release
and report back.

Thanks for using Apache.



Re: os-windows/2061: Not all timefmt's are supported on NT

1998-11-09 Thread kparz
[In order for any reply to be added to the PR database, ]
[you need to include [EMAIL PROTECTED] in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.  ]
[Reply only with text; DO NOT SEND ATTACHMENTS! ]


Synopsis: Not all timefmt's are supported on NT

State-Changed-From-To: open-closed
State-Changed-By: [EMAIL PROTECTED]
State-Changed-When: Mon Nov  9 05:52:37 PST 1998
State-Changed-Why:
So true.  strftime on Windows does not support all of 
the time formats.  Manoj has manually coded implementations
for these missing time formats.  The fix is in CVS and
should be available in the next release.

Thanks for using Apache.



RE: os-windows/2555: ISAPI: DLLs used by an ISA are not found in the ISA's directory

1998-11-09 Thread Jesse Pelton
The following reply was made to PR os-windows/2555; it has been noted by GNATS.

From: Jesse Pelton [EMAIL PROTECTED]
To: '[EMAIL PROTECTED]' [EMAIL PROTECTED]
Cc: '[EMAIL PROTECTED]' [EMAIL PROTECTED]
Subject: RE: os-windows/2555: ISAPI: DLLs used by an ISA are not found in 
the ISA's directory
Date: Mon, 9 Nov 1998 10:11:59 -0500 

 The problem persists in the source tree captured in
 apache-1_3_19981109141211_tar.


mod_auth-any/3367: Satisfy ignores Limit context

1998-11-09 Thread Catherine CHAT

Number: 3367
Category:   mod_auth-any
Synopsis:   Satisfy ignores Limit context
Confidential:   no
Severity:   critical
Priority:   medium
Responsible:apache
State:  open
Class:  sw-bug
Submitter-Id:   apache
Arrival-Date:   Mon Nov  9 07:20:01 PST 1998
Last-Modified:
Originator: [EMAIL PROTECTED]
Organization:
apache
Release:1.2.6
Environment:
SunOS 5.6 Generic sun4d sparc SUNW, SPARCserver-1000
Description:
I want to give GETPOST access by hostname OR username 
and PUT access by hostname AND by username. Si I thought I could write  
the following in my access.conf file :

Location ~ /intranet
AllowOverride None
AuthType Basic
AuthName Intranet
AuthUserFile /usr/local/etc/apacheserver/conf/passwd.conf
AuthGroupFile /usr/local/etc/apacheserver/conf/group.conf
Limit GET POST
order deny,allow
deny from all
allow from .toto.fr
require group mygroup
Satisfy any
/Limit
Limit PUT
require group admin
Satisfy all
/Limit
/Location

But only the last Satisfy directive is applied and applied to GET POST 
and PUT access method ! Is it possible to restrict the Satisfy directive 
to apply only within the Limit directive
How-To-Repeat:
Try the above access.conf file.
Fix:
Restrict the Satisfy directive to apply only within the Limit directive.
Audit-Trail:
Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include [EMAIL PROTECTED] in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.  ]
[Reply only with text; DO NOT SEND ATTACHMENTS! ]





Re: general/3338: src/include/ap_config_auto.h #endif not pressent

1998-11-09 Thread marc
[In order for any reply to be added to the PR database, ]
[you need to include [EMAIL PROTECTED] in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.  ]
[Reply only with text; DO NOT SEND ATTACHMENTS! ]


Synopsis: src/include/ap_config_auto.h   #endif not pressent

State-Changed-From-To: feedback-closed
State-Changed-By: marc
State-Changed-When: Mon Nov  9 08:03:18 PST 1998
State-Changed-Why:
User can't duplicate problem.



Re: general/3338: src/include/ap_config_auto.h #endif notpressent (fwd)

1998-11-09 Thread Marc Slemko
The following reply was made to PR general/3338; it has been noted by GNATS.

From: Marc Slemko [EMAIL PROTECTED]
To: Apache bugs database [EMAIL PROTECTED]
Cc:  Subject: Re: general/3338: src/include/ap_config_auto.h   #endif 
notpressent
 (fwd)
Date: Mon, 9 Nov 1998 07:59:08 -0800 (PST)

 -- Forwarded message --
 Date: Mon, 09 Nov 1998 12:50:28 +0100
 From: Manuel Mollar [EMAIL PROTECTED]
 To: Marc Slemko [EMAIL PROTECTED]
 Subject: Re: general/3338: src/include/ap_config_auto.h   #endif 
notpressent
 
 Sorry by the delay:
 
 I have repeated the wole process of instalation of php and apache 1.3.3 and 
the reported error does not appear.
 Absolutely sorry
 
 --
 Manuel Mollar VillanuevaI love mail.
 http://moon.inf.uji.es  Te das cuen,
 mailto:[EMAIL PROTECTED]   torpedo?
 
 
 


Re: os-linux/3353: Server processes die, only one remains (root)

1998-11-09 Thread Josef Chladek
i upgraded the kernel now to 2.0.35, still the same problem..., as i can
see from the bugs-db, the problem is not only known for linux, please,
please help...

thanks
josef

 State-Changed-From-To: open-feedback
 State-Changed-By: marc
 State-Changed-When: Fri Nov  6 08:31:01 PST 1998
 State-Changed-Why:
 Is there anything in the error log?
 
 Did this just start all of a sudden at one time?  If so, is
 there anything you did that could have caused it?
 
 Are you using NFS?
 



Re: os-windows/2555: ISAPI: DLLs used by an ISA are not found in the ISA's directory

1998-11-09 Thread kparz
[In order for any reply to be added to the PR database, ]
[you need to include [EMAIL PROTECTED] in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.  ]
[Reply only with text; DO NOT SEND ATTACHMENTS! ]


Synopsis: ISAPI: DLLs used by an ISA are not found in the ISA's directory

State-Changed-From-To: feedback-open
State-Changed-By: [EMAIL PROTECTED]
State-Changed-When: Mon Nov  9 10:24:31 PST 1998
State-Changed-Why:
Ok.  I'm changing the state of the PR back to open.
More investigation is needed on how the DLLs are loaded.

Thanks for getting back to us.



Re: os-aix/2785: Support for System Resource Controller

1998-11-09 Thread rbbloom
[In order for any reply to be added to the PR database, ]
[you need to include [EMAIL PROTECTED] in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.  ]
[Reply only with text; DO NOT SEND ATTACHMENTS! ]


Synopsis: Support for System Resource Controller

State-Changed-From-To: open-closed
State-Changed-By: [EMAIL PROTECTED]
State-Changed-When: Mon Nov  9 11:12:57 PST 1998
State-Changed-Why:
[This is a standard response.]
No response from submitter, assuming issue has been resolved.



Re: os-aix/2785: Support for System Resource Controller

1998-11-09 Thread rbbloom
[In order for any reply to be added to the PR database, ]
[you need to include [EMAIL PROTECTED] in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.  ]
[Reply only with text; DO NOT SEND ATTACHMENTS! ]


Synopsis: Support for System Resource Controller

State-Changed-From-To: closed-open
State-Changed-By: [EMAIL PROTECTED]
State-Changed-When: Mon Nov  9 11:16:48 PST 1998
State-Changed-Why:
Don't know why it was closed, I am re-opening it, because I
didn't mean to close it.



Re: os-linux/3343: Server dies after 1-20 hours of usage.

1998-11-09 Thread Mark
The following reply was made to PR os-linux/3343; it has been noted by GNATS.

From: Mark [EMAIL PROTECTED]
To: Marc Slemko [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: os-linux/3343: Server dies after 1-20 hours of usage.
Date: Mon, 09 Nov 1998 21:34:07 +

 Marc Slemko wrote:
 
  On 6 Nov 1998, Mark wrote:
 
   The following reply was made to PR os-linux/3343; it has been noted by 
   GNATS.
  
   From: Mark [EMAIL PROTECTED]
   To: [EMAIL PROTECTED]
   Cc: [EMAIL PROTECTED]
   Subject: Re: os-linux/3343: Server dies after 1-20 hours of usage.
   Date: Fri, 06 Nov 1998 21:36:06 +
  
[EMAIL PROTECTED] wrote:
  
 [In order for any reply to be added to the PR database, ]
 [you need to include [EMAIL PROTECTED] in the Cc line ]
 [and leave the subject line UNCHANGED.  This is not done]
 [automatically because of the potential for mail loops. ]
 [If you do not include this Cc, your reply may be ig-   ]
 [nored unless you are responding to an explicit request ]
 [from a developer.  ]
 [Reply only with text; DO NOT SEND ATTACHMENTS! ]

 Synopsis: Server dies after 1-20 hours of usage.

 Comment-Added-By: lars
 Comment-Added-When: Fri Nov  6 10:26:46 PST 1998
 Comment-Added:

 Are you using NFS?
 Any third party modules?
  
No.  NFS is disabled, and we did not compile any 3rd party modules into
the server.  The only extra module that I enabled was the status
module.  The server ran fine for about 6 months before this started.  Is
there anything in the OS itself that may have changed to cause this
problem?
 
  Did you upgrade your kernel version or any libraries, especially libc
  around when it started happening?
 
 No, we did not make any such changes to the machine since the end of Septemper.
 This problem started well afterwards.  It is a friend's machine, and he did 
tell
 me one thing that is interesting about this problem: it seems to be happening
 consistently between 6:30am and 8:30am CST.  We checked for cron jobs running 
at
 this time, and we didn't find any.  Are there any new attacks against the 
server
 that you know of that could cause this behavior?